Question 1

_____ is software that secretly gathers information about users while they browse the Web.

Accepted Answer

The answer of _____ is software that secretly gathers information...

Question 2

A(n) _____ is a combination of hardware and software that acts as a filter or barrier between a private network and external computers or networks.

Accepted Answer

The answer of A(n) _____ is a combination of hardware...

Question 3

_____ is the unauthorized use of computer data for personal gain,such as transferring money from another's account or charging purchases to someone else's account.

Accepted Answer

The answer of _____ is the unauthorized use of computer...

Question 4

In _____ encryption,the same key is used to encrypt and decrypt a message.
A) symmetric
B) asymmetric
C) synchronous
D) asynchronous

Accepted Answer

In symmetric encryption, the same key is used for both encryption and decryption of a message. This makes it easier and faster to encrypt and decrypt data, but it also means that if the key is compromised, the security of the message is also compromised.

Question 5

_____ is sending fraudulent e-mails that seem to come from legitimate sources,such as a bank or university.

Accepted Answer

The answer of _____ is sending fraudulent e-mails that seem...

Question 6

A(n) _____ is a security threat that combines the characteristics of computer viruses,worms,and other malicious codes with vulnerabilities found on public and private networks.

Accepted Answer

The answer of A(n) _____ is a security threat that...

Question 7

When planning a comprehensive security system,the first step is designing _____,which use a combination of hardware and software for improving reliability-a way of ensuring availability in case of a system failure.

Accepted Answer

The answer of When planning a comprehensive security system,the first...

Question 8

_____ outlines procedures for keeping an organization operational in the event of a natural disaster or a network attack or intrusion.
A) Social engineering
B) Business continuity planning
C) An intrusion detection system
D) Terminal resource security

Accepted Answer

Business continuity planning outlines procedures for keeping an organization operational in the event of a natural disaster or a network attack or intrusion. Social engineering is the practice of manipulating individuals to divulge confidential information. An intrusion detection system is designed to monitor network traffic for signs of unauthorized access or malicious activities. Terminal resource security involves securing access to computer terminals and resources within a network.

Question 9

A(n) _____ consists of self-propagating program code that is triggered by a specified time or event.

Accepted Answer

The answer of A(n) _____ consists of self-propagating program code...

Question 10

_____ is a form of spyware that collects information about a user (without the user's consent) to determine which advertisements to display in the user's Web browser.

Accepted Answer

The answer of _____ is a form of spyware that...

Question 11

_____ is an attempt to gain access to a network by posing as an authorized user in order to find sensitive information,such as passwords and credit card information.

Accepted Answer

The answer of _____ is an attempt to gain access...

Question 12

A _____ plan lists the tasks that must be performed to restore damaged data and equipment.
A) risk assessment
B) systems engineering
C) disaster recovery
D) security compliance

Accepted Answer

The description fits a disaster recovery plan, which outlines the steps needed to get systems up and running after a disaster or outage. A risk assessment evaluates potential threats and vulnerabilities, while systems engineering designs and develops new technology solutions. Security compliance refers to adherence to industry standards and regulations.

Question 13

The _____ biometric security measure translates words into digital patterns,which are recorded and examined for tone and pitch.

Accepted Answer

The answer of The _____ biometric security measure translates words...

Question 14

The main function of Cyber Incident Response Capability (CIRT) is to:
A) provide level 1 security.
B) restrict access controls to unauthorized personnel.
C) provide information on security incidents.
D) create backdoors to bypass security protocols.

Accepted Answer

The main function of CIRT is to provide information on security incidents. It is responsible for detecting, investigating, and responding to cyber incidents in an organization's information technology infrastructure. Choices A, B, and D are incorrect because they do not accurately describe the purpose of CIRT.

Question 15

_____ monitor and record the keys pressed on a keyboard and can be software or hardware devices.

Accepted Answer

The answer of _____ monitor and record the keys pressed...

Question 16

_____ are independent programs that can spread themselves without having to be attached to a host program.

Accepted Answer

The answer of _____ are independent programs that can spread...

Question 17

In the context of security,_____ means using "people skills"-such as being a good listener and assuming a friendly,unthreatening air-to trick others into revealing private information.

Accepted Answer

The answer of In the context of security,_____ means using...

Question 18

A(n) _____ contains code intended to disrupt a computer,network,or Web site,and it is usually hidden inside a popular program.

Accepted Answer

The answer of A(n) _____ contains code intended to disrupt...

Question 19

A(n) _____ encryption usually works better for public networks,such as the Internet.
A) symmetric
B) asymmetric
C) synchronous
D) asynchronous

Accepted Answer

Asymmetric encryption is better suited for public networks because it uses a public key for encryption and a private key for decryption. This ensures that only the intended recipient can decrypt the message, even if the message is intercepted by unauthorized parties. Symmetric encryption, on the other hand, uses the same key for encryption and decryption, which would not be secure on a public network. Synchronous and asynchronous encryption refer to different methods of data transmission and are not specifically related to encryption.

Question 20

_____ is a software feature that erases the screen and signs the user off automatically after a specified length of inactivity.

Accepted Answer

The answer of _____ is a software feature that erases...

Quiz 5: Protecting Information Resources