Deck 12: Managing Systems Support and Security

Question 1

In dumpster diving attacks,an intruder raids desks or trash bins for valuable information.

Answer 1

True

Question 2

The main objective of training is to show users how the system can help them perform their jobs.

Answer 2

True

Question 3

Bandwidth requirements are expressed in bytes per minute.

Answer 3

False

Question 4

In a public key encryption environment,each user on the network has a pair of keys: a foreign key and a private key.

Question 5

Acceptance means that nothing is done;companies usually accept a risk only when the protection clearly is not worth the expense.

Question 6

A continuous backup only backs up files that are new or changed since the last full backup.

Question 7

A test site is an alternate IT location,anywhere in the world,that can support critical systems in the event of a power outage,system crash,or physical catastrophe.

Question 8

Retention periods of backups can be a specific number of months or years,depending on legal requirements and company policy.

Question 9

Wrapping refers to the practice of storing backup media away from the main business location,in order to mitigate the risk of a catastrophic disaster,such as a flood,fire,or earthquake.

Question 10

As enterprise-wide information systems grow more complex,configuration management becomes trivial.

Question 11

In a secluded engineering attack,an intruder uses social interaction to gain access to a computer system.

Question 12

Mitigation shifts the risk to another asset or party,such as an insurance company.

Question 13

Hard skills include communications,interpersonal,and perceptive abilities.

Question 14

Maintenance expense stay consistently the same during the system's operational life.

Question 15

A system in its final stages requires corrective maintenance only to keep the system operational.

Question 16

In a broad sense,credentials include formal degrees,diplomas,or certificates granted by learning institutions to show that a certain level of education has been achieved.

Question 17

Software leases are not considered an operational cost.

Question 18

Cloud computing provides the IT infrastructure that enables service orientation.

Question 19

One highly publicized form of social engineering is called post texting,which is a method of obtaining personal information under false pretenses.

Question 20

The hardening process that makes a system more secure is fully automatic.

Question 21

_____ include changing programs,procedures,or documentation to ensure correct system performance;adapting the system to changing requirements;and making the system operate more efficiently.

A) Team building activities
B) Elicitation activities
C) Maintenance activities
D) Testing activities

Question 22

Both adaptive and perfective maintenance activities decrease in a dynamic business environment.

Question 23

Preventative maintenance adds new capability and enhancements.

Question 24

Corrective maintenance _____.

A) adds enhancements to an operational system and makes the system easier to use
B) diagnoses and corrects errors in an operational system
C) involves changing an operational system to make it more efficient,reliable,or maintainable
D) competes for resources in an operational system

Question 25

Adaptive maintenance involves changing an operational system to make it more efficient,reliable,or maintainable.

Question 26

_____ expenses vary significantly during a system's operational life and include spending to support maintenance activities.

A) Secure
B) Maintenance
C) Principal
D) Capital

Question 27

Adaptive maintenance _____.

A) adds enhancements to an operational system and makes the system easier to use
B) diagnoses and corrects errors in an operational system
C) involves changing an operational system to make it more efficient,reliable,or maintainable
D) competes for resources in an operational system

Question 28

A help desk can boost its productivity by using _____,which allows IT staff to take over a user's workstation and provide support and troubleshooting.

A) high-level synthesis
B) wireless fidelity
C) word editing software
D) remote control software

Question 29

When a user submits a maintenance request,the system administrator makes an initial determination.

Question 30

Backup media can include tape,hard drives,optical storage,and online storage.

Question 31

When a maintenance release methodology is used,all changes,critical and noncritical,are implemented consecutively as they arrive.

Question 32

Perfective maintenance _____.

A) adds enhancements to an operational system and makes the system easier to use
B) diagnoses and corrects errors in an operational system
C) involves changing an operational system to make it more efficient,reliable,or maintainable
D) competes for resources in an operational system

Question 33

The systems support and _____ phase begins when a system becomes operational and continues until the system reaches the end of its useful life.

A) implementation
B) verification
C) security
D) testing

Question 34

Using a release methodology reduces the documentation burden.

Question 35

_____ costs include expenses for items such as supplies and equipment rental.

A) Operational
B) Corrective
C) Maintenance
D) Adaptive

Question 36

A _____ is a centralized resource staffed by IT professionals who provide users with the support they need to do their jobs.

A) help desk
B) white spot
C) maintenance software module
D) utility point

Question 37

A patch is a specially written software module that provides temporary repairs so operations can resume.

Question 38

An incremental backup only includes recent files that have never been backed up by any method.

Question 39

When network traffic is encrypted,it is invisible and its content and purpose are masked.

Question 40

If significant changes take place in an existing system or if a new version is released,the IT department might develop a _____.

A) user training package
B) user presence software
C) maintenance module
D) utility index

Question 41

In a typical system,the initial version of the system is 1.0,and the release that includes the first set of maintenance changes is version _____.

A) 2.1
B) 1.1
C) 0.1
D) 2.1

Question 42

When a new version of a system is installed,the prior release is _____,or stored.

A) archived
B) deleted
C) discontinued
D) reinstalled

Question 43

To measure system performance,companies use _____,which uses a set of standard tests on one system to compare its performance and capacity to that of other systems.

A) metric analysis
B) benchmark testing
C) threat analysis
D) allocation testing

Question 44

In maintenance management,_____ involves studying the parts of a system to understand the overall system.

A) synthesis
B) adoption
C) fusion
D) elucidation

Question 45

In addition to benchmark testing,performance measurements,called _____,can monitor the number of transactions processed in a given time period,the number of records accessed,and the volume of online data.

A) metrics
B) wireframes
C) viewports
D) baselines

Question 46

Many IT departments use a job title of _____ to designate positions that require a combination of systems analysis and programming skills.

A) tester/programmer
B) strategist/analyst
C) programmer/analyst
D) designer/debugger

Question 47

_____ measures actual system performance under specific circumstances and is affected by network loads and hardware efficiency.

A) Throughput
B) Resolution
C) Dimensionality
D) Latency

Question 48

The _____ describes a system at the beginning of system operation and includes the results of performance and acceptance tests for the operational system.

A) functional baseline
B) operational baseline
C) allocated baseline
D) product baseline

Question 49

Perfective maintenance usually is cost effective _____ a system's operational life.

A) early in
B) during the middle of
C) during the end of
D) throughout

Question 50

_____ is the overall time between a request for system activity and the delivery of the response.

A) Response time
B) Throughput time
C) Refresh rate
D) Base rate

Question 51

_____ describes the amount of data that a system can transfer in a fixed time period.

A) Latency
B) Resolution
C) Dimensionality
D) Bandwidth

Question 52

_____ includes monitoring