Question 1

The biggest change that has occurred in security over the last 30 years has been the change in the computing environment from small,tightly contained mainframes to a highly widespread network of much larger systems.

Accepted Answer

The biggest change in security over the last 30 years has been the shift from a focus on securing small, isolated systems to addressing the challenges of securing highly interconnected and distributed networks, including the internet, cloud computing, and mobile devices. The scale of systems has varied, but the key change has been in connectivity and the complexity of threats.

Question 2

There are three general reasons a particular computer system is attacked: It is specifically targeted by the attacker,it is a target of opportunity,or it is a target that was specified to be attacked by a larger criminal organization.

Accepted Answer

The answer of There are three general reasons a particular...

Question 3

The first step an administrator can take to reduce possible attacks is to
A)Ensure all patches for the operating system and applications are installed
B)Install a firewall
C)Install anti-spyware software
D)Configure an intrusion detection system

Accepted Answer

Ensuring all patches for the operating system and applications are installed is the first step an administrator can take to reduce possible attacks. Patch management helps to fix vulnerabilities and security holes which can be exploited by hackers. This helps to reduce the attack surface available to potential cyber attackers. Installing a firewall, anti-spyware software or configuring an intrusion detection system are also important security measures, but they should follow patch management in priority.

Question 4

There are a number of different threats to security,including viruses and worms,intruders,insiders,criminal organizations,terrorists,and information warfare conducted by foreign countries.

Accepted Answer

This statement is true. There are various types of security threats that can pose a risk to individuals, organizations, and nations. These include malicious software such as viruses and worms, unauthorized access by intruders or insiders, criminal groups seeking to exploit vulnerabilities, terrorist attacks, and cyber attacks from foreign governments engaging in information warfare.

Question 5

Each of the infected systems became part of what is known as a bot network,which could be used to cause a DoS attack on a target or to forward spam e-mail to millions of users,as a result of the
A)Slammer Worm
B)Morris Worm
C)Conficker
D)Melissa Worm

Accepted Answer

Conficker is known for its ability to build a large botnet, which can be used for purposes such as launching Distributed Denial of Service (DDoS) attacks or sending spam emails.

Question 6

Viruses have no useful purpose.

Accepted Answer

The answer of Viruses have no useful purpose....

Question 7

As the level of sophistication of attacks _________,the level of knowledge necessary to exploit vulnerabilities decreased.

Accepted Answer

The answer of As the level of sophistication of attacks...

Question 8

The Code Red Worm spread to 350,000 computers in just over a week.
It took just 14 hours.

Accepted Answer

The Code Red Worm spread to 350,000 computers in just over a week, not 14 hours.

Question 9

The steps an attacker takes in attempting to penetrate a targeted network are extremely different from the ones that a security consultant performing a penetration test would take.

Accepted Answer

Both attackers and security consultants performing penetration tests often follow similar methodologies, such as reconnaissance, scanning, gaining access, maintaining access, and covering tracks, although their intentions and permissions differ.

Question 10

One significant trend observed over the last several years has been the decrease in the number of computer attacks by nonaffiliated intruders as opposed to attacks by organized hacking groups,criminal organizations,or nations.

Accepted Answer

The trend has been the opposite; there has been an increase in attacks by organized hacking groups, criminal organizations, and nation-states, making cybersecurity a growing concern globally. These entities often have more resources and sophisticated techniques compared to nonaffiliated intruders.

Question 11

Vladimir Levin was able to steal $10 Million from _______________ by using its cash management system.

Accepted Answer

The answer of Vladimir Levin was able to steal $10...

Question 12

In 2009 _______________ was cut and resulted in widespread phone and Internet outages in the San Jose area of California.

Accepted Answer

The answer of In 2009 _______________ was cut and resulted...

Question 13

The message "Hacked by Chinese," was left by the
A)Melissa virus
B)Love Letter virus
C)Slammer Worm
D)Code Red Worm

Accepted Answer

The "Hacked by Chinese" message was left by the Code Red Worm, which was a computer worm that attacked Microsoft IIS web servers in 2001. The worm defaced websites with the message "Hacked by Chinese" and caused significant damage to the internet, affecting over 359,000 servers in just a few hours.

Question 14

The first worm to attack the Internet was the _______________.

Accepted Answer

The answer of The first worm to attack the Internet...

Question 15

One of the hardest threats that the security professional will have to deal with is the elite hacker.
The insider threat is the hardest one to deal with.They already have access to the organization and its assets.

Accepted Answer

The answer of One of the hardest threats that the...

Question 16

The first step an administrator can take to minimize possible attacks is to ensure that all patches for the operating system and applications are installed.

Accepted Answer

This is true as patching helps to eliminate known vulnerabilities in the system that attackers can exploit.

Question 17

_______________ are people who attack networks with a political purpose in mind.

Accepted Answer

The answer of _______________ are people who attack networks with...

Question 18

Fifty years ago,few people had access to a computer system or network,so securing them was a relatively easy matter.

Accepted Answer

Fifty years ago, in the early 1970s, computers were primarily large, expensive systems used by governments, universities, and large corporations. Access to these systems was limited to a relatively small number of people, making security management simpler compared to today's widespread and interconnected digital environment.

Question 19

Hackers who are able to discover new vulnerabilities and write code to exploit them are known as _______________.

Accepted Answer

The answer of Hackers who are able to discover new...

Question 20

When users are unable to access information or the systems processing information,you may have suffered a
A)Loss of confidentiality
B)Loss of integrity
C)Loss of authentication
D)Loss of availability

Accepted Answer

Loss of availability refers to the inability of users to access information or systems processing information due to issues such as system failures, network interruptions or other events. This can result in downtime or reduced system performance, which can impact business operations and customer satisfaction.

Quiz 1: Introduction and Security Trends