Question 1

Matching
​Identify the letters of the choices that best match the phrases or definitions.
-Uses a single key to encrypt and decrypt information
A)​Private key encryption
B)​Public key encryption
C)​Network interface
D)​Asset
E)​Mitigation
F)​Transference
G)Attack
H)​Security
I)​Keystroke logger
J)Software reengineering

Accepted Answer

Private key encryption uses a single key for both encryption and decryption.

Answer: I
 Keystroke logger is a type of malicious software used to record keystrokes on a computer.

Answer: H
 Security refers to the measures taken to protect against unauthorized access or attacks on a system.

Question 2

As another one of his responsibilities, George captures information from clients about attacks they have borne and from their description, he identifies the kind of attack they have experienced.​
-Another of George's clients describes a situation in which a caller to their service desk pretended to be a legitimate user and requested that his password to his company account be changed. How does George categorize this incident?
A) Social engineering
B) Mail bombing
C) Spoofing
D) Privilege escalation

Accepted Answer

This incident is an example of social engineering, where the attacker is using manipulation and deception to gain access to sensitive information or systems.

Question 3

Matching
​Identify the letters of the choices that best match the phrases or definitions.
-Protects the system and keeps it safe, free from danger, and reliable
A)​Private key encryption
B)​Public key encryption
C)​Network interface
D)​Asset
E)​Mitigation
F)​Transference
G)Attack
H)​Security
I)​Keystroke logger
J)Software reengineering

Accepted Answer

Security is the best choice as it best matches the definition of protecting the system and keeping it safe from danger, as well as ensuring its reliability.

Question 4

George's firm contracts to provide risk management services for a wide range of smaller companies that cannot provide the service for themselves. One of George's responsibilities at the end of each month is to review the threats encountered by the companies and put them into the appropriate categories.
-Another of George's clients has software that is outdated and has become increasingly vulnerable to attack. How does George categorize this threat?
A) Human error
B) Technical obsolescence
C) Service failure
D) Espionage

Accepted Answer

The threat of outdated software falls under the category of technical obsolescence.

Question 5

Matching
​Identify the letters of the choices that best match the phrases or definitions.
-Might include company hardware, software, data, networks, people, or procedure
A)​Private key encryption
B)​Public key encryption
C)​Network interface
D)​Asset
E)​Mitigation
F)​Transference
G)Attack
H)​Security
I)​Keystroke logger
J)Software reengineering

Accepted Answer

Asset refers to any resource, whether physical or virtual, that has value to an organization.

Answer: H 
 Security refers to the protection of assets from unauthorized access, use, disclosure, disruption, modification, or destruction.

Answer: C 
 Network interface is a hardware or software module that connects a computer or other device to a network.

Answer: G 
 Attack refers to any deliberate action that exploits vulnerabilities in a system or network to compromise the confidentiality, integrity, or availability of data or systems.

Answer: A and B 
 Private key encryption and public key encryption are both methods of encrypting data to protect it from unauthorized access. Private key encryption uses a single key that is kept secret by the owner, while public key encryption uses a pair of keys, one of which is public and one of which is private.

Answer: E 
 Mitigation refers to any action taken to reduce the severity or impact of a security incident or threat.

Answer: F 
 Transference refers to the transfer of risk from one party to another, typically through insurance or other contractual agreements.

Answer: I 
 Keystroke logger is a type of software or hardware that records every keystroke made on a computer or other device, often used for surveillance or espionage.

Answer: J 
 Software reengineering refers to the process of modifying or rewriting existing software to improve its performance, maintainability, or other characteristics.

Question 6

Matching
​Identify the letters of the choices that best match the phrases or definitions.
-Uses analytical techniques to identify potential quality and performance improvements in an information system
A)​Private key encryption
B)​Public key encryption
C)​Network interface
D)​Asset
E)​Mitigation
F)​Transference
G)Attack
H)​Security
I)​Keystroke logger
J)Software reengineering

Accepted Answer

Software reengineering involves analyzing and improving existing software systems, including identifying areas for quality and performance improvements.

