Question 1

Data appended to,or a cryptographic transformation of,a data unit that allows a recipient of the data unit to prove the source and integrity of the data unit and protect against forgery is an___________ .

Accepted Answer

The description provided in the question matches the definition of a digital signature, which is used to verify the authenticity and integrity of digital messages or documents. A security audit trail refers to a record of system activity used for auditing and forensic purposes, encipherment is the process of encrypting data, and an authentication exchange refers to a process where two parties confirm each other's identities.

Question 2

The __________ service is concerned with assuring the recipient that the message is from the source that it claims to be from.This service must also assure that the connection is not interfered with in such a way that a third party can masquerade as one of the two legitimate parties for the purposes of unauthorized transmission or reception.

Accepted Answer

The answer of The __________ service is concerned with assuring...

Question 3

"The protection afforded to an automated information system in order to attain the applicable objectives of preserving the integrity,availability and confidentiality of information system resources" is the definition of _________ .

Accepted Answer

The answer of "The protection afforded to an automated information...

Question 4

A loss of _________ is the unauthorized modification or destruction of information.

Accepted Answer

The answer of A loss of _________ is the unauthorized...

Question 5

A _________ level breach of security could cause a significant degradation in mission capability to an extent and duration that the organization is able to perform its primary functions,but the effectiveness of the functions is significantly reduced.

Accepted Answer

A moderate level breach of security would cause a significant degradation in mission capability, but the organization would still be able to perform its primary functions, albeit with reduced effectiveness. A catastrophic level breach would completely cripple the organization, while a low level breach would have minimal impact on the organization's mission capability. A high level breach would fall somewhere between moderate and catastrophic.

Question 6

A __________ takes place when one entity pretends to be a different entity.

Accepted Answer

Masquerade is a type of attack where an entity assumes the identity of a different entity, so the best choice is B. A replay attack involves the interception and retransmission of network traffic, a service denial attack involves disrupting or disabling access to a service, and a passive attack involves monitoring or eavesdropping on network traffic without modifying it.

Question 7

A ___________ is any process,or a device incorporating such a process,that is designed to detect,prevent,or recover from a security attack.Examples are encryption algorithms,digital signatures and authentication protocols.

Accepted Answer

The answer of A ___________ is any process,or a device...

Question 8

Irreversible __________ mechanisms include hash algorithms and message authentication codes,which are used in digital signature and message authentication applications.

Accepted Answer

The answer of Irreversible __________ mechanisms include hash algorithms and...

Question 9

Verifying that users are who they say they are and that each input arriving at the system came from a trusted source is _________ .

Accepted Answer

Authenticity refers to the verification of user identity and source of input, ensuring that they are trustworthy and authorized to access or interact with the system. Credibility refers to the trustworthiness of information or entities, while accountability pertains to the responsibility and traceability of actions within the system. Integrity refers to the accuracy and consistency of data, ensuring that it has not been tampered with or modified in an unauthorized manner.

Question 10

A _________ attack attempts to learn or make use of information from the system but does not affect system resources.

Accepted Answer

The answer of A _________ attack attempts to learn or...

Question 11

Two specific authentication services defined in X.800 are peer entity authentication and _________ authentication.

Accepted Answer

The answer of Two specific authentication services defined in X.800...

Question 12

A __________ is any action that compromises the security of information owned by an organization.

Accepted Answer

A security attack is defined as any action that compromises the security of information owned by an organization. This can include hacking, viruses, unauthorized access, theft, or physical damage to equipment.

Question 13

__________ is the protection of transmitted data from passive attacks.

Accepted Answer

Confidentiality is the protection of transmitted data from passive attacks, such as eavesdropping or interception, by ensuring that only authorized individuals or systems can access the information. Access control, data control, and non-repudiation do not directly relate to protecting transmitted data from passive attacks.

Question 14

The protection of the information that might be derived from observation of traffic flows is _________ .

Accepted Answer

The term "traffic-flow confidentiality" refers specifically to the protection of information obtained from observing network traffic flows. It is a type of confidentiality that focuses on the flow of data, rather than the specific content being transmitted. Therefore, option C is the best answer. Options A and B are not relevant to this context, and option D is not a commonly used term in the field of network security.

Question 15

__________ threats exploit service flaws in computers to inhibit use by legitimate users.

Accepted Answer

Service threats are attacks that target the availability of a service by exploiting flaws or vulnerabilities in the devices that host them. By doing so, they inhibit the use of the service by legitimate users. Examples of service threats include denial-of-service (DoS) attacks, distributed DoS (DDoS) attacks, and SYN flood attacks. Information access threats, on the other hand, aim to gain unauthorized access to sensitive data, while reliability threats seek to compromise the integrity of the system or network. Passive threats are attacks that do not actively disrupt the system but rather attempt to intercept or eavesdrop on data transmissions.

Question 16

An)__________ service is one that protects a system to ensure its availability and addresses the security concerns raised by denial- of- service attacks.

Accepted Answer

The term "availability" in the question suggests that the service is focused on ensuring the system is always accessible to legitimate users. The other options, replay, masquerade, and integrity, do not directly address the issue of denial-of-service attacks.

Question 17

In the United States,the release of student grade information is regulated by the __________ .

Accepted Answer

The answer of In the United States,the release of student...

Question 18

An __________ attack attempts to alter system resources or affect their operation.

Accepted Answer

The answer of An __________ attack attempts to alter system...

Question 19

A loss of __________ is the disruption of access to or use of information or an information system.

Accepted Answer

The answer of A loss of __________ is the disruption...

Question 20

An)__________ is a potential for violation of security,which exists when there is a circumstance,capability,action or event that could breach security and cause harm.

Accepted Answer

A threat is a potential danger or risk that can harm an organization's assets, systems or personnel. It refers to any circumstance, capability, action, or event that could compromise security and cause harm. An attack is an intentional attempt to exploit a vulnerability or weakness in a system. Risk is the likelihood that a threat will be realized and the impact it will have. An attack vector is the path or means by which an attacker can gain access to a system or network. Therefore, the best choice is A, as it provides a comprehensive definition of what a threat is.

Quiz 1: Overview