Question 1

_____ are usually placed in front of a firewall and can identify attack signatures, trace patterns, generate alarms for a network administrator, and cause routers to terminate connections with suspicious sources.

Accepted Answer

Intrusion detection systems (IDS) are designed to monitor network and system traffic for suspicious activity and known threats, sending out alerts when they detect such activities. They are often placed in front of a firewall to identify potential threats before they reach the internal network.

Question 2

In the context of the common intentional security threats, which statement best describes a worm?

Accepted Answer

Worms are a type of malware that replicate themselves and spread across networks, but unlike viruses, they typically do not erase or modify data. They exploit vulnerabilities in software or operating systems to spread without needing to attach to a host program.

Question 3

_____ primarily control access to computers and networks and include devices for securing computers and peripherals from theft.

Accepted Answer

Physical security measures are designed to control access to computers and networks and include devices for securing computers and peripherals from theft. These measures focus on protecting the physical assets from unauthorized access or damage.

Question 4

A level 3 security system focuses on protecting the _____ against intrusion, denial-of-service attacks, and unauthorized access.

Accepted Answer

A level 3 security system is designed to protect the corporate network, which encompasses the overall infrastructure including back-end servers, front-end servers, and user workstations, against various cyber threats such as intrusion, denial-of-service attacks, and unauthorized access.

Question 5

In the context of intentional computer and network threats, a _____ combines the characteristics of computer viruses, worms, and other malicious codes with vulnerabilities found on public and private networks.

Accepted Answer

A blended threat is a sophisticated attack that combines the characteristics of viruses, worms, and other malicious software with vulnerabilities in networks to launch complex and damaging attacks.

Question 6

In the context of intentional computer and network threats, a _____ is a programming routine built into a system by its designer or programmer to bypass system security and sneak back into the system later to access programs or files.

Accepted Answer

A backdoor is a method used by the designer or programmer of a system to bypass security mechanisms and gain access to the system at a later time without going through the usual authentication processes. This can be used for maintenance, updates, or, maliciously, to access programs or files without detection.

Question 7

Which of the following is a biometric security measure?

Accepted Answer

Signature analysis is a biometric security measure that involves analyzing the physical act of signing, including the speed, pressure, and rhythm of a signature, to verify an individual's identity.

Question 8

In the context of security, _____ is an attack that takes advantage of the human element of security systems.

Accepted Answer

Social engineering is an attack strategy that exploits human psychology, rather than technical hacking techniques, to gain access to buildings, systems, or data.

Question 9

Which is a nonbiometric security measure?

Accepted Answer

Callback modems are a nonbiometric security measure because they do not rely on unique physical characteristics to identify users. Instead, they use a predetermined phone number to call back users and verify their identity.

Question 10

Which of the following intentional computer and network threats is a type of Trojan program used to release a virus, worm, or other destructive code?

Accepted Answer

A logic bomb is a type of Trojan program that is designed to execute or release a virus, worm, or other destructive code when specific conditions are met, such as on a particular date or when a user performs a certain action.

Question 11

In the context of firewall as a nonbiometric security measure, a _____ is software that acts as an intermediary between two systems.

Accepted Answer

A proxy server acts as an intermediary between two systems, filtering requests and improving security and privacy. Logic bombs, callback modems, and block multiplexers serve different purposes and are not intermediaries in network communications.

Question 12

Which of the following statements is true of a worm?

Accepted Answer

Worms are independent programs that replicate and spread themselves across networks without needing to attach to a host program, distinguishing them from viruses, which require a host program to spread.

Question 13

In the context of intentional security threats, _____ can erase data and wreak havoc on computers and networks but do not replicate themselves.

Accepted Answer

Trojan programs are designed to mislead users of their true intent. Unlike viruses and worms, they do not replicate themselves but can cause significant damage by erasing data or compromising system security. Worms and viruses, on the other hand, are known for their ability to replicate and spread across networks. McCumber cubes are a model for information security, not a form of malware.

Question 14

Which statement is true of firewalls?

Accepted Answer

Firewalls protect against external access, but they leave networks unprotected from internal intrusions.

Question 15

As a physical security measure, _____.

Accepted Answer

The answer of As a physical security measure, _____.
...

Question 16

A _____ is a type of an intentional computer and network threat.

Accepted Answer

A backdoor is a method by which unauthorized access can be obtained to a computer system, network, or software application, often without the knowledge or consent of the owner or operator. It is intentionally created for various purposes, including maintenance, but can be exploited for malicious activities such as data theft or unauthorized system access.

Question 17

Which statement is true of application-filtering firewalls?

Accepted Answer

Application-filtering firewalls, also known as proxy-based or stateful inspection firewalls, operate at a higher level of the OSI model compared to packet-filtering firewalls. They inspect the data being transmitted, making decisions based on the content of the traffic rather than just the header information like packet-filtering firewalls. This additional functionality requires more processing power and often more sophisticated software, which typically makes them more expensive than packet-filtering firewalls.

Question 18

In the context of intentional computer and network threats, a _____ floods a network or server with service requests to prevent legitimate users' access to the system.

Accepted Answer

A denial-of-service attack (DoS) specifically aims to flood a network or server with so many requests that it overwhelms the system, preventing legitimate users from accessing the service.

Question 19

When a computer is infected by a virus, _____.

Accepted Answer

Viruses can attach themselves to legitimate programs, increasing their file size as a result. This is a common symptom of a computer virus infection.

Question 20

Which biometric security measure compares the length of each finger, the translucence of fingertips, and the webbing between fingers against stored data to verify users' identities?

Accepted Answer

Hand geometry biometric security measures involve analyzing and measuring the physical characteristics of a user's hand, including the length of fingers, the translucence of fingertips, and the webbing between fingers, to verify their identity.

Quiz 5: Protecting Information Resources