Deck 26: Information Security

Question 1

Which of the following is not one of the three primary information security areas?

A) Authentication and authorization
B) Prevention and resistance
C) Detection and resistance
D) None of these

Answer 1

C
Explanation: Detection and resistance is not one of the three primary information security areas, it should be detection and response.

Question 2

What identifies the rules required to maintain information security?

A) Information security plan
B) Information security policies
C) Authentication
D) Biometrics

Answer 2

B
Explanation: This is the definition of information security policies.

Question 3

What is the recommended way to implement information security lines of defense?

A) People first, technology second
B) Technology first, people second
C) None of these
D) All of these

Answer 3

A
Explanation: An organization should implement information security lines of defense through people first and technology second.

Question 4

What are the technologies available to help prevent and build resistance to attacks?

A) Content filtering, encryption, firewalls
B) Content filtering, encryption, insiders
C) Encryption, firewalls, insiders
D) Firewalls, social engineering, encryption

Question 5

What is the most secure type of authentication?

A) Something the user knows such as a user ID and password
B) Something the user has such as a smart card or token
C) Something that is part of the user such as a fingerprint or voice signature
D) All of these

Question 6

Which of the following can be completed by encryption?

A) Switch the order of characters
B) Replace characters with other characters
C) Use a mathematical formula to convert the information into some sort of code
D) All of these

Question 7

What is encryption?

A) Occurs when an organization uses software that filters content to prevent the transmission of unauthorized information
B) Scrambles information into an alternative form that requires a key or password to decrypt the information
C) Hardware and/or software that guards a private network by analyzing the information leaving and entering the network
D) A form of unsolicited email

Question 8

Which of the following is not considered a type of biometrics?

A) Voice
B) Face
C) Iris
D) None of these

Question 9

What occurs when an organization uses software that filters content to prevent the transmission of unauthorized information?

A) Biometrics
B) Encryption
C) Firewalls
D) None of these

Question 10

Where do organizations typically place firewalls?

A) Between a personal computer and the server
B) Between a personal computer and a printer
C) Between the server and the content filtering software
D) Between the server and the Internet

Question 11

What is the most costly and intrusive form of authentication?

A) Something the user knows such as a user ID and password
B) Something the user has such as a smart card or token
C) Something that is part of the user such as a fingerprint or voice signature
D) None of these

Question 12

Which of the following authentication methods is 100 percent accurate?

A) Smart card
B) Fingerprint authentication
C) User ID
D) None of these

Question 13

Which of the following is not one of the five steps for creating an information security plan?

A) Develop the information security policies
B) Communicate the information security policies
C) Revise and test the information security policies
D) None of these

Question 14

Which of the following does a firewall perform?

A) Examines each message that wants entrance to the network
B) Blocks messages without the correct markings from entering the network
C) Detects computers communicating with the Internet without approval
D) All of these

Question 15

What is spam?

A) A type of encryption
B) A type of content filtering
C) A form of unsolicited email
D) None of these

Question 16

What is the identification of a user based on a physical characteristic,such as a fingerprint,iris,face,voice,or handwriting?

A) Smart card
B) Token
C) Biometrics
D) Content filtering

Question 17

What is a method for confirming users' identities?

A) Authentication
B) Prevention
C) Detection
D) Response

Question 18

What is a device that is around the same size as a credit card,containing embedded technologies that can store information and small amounts of software to perform some limited processing?

A) Token
B) Password
C) Smart card
D) Biometrics

Question 19

What is social engineering?

A) Using one's social skills to trick people into revealing access credentials or other information valuable to the attacker
B) Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident
C) Small electronic devices that change user passwords automatically
D) A method for confirming user's identities

Question 20

Which term describes legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident?

A) Hactivist
B) Social engineering
C) Insiders
D) Virus

Question 21

Tokens are small electronic devices that change user passwords automatically.

Question 22

Which is a virus that opens a way into the network for future attacks?

A) Distributed denial-of-service attack
B) Worm
C) Denial-of-service attack
D) Backdoor programs

Question 23

Who finds hacking code on the Internet and click-and-point their way into systems to cause damage or spread viruses?

A) White-hat hackers
B) Black-hat hackers
C) Hactivists
D) Script kiddies

Question 24

Who are hackers with criminal intent?

A) White-hat hackers
B) Black-hat hackers
C) Crackers
D) Cyberterrorists

Question 25

Insiders are illegitimate users who purposely or accidentally misuse their access to the environment to do business.

Question 26

Who works at the request of the system owners to find system vulnerabilities and plug the holes?

A) White-hat hackers
B) Black-hat hackers
C) Hactivists
D) Script kiddies

Question 27

Who are those who seek to cause harm to people or to destroy critical systems or information and use the Internet as a weapon of mass destruction?

A) White-hat hackers
B) Black-hat hackers
C) Crackers
D) Cyberterrorists

Question 28

Who breaks into other people's computer systems and just looks around or steals and destroys information?

