Question 1

Your company's headquarters was just hit head on by a hurricane, and the building has lost power. The company sends you to their hot site to minimize downtime from the disaster. Which of the following statements is true?

Accepted Answer

A hot site is typically a remote location with replicated IT infrastructure, including servers, storage, and networking equipment. It is designed to be an almost exact replica of the main site, with the necessary hardware and software to maintain critical business functions in the event of a disaster or disruption. As such, it should have up-to-date data and be capable of being accessed remotely. Therefore, choice D is the only accurate statement.

Question 2

The forecast for your company's headquarters predicts the area hit head on by a hurricane,. The company sends you to their warm site to minimize downtime should such a disaster hit. Which of the following statements is true?

Accepted Answer

The scenario mentions that the company sends you to their warm site to minimize downtime in case of a disaster. Warm sites are a type of disaster recovery site that has the necessary infrastructure and equipment, but may not have the company's applications or up-to-date data. Therefore, option D is the correct choice. Options A, B, and C are incorrect as they are not necessarily true for a warm site. Option E is partially correct, but since it is not specifically mentioned in the scenario, it cannot be considered the best choice.

Question 3

Biometrics are an example of _______________.

Accepted Answer

Biometrics refer to characteristics that are unique to an individual, such as fingerprints or facial features, making them an example of "something the user is."

Question 4

Bob is using public key encryption to send a message to Ted. Bob encrypts the message with Ted's _____ key, and Ted decrypts the message using his _____ key.

Accepted Answer

In public key encryption, the sender encrypts the message with the recipient's public key, and the recipient decrypts it with their private key. This ensures that only the intended recipient can decrypt the message.

Question 5

Passwords and passphrases are examples of _____________.

Accepted Answer

Passwords and passphrases are examples of something the user knows, which is a type of authentication factor based on knowledge.

Question 6

Organizations use hot sites, warm sites, and cold sites to insure business continuity. Which of the following statements is false?

Accepted Answer

A hot site does not necessarily need to be located close to the organization's offices; it can be located at a distance as long as it can be accessed quickly in case of a disaster.

Question 7

_____ controls are concerned with user identification, and they restrict unauthorized individuals from using information resources.

Accepted Answer

Access controls are specifically designed to prevent unauthorized individuals from accessing information resources. This includes user identification mechanisms such as passwords, biometric authentication, and smart cards. Physical controls are focused on securing the physical infrastructure of information resources, such as locks and CCTV cameras, while data security controls aim to protect the data itself through encryption and other measures. Administrative controls, on the other hand, deal with policies and procedures that govern the use of information resources, including hiring, training, and monitoring staff. Input controls ensure that users enter data accurately and completely.

Question 8

Which of the following is not a strong password?

Accepted Answer

The answer of Which of the following is not a...

Question 9

In a process called _____, a company allows nothing to run unless it is approved, whereas in a process called _____, the company allows everything to run unless it is not approved.

Accepted Answer

The first process described is whitelisting, where only approved items are allowed to run, while the second process described is blacklisting, where only items specifically deemed not approved are blocked.

Question 10

Which of the following is not a characteristic of strong passwords?

Accepted Answer

Strong passwords tend to be long and complex, not short and easy to remember. Short passwords are easier for hackers to crack using brute force methods.

Question 11

In _____, the organization takes concrete actions against risks.

Accepted Answer

Risk mitigation refers to taking concrete actions to reduce or eliminate risks. It is an active process of identifying potential risks and implementing measures to prevent or minimize their impact. Risk management involves the ongoing identification, assessment, and prioritization of risks, while risk analysis involves the process of evaluating risks to determine their likelihood and potential impact. Risk acceptance involves choosing to accept the risk, while risk transference involves shifting the risk to another party, such as through insurance.

Question 12

Which of the following statements is false?

Accepted Answer

The answer of Which of the following statements is false?
...

Question 13

_____ is the process in which an organization assesses the value of each asset being protected, estimates the probability that it will be compromised, and compares the probable costs of an attack with the costs of protecting the asset.

Accepted Answer

Risk analysis is the process in which an organization assesses the value of each asset being protected, estimates the probability that it will be compromised, and compares the probable costs of an attack with the costs of protecting the asset. Risk management refers to the overall process of identifying, assessing, and controlling risks. Risk mitigation involves taking steps to reduce the probability or impact of a potential risk. Risk acceptance is the deliberate decision to accept the risk or its consequences. Risk transference involves shifting the risk to another party (such as through insurance or outsourcing).

Question 14

In _____, the organization purchases insurance as a means to compensate for any loss.

Accepted Answer

Risk transference is the act of transferring the risk to a third party. In this case, by purchasing insurance, the organization is transferring the risk of any loss to the insurance company.

Question 15

Voice and signature recognition are examples of _____________.

Accepted Answer

The answer of Voice and signature recognition are examples of...

Question 16

Which of the following statements concerning the difficulties in protecting information resources is not correct?

Accepted Answer

The statement that rapid technological changes ensure that controls are effective for years is not correct. In fact, rapid technological changes often make it difficult for security controls to keep up and remain effective. This is because new technologies and threats emerge quickly, and security measures must constantly adapt to address them. Thus, controls that were effective in the past may no longer be sufficient in the present or future.

Question 17

Which of the following is not a strategy for mitigating the risk of threats against information?

Accepted Answer

The answer of Which of the following is not a...

Question 18

Which of the following statements concerning firewalls is false?

Accepted Answer

Firewalls and anti-malware systems have different functionalities. Firewalls filter network traffic based on predetermined rules and policies, while anti-malware systems are designed to detect and remove malicious software or viruses. Firewalls can aid in the prevention of malware infections by blocking known malicious IP addresses or restricting access to certain websites, but their primary goal is not to filter messages in the same way as anti-malware systems.

Question 19

Refer to IT's About Business 7.2 - The Mask: The malware application Careto appears to be developed by ____________.

Accepted Answer

Careto was initially believed to have been created by a Spanish-speaking nation-state intelligence agency.

Question 20

Access controls involve _____ before _____.

Accepted Answer

Access controls involve authentication (verifying the identity of the user) before authorization (granting access to resources based on the user's identity and predefined permissions). This ensures that only authorized users can access the resources they are allowed to use. The other options are not in the correct order or not directly related to access control.

Quiz 7: Information Security