Question 1

_____ monitor and record the keys pressed on a keyboard and can be software or hardware devices.

Accepted Answer

Keystroke loggers are designed to monitor and record the keys pressed on a keyboard, and they can be implemented as either software or hardware devices.

Question 2

In the context of e-commerce transaction security measures, authentication is a critical factor because it ensures that:

Accepted Answer

Authentication in e-commerce is crucial for verifying that the person making a transaction with a credit card is indeed the legitimate owner of that card, helping to prevent unauthorized use and fraud.

Question 3

Which statement is true of symmetric encryption?

Accepted Answer

DC) Sharing a key securely over the Internet is a challenge in symmetric encryption because the same key used for encryption is also used for decryption. This means the key must be transmitted or shared in a secure manner to avoid interception.D) Digital signatures typically require asymmetric encryption, where a private key is used for signing, and a public key is used for verification. Symmetric encryption, using the same key for encryption and decryption, does not facilitate the creation of digital signatures in the same way.

Question 4

Which statement is true of asymmetric encryption?

Accepted Answer

Asymmetric encryption, unlike symmetric encryption, uses two keys (a public key and a private key) for encryption and decryption, which requires more processing power due to the complex mathematical algorithms involved.

Question 5

Data sent through a virtual private network (VPN)can be encrypted using the _____.

Accepted Answer

Layer Two Tunneling Protocol (L2TP) is commonly used in conjunction with VPNs to support the creation of secure tunnels and the encryption of data. UDP, TCP, and ICMP are protocols used for data transmission, but they do not inherently provide encryption for VPNs.

Question 6

_____  is an example of antispyware software.

Accepted Answer

STOPzilla is an example of antispyware software designed to detect, block, and remove spyware and malware from computers.

Question 7

_____, a more recent cryptographic protocol, ensures data security and integrity over public networks, such as the Internet.

Accepted Answer

Transport Layer Security (TLS) is the correct answer because it is a widely adopted security protocol designed to facilitate privacy and data security for communications over the Internet.

Question 8

_____ outlines procedures for keeping an organization operational in the event of a natural disaster or a network attack or intrusion.

Accepted Answer

Business continuity planning is specifically designed to outline procedures for maintaining operations during and after a significant disruption, such as a natural disaster or a network attack.

Question 9

_____ is also known as secret key encryption.

Accepted Answer

Symmetric encryption is also known as secret key encryption because the same key is used for both encryption and decryption.

Question 10

_____ are an inexpensive way to secure a computer to a desktop or counter and often have locks as an additional protection against theft.

Accepted Answer

Corner bolts are designed to physically secure computers or other devices to a desk or counter, often including a lock mechanism for added security. This makes them an inexpensive and effective theft deterrent.

Question 11

The main function of Cyber Incident Response Capability (CIRC)is to _____.

Accepted Answer

The main function of Cyber Incident Response Capability (CIRC) is to provide information on security incidents. This includes identifying, managing, recording, and analyzing security threats or incidents in real-time. CIRCs are designed to help organizations respond to and recover from cyber incidents effectively.

Question 12

A(n)_____ network is often used so that remote users have a secure connection to an organization's network.

Accepted Answer

A Virtual Private Network (VPN) is often used to create a secure connection to an organization's network for remote users, allowing them to access resources as if they were directly connected to the network.

Question 13

In data encryption, the https in a browser address bar indicates a safe HTTP connection over _____.

Accepted Answer

HTTPS (Hypertext Transfer Protocol Secure) is a secure version of HTTP that uses Transport Layer Security (TLS) or Secure Sockets Layer (SSL) to encrypt the communication between a client and a server. TLS and SSL are cryptographic protocols that provide secure communication over a computer network.

Question 14

_____  is a form of spyware that collects information about a user (without the user's consent)to determine which commercials to display in the user's Web browser.

Accepted Answer

Adware is specifically designed to display advertisements based on the collected data about a user's browsing habits without their consent, fitting the description provided.

Question 15

_____ is a type of data encryption that enables users of the Internet to securely and privately exchange data through the use of a pair of keys that is obtained from a trusted authority and shared through that authority.

Accepted Answer

A public key infrastructure (PKI) is the correct answer because it involves the use of a pair of keys (a public key and a private key) for secure data exchange over the Internet. The keys are issued by a trusted authority, ensuring secure and private communication.

Question 16

Which type of access control is used to protect systems from unauthorized access?

Accepted Answer

Passwords are a form of access control used to authenticate users and protect systems from unauthorized access.

Question 17

Which form of text needs to be unscrambled using a decryption key?

Accepted Answer

Ciphertext is the form of text that has been scrambled or encrypted and requires a decryption key to be unscrambled and read.

Question 18

_____ uses a public key known to everyone and a private key known only to the recipient.

Accepted Answer

Asymmetric encryption uses a pair of keys—a public key that is shared with everyone and a private key that is kept secret by the recipient. This method allows anyone to encrypt a message using the recipient's public key, but only the recipient can decrypt it using their private key.

Question 19

_____ is a commonly used encryption protocol that manages transmission security on the Internet.

Accepted Answer

Secure Sockets Layer (SSL) is a widely used encryption protocol designed to provide secure communication over the Internet. It ensures that data transmitted between web servers and browsers remains private and integral.

Question 20

In the event of a network attack or intrusion, a _____ lists the tasks that must be performed by the organization to restore damaged data and equipment.

Accepted Answer

A disaster recovery plan is specifically designed to outline the steps an organization should take to recover from a disaster, which includes restoring damaged data and equipment following a network attack or intrusion.

Quiz 5: Protecting Information Resources