A) White-hat hacker
B) Black-hat hacker
C) Hactivist
D) Script kiddies

Question 29

A(n)information security ____________ details how an organization will implement the information security policies.

Question 30

Which of the following is a program or device that can monitor data traveling over a network?

A) Malicious code
B) Hoaxes
C) Spoofing
D) Sniffer

Question 31

Information security ______________ identify the rules required to maintain information security.

Question 32

What includes a variety of threats such as viruses,worms,and Trojan horses?

A) Malicious code
B) Hoaxes
C) Spoofing
D) Sniffer

Question 33

What attacks computer systems by transmitting a virus hoax,with a real virus attached?

A) Malicious code
B) Hoaxes
C) Spoofing
D) Sniffer

Question 34

If there is a security breach on your organizational information systems,which information security area is best suited to handle the breach?

A) Authentication and authorization
B) Prevention and resistance
C) Detection and response
D) Detection and resistance

Question 35

What is the forging of the return address on an email so that the email message appears to come from someone other than the actual sender?

A) Malicious code
B) Hoaxes
C) Spoofing
D) Sniffer

Question 36

The Trojan-horse virus hides inside other software,usually as an attachment or a downloadable file.

Question 37

What is the most common type of defense within detection and response technologies?

A) Malicious code
B) Token
C) User ID
D) Antivirus software

Question 38

What floods a website with so many requests for service that it slows down or crashes the site?

A) Computer virus
B) Worm
C) Denial-of-service attack
D) None of these

Question 39

What is a type of virus that spreads itself,not just from file to file,but also from computer to computer?

A) Computer virus
B) Worm
C) Denial-of-service attack
D) None of these

Question 40

Information security policies detail how an organization will implement the information security plan.

Question 41

____________ is the identification of a user based on a physical characteristic.

Question 42

Tokens are small electronic devices that change user passwords __________.

Question 43

Malicious code includes a variety of threats such as ______________,worms,and Trojan horses.

Question 44

___________ attack computer systems by transmitting a virus hoax,with a real virus attached.

Question 45

_________ have philosophical and political reasons for breaking into systems and will often deface the website as a protest.

Question 46

Spoofing is the forging of the _________ address on an email so that the email message appears to come from someone other than the actual sender.

Question 47

A(n)_______ is a program or device that can monitor data traveling over a network.

Question 48

_________-hat hackers work at the request of the system owners to find system vulnerabilities and plug the holes.

Question 49

___________ diving is a form of social engineering when a hacker looks through people's trash to find personal information.

Question 50

___________-hat hackers break into other people's computer systems and may just look around or may steal and destroy information.

Question 51

_________ scrambles information into an alternative form that requires a key or password to decrypt the information.

Question 52

Intrusion detection software (IDS)searches out patterns in information and network traffic to indicate __________ and quickly respond to prevent any harm.

Question 53

_________ filtering occurs when an organization uses software that filters content to prevent the transmission of unauthorized information.

Question 54

Social engineering is using one's _______ skills to trick people into revealing access credentials or other information valuable to the attacker.

Question 55

The most common type of defense within detection and response technologies is _________ software.

Question 56

Content filtering,_________,and firewalls are the three types of prevention and resistance technologies.

Question 57

Develop the information security policies is the ________________ step for creating an information security plan.

Question 58

___________ is a method for confirming users' identities.

Question 59

A(n)_________ is hardware and/or software that guards a private network by analyzing the information leaving and entering the network.

Question 60

Smart card is a(n)_______ that is around the same size as a credit card,containing embedded technologies that can store information and small amounts of software to perform some limited processing.

Question 61

Distributed denial-of-service attack (DDoS)attacks from multiple __________ that flood a website with so many requests for service that it slows down or crashes.

Question 62

A(n)_________ is software written with malicious intent to cause annoyance or damage.

Question 63

_______________ is a hacker with criminal intent.

Question 64

List and describe the three primary security areas.

Question 65

The ____ of Death is a common type of DDoS and occurs when thousands of computers try to access a website at the same time,overloading it and shutting it down.

Question 66

A(n)_________ is a type of virus that spreads itself,not only from file to file,but also from computer to computer.

Question 67

Describe the relationships and differences between hackers and viruses.

Question 68

Summarize the five steps to creating an information security plan.

Question 69

Describe authentication and the most secure type of authentication.

Question 70

Describe the relationship between information security policies and an information security plan.

Question 71

Denial-of-service attack (DoS)_______________ a website with so many requests for service that it slows down or crashes the site.

Question 72

_________ are people very knowledgeable about computers who use their knowledge to invade other people's computers.

Question 73

_______________ kiddies find hacking code on the Internet and click-and-point their way into systems to cause damage or spread viruses.

Question 74

_________ programs are viruses that open a way into the network for future attacks.

Question 75

Trojan-horse virus hides inside other ________,usually as an attachment or a downloadable file.

Question 76

_________ seek to cause harm to people or to destroy critical systems or information and use the Internet as a weapon of mass destruction.