(Note: None of the other choices directly relate to this definition.)

Question 7

_____ is concerned with managerial policies and controls that ensure secure operations.
A) Procedural security
B) Network security
C) Operational security
D) Application security

Accepted Answer

The answer of _____ is concerned with managerial policies and...

Question 8

Matching
​Identify the letters of the choices that best match the phrases or definitions.
-Records everything that is typed into the keyboard, including passwords, while the system continues to function normally
A)​Private key encryption
B)​Public key encryption
C)​Network interface
D)​Asset
E)​Mitigation
F)​Transference
G)Attack
H)​Security
I)​Keystroke logger
J)Software reengineering

Accepted Answer

A keystroke logger records everything typed into the keyboard, including passwords, while the system continues to function normally.

Question 9

A(n) _____ can prevent an unauthorized person from booting a computer by using a CD-ROM or USB device.
A) boot-level password
B) application-level password
C) BIOS-level password
D) power-on password

Accepted Answer

The answer of A(n) _____ can prevent an unauthorized person...

Question 10

Matching
​Identify the letters of the choices that best match the phrases or definitions.
-A risk control strategy that reduces the impact of a risk by careful planning and preparation
A)​Private key encryption
B)​Public key encryption
C)​Network interface
D)​Asset
E)​Mitigation
F)​Transference
G)Attack
H)​Security
I)​Keystroke logger
J)Software reengineering

Accepted Answer

Mitigation is a risk control strategy that reduces the impact of a risk by careful planning and preparation.

Note: The other choices are not related to the definition provided.

Question 11

As another one of his responsibilities, George captures information from clients about attacks they have borne and from their description, he identifies the kind of attack they have experienced.​
-One of George's clients reports that the traffic on their network is being intercepted and scanned for valuable information. How does George categorize this incident?
A) Spoofing
B) Man in the middle
C) Dumpster diving
D) Sniffing

Accepted Answer

The answer of As another one of his responsibilities, George...

Question 12

George's firm contracts to provide risk management services for a wide range of smaller companies that cannot provide the service for themselves. One of George's responsibilities at the end of each month is to review the threats encountered by the companies and put them into the appropriate categories.
-One of his firm's clients details an incident in which a hacker - a former employee - thieved trade secrets from the client and threatened to release them to the competition if he was not paid. In which of the following categories should George place this incident?​
A) Vandalism
B) Trespass and espionage
C) Extortion
D) Software attack

Accepted Answer

The incident described involves extortion, as the former employee is making threats and demands for payment in exchange for not releasing valuable information to competitors. Vandalism does not accurately describe the situation, as no physical damage was done. Trespass and espionage may be some components of the incident but don't fully capture its essence. Software attack does not accurately describe the method of the attack, as it was carried out by a person rather than a program.

Question 13

List at least eight different tasks a service desk staff member might have to perform during a typical day.

Accepted Answer

The answer of List at least eight different tasks a...

Question 14

Response time is affected by _____.
A) system design
B) capabilities
C) follow-up messages
D) processing methods

Accepted Answer

The answer of Response time is affected by _____.
A) system...

Question 15

Matching
​Identify the letters of the choices that best match the phrases or definitions.
-An asymmetric kind of encryption
A)​Private key encryption
B)​Public key encryption
C)​Network interface
D)​Asset
E)​Mitigation
F)​Transference
G)Attack
H)​Security
I)​Keystroke logger
J)Software reengineering

Accepted Answer

Asymmetric encryption refers to the use of two keys, a public key and a private key, for encryption and decryption. Public key encryption is a type of asymmetric encryption where the public key is used for encryption and the private key is used for decryption.

Answer: A
 Private key encryption, also known as symmetric encryption, is a type of encryption where the same key is used for both encryption and decryption.

