Question 1

The cost of setting up a virtual private network (VPN) is usually high.

Accepted Answer

The cost of setting up a VPN can vary depending on the provider, but it is not necessarily high. There are many affordable VPN options available.

Question 2

In symmetric encryption,the same key is used to encrypt and decrypt a message.

Accepted Answer

In symmetric encryption, the same key is used for both encrypting and decrypting a message, making it a faster and more efficient encryption method compared to asymmetric encryption, where two different keys are used for encryption and decryption.

Question 3

_____ is the process of capturing and recording network traffic.

Accepted Answer

Sniffing is the process of capturing and recording network traffic. It is often used by hackers to intercept sensitive information such as passwords or credit card numbers. Phishing, spoofing, and pharming are all types of attacks that involve tricking users into revealing their personal information, but they do not necessarily involve capturing network traffic.

Question 4

A level 2 security system protects _____.

Accepted Answer

A level 2 security system protects back-end systems.

Question 5

In the context of computer and network security,_____ means that computers and networks are operating and authorized users can access the information they need.

Accepted Answer

Availability refers to the accessibility of systems and data by authorized users. It ensures that critical systems and information are available to the authorized individuals who need them, and that the systems remain operational and usable without interruption.

Question 6

_____ is a computer crime that involves destroying or disrupting computer services.

Accepted Answer

Sabotage is the act of intentionally destroying or disrupting computer services, which is a type of computer crime. Slander and libel are forms of defamation that involve making false statements about someone, and keystroke logging is a method used to monitor computer activity without permission, which can also be considered a computer crime but does not necessarily involve destroying or disrupting services.

Question 7

In the context of computer and network security,_____ refers to the accuracy of information resources within an organization.

Accepted Answer

Integrity refers to the accuracy and consistency of information resources within an organization. It ensures that data is not modified, tampered with or deleted without authorization, and that it remains complete and accurate. Other options, such as confidentiality (ensuring that sensitive data is not disclosed to unauthorized parties), availability (ensuring that data and systems are accessible and functional) and validity (ensuring that data is authentic and can be trusted) are also important aspects of computer and network security, but they are not specifically related to accuracy and consistency of data.

Question 8

An intrusion detection system (IDS) cannot prevent denial-of-service (DoS) attacks.

Accepted Answer

The answer of An intrusion detection system (IDS) cannot prevent...

Question 9

Similar to phishing,_____ is directing Internet users to fraudulent Web sites with the intention of stealing their personal information,such as Social Security numbers,passwords,bank account numbers,and credit card numbers.

Accepted Answer

The practice described in the question is called "pharming." It is a type of online scam in which Internet users are redirected to a fake Web site designed to look like a legitimate one, in order to trick them into divulging personal information.

Question 10

An ideal password should be eight characters or longer.

Accepted Answer

An ideal password should be eight characters or longer to ensure better security.

Question 11

Data encryption transforms data into a scrambled form called ciphertext.

Accepted Answer

Data encryption does indeed transform data into a scrambled form called ciphertext.

Question 12

Terminal resource security is a software feature that erases the screen and signs the user off automatically after a specified length of inactivity.

Accepted Answer

Terminal resource security is a real software feature that automatically erases the screen and logs the user off after a predefined time of inactivity. This feature is used to protect confidential information from unauthorized access when the user is not around.

Question 13

A level 1 security system is used to protect _____ against unauthorized access.

Accepted Answer

The answer of A level 1 security system is used...

Question 14

A level 3 security system focuses on protecting _____.

Accepted Answer

A level 3 security system typically focuses on protecting corporate networks, ensuring that the entire network infrastructure is secure from unauthorized access and threats.

Question 15

Backup facilities should never be shared in an attempt to reduce costs.

Accepted Answer

Sharing backup facilities can be cost-effective and efficient, as long as proper security measures and access controls are in place to protect the data.

Question 16

The main advantage of asymmetric encryption is that it is faster and requires only a small amount of processing power.

Accepted Answer

The main advantage of asymmetric encryption is its ability to provide secure communication over an insecure channel without requiring both parties to share a secret key. However, asymmetric encryption is slower and requires more processing power compared to symmetric encryption.

Question 17

_____ can interfere with users' control of their computers,through such methods as installing additional software and redirecting Web browsers.

Accepted Answer

Spyware is a type of malicious software that can infiltrate a user's computer and interfere with their control of it by installing additional software without their consent, redirecting web browsers, and gathering personal information. Kernels are the central component of an operating system and do not typically interfere with user control. Cookies and log files may track user activity, but they do not interfere with computer control.

Question 18

In the context of computer and network security,_____ means that a system must not allow the disclosing of information by anyone who is not authorized to access it.

Accepted Answer

Confidentiality refers to the protection of information from being disclosed to unauthorized individuals, ensuring that only those who are authorized to access the information can do so. Validity refers to the accuracy and authenticity of data, integrity refers to the prevention of unauthorized modification or destruction of data, and availability refers to ensuring that authorized users have access to the information they need when they need it. None of these concepts specifically address the issue of protecting information from unauthorized disclosure, making B the best choice for this question.

Question 19

Corner bolts are an expensive way to secure a computer to a desktop or a counter.

Accepted Answer

Corner bolts are generally considered an inexpensive and effective method for securing a computer to a desktop or counter.

Question 20

Symmetric encryption is also called public key encryption.

Accepted Answer

Symmetric encryption and public key encryption are two different forms of encryption. Symmetric encryption uses the same key for both encryption and decryption, while public key encryption uses a combination of a public key to encrypt and a private key to decrypt.

Quiz 5: Protecting Information Resources