Answer: I
 A keystroke logger is a type of software or hardware that records every keystroke made on a computer, often used as a tool for spying or monitoring.

Answer: H
 Security refers to measures taken to protect against unauthorized access, use, disclosure, disruption, modification, or destruction of information or systems.

(Note: The other choices do not match the given phrase/definition.)

Question 16

A _____ is the main line of defense between a local network, or intranet, and the Internet.
A) malware
B) firewall
C) spyware
D) threat

Accepted Answer

A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a local network and the Internet, blocking unwanted traffic and preventing unauthorized access to the network. Malware, spyware, and threats are types of security risks that a firewall can help protect against, but they are not the main line of defense itself.

Question 17

Matching
​Identify the letters of the choices that best match the phrases or definitions.
-Hostile act that targets systems or a company itself
A)​Private key encryption
B)​Public key encryption
C)​Network interface
D)​Asset
E)​Mitigation
F)​Transference
G)Attack
H)​Security
I)​Keystroke logger
J)Software reengineering

Accepted Answer

The phrase "hostile act that targets systems or a company itself" refers to an attack.

Note: The other choices are not relevant to the given phrase or definition.

Question 18

Matching
​Identify the letters of the choices that best match the phrases or definitions.
-A risk control strategy that shifts risks to another asset or party
A)​Private key encryption
B)​Public key encryption
C)​Network interface
D)​Asset
E)​Mitigation
F)​Transference
G)Attack
H)​Security
I)​Keystroke logger
J)Software reengineering

Accepted Answer

Transference is a risk control strategy that shifts risks to another asset or party.

Answer: D 
 Asset refers to something valuable that is owned by an individual, organization or entity.

Answer: E 
 Mitigation is a risk control strategy that involves taking steps to reduce the likelihood or impact of a risk.

Answer: I 
 Keystroke logger is a type of malicious software that records the keystrokes made on a computer, which can be used to steal sensitive information such as passwords and credit card numbers.

Answer: J 
 Software reengineering is the process of modifying existing software to improve its performance, maintainability, or other characteristics.

The other choices are not relevant to the given phrases or definitions.

Question 19

Matching
​Identify the letters of the choices that best match the phrases or definitions.
-Combination of hardware and software that allows computers to interact with a network
A)​Private key encryption
B)​Public key encryption
C)​Network interface
D)​Asset
E)​Mitigation
F)​Transference
G)Attack
H)​Security
I)​Keystroke logger
J)Software reengineering

Accepted Answer

A network interface is a combination of hardware and software that allows computers to interact with a network.

Note: The other choices are not related to this definition.

Question 20

Typically, an intruder accesses a system using a compromised account, and may attempt a(n) _____, which is an unauthorized attempt to increase permission levels.
A) privilege escalation attack
B) denial-of-service attack
C) malware penetration attack
D) identity management invasion

Accepted Answer

The definition provided describes a privilege escalation attack - this is when a user tries to gain access to higher levels of permission than what they are authorized for. It is a common tactic used by intruders who have already gained access to a system to try to gain even more control. The other options given are not relevant to this specific scenario.

Quiz 12: Managing Systems Support and Security

Matching Identify the letters of the choices that best match the phrases or definitions. -Uses a single key to encrypt and decrypt information

Matching Identify the letters of the choices that best match the phrases or definitions. -Protects the system and keeps it safe, free from danger, and reliable

Matching Identify the letters of the choices that best match the phrases or definitions. -Might include company hardware, software, data, networks, people, or procedure

Matching Identify the letters of the choices that best match the phrases or definitions. -Uses analytical techniques to identify potential quality and performance improvements in an information system

_____ is concerned with managerial policies and controls that ensure secure operations.

Matching Identify the letters of the choices that best match the phrases or definitions. -Records everything that is typed into the keyboard, including passwords, while the system continues to function normally

A(n) _____ can prevent an unauthorized person from booting a computer by using a CD-ROM or USB device.

Matching Identify the letters of the choices that best match the phrases or definitions. -A risk control strategy that reduces the impact of a risk by careful planning and preparation

List at least eight different tasks a service desk staff member might have to perform during a typical day.

Response time is affected by _____.

Matching Identify the letters of the choices that best match the phrases or definitions. -An asymmetric kind of encryption

A _____ is the main line of defense between a local network, or intranet, and the Internet.

Matching Identify the letters of the choices that best match the phrases or definitions. -Hostile act that targets systems or a company itself

Matching Identify the letters of the choices that best match the phrases or definitions. -A risk control strategy that shifts risks to another asset or party

Matching Identify the letters of the choices that best match the phrases or definitions. -Combination of hardware and software that allows computers to interact with a network

Typically, an intruder accesses a system using a compromised account, and may attempt a(n) _____, which is an unauthorized attempt to increase permission levels.

Quiz 12: Managing Systems Support and Security

Matching ​Identify the letters of the choices that best match the phrases or definitions. -Uses a single key to encrypt and decrypt information

Matching ​Identify the letters of the choices that best match the phrases or definitions. -Protects the system and keeps it safe, free from danger, and reliable

Matching ​Identify the letters of the choices that best match the phrases or definitions. -Might include company hardware, software, data, networks, people, or procedure

Matching ​Identify the letters of the choices that best match the phrases or definitions. -Uses analytical techniques to identify potential quality and performance improvements in an information system

_____ is concerned with managerial policies and controls that ensure secure operations.

Matching ​Identify the letters of the choices that best match the phrases or definitions. -Records everything that is typed into the keyboard, including passwords, while the system continues to function normally

A(n) _____ can prevent an unauthorized person from booting a computer by using a CD-ROM or USB device.

Matching ​Identify the letters of the choices that best match the phrases or definitions. -A risk control strategy that reduces the impact of a risk by careful planning and preparation

List at least eight different tasks a service desk staff member might have to perform during a typical day.

Response time is affected by _____.

Matching ​Identify the letters of the choices that best match the phrases or definitions. -An asymmetric kind of encryption

A _____ is the main line of defense between a local network, or intranet, and the Internet.

Matching ​Identify the letters of the choices that best match the phrases or definitions. -Hostile act that targets systems or a company itself

Matching ​Identify the letters of the choices that best match the phrases or definitions. -A risk control strategy that shifts risks to another asset or party

Matching ​Identify the letters of the choices that best match the phrases or definitions. -Combination of hardware and software that allows computers to interact with a network

Typically, an intruder accesses a system using a compromised account, and may attempt a(n) _____, which is an unauthorized attempt to increase permission levels.

Matching Identify the letters of the choices that best match the phrases or definitions. -Uses a single key to encrypt and decrypt information

Matching Identify the letters of the choices that best match the phrases or definitions. -Protects the system and keeps it safe, free from danger, and reliable

Matching Identify the letters of the choices that best match the phrases or definitions. -Might include company hardware, software, data, networks, people, or procedure

Matching Identify the letters of the choices that best match the phrases or definitions. -Uses analytical techniques to identify potential quality and performance improvements in an information system

Matching Identify the letters of the choices that best match the phrases or definitions. -Records everything that is typed into the keyboard, including passwords, while the system continues to function normally

Matching Identify the letters of the choices that best match the phrases or definitions. -A risk control strategy that reduces the impact of a risk by careful planning and preparation

Matching Identify the letters of the choices that best match the phrases or definitions. -An asymmetric kind of encryption

Matching Identify the letters of the choices that best match the phrases or definitions. -Hostile act that targets systems or a company itself

Matching Identify the letters of the choices that best match the phrases or definitions. -A risk control strategy that shifts risks to another asset or party

Matching Identify the letters of the choices that best match the phrases or definitions. -Combination of hardware and software that allows computers to interact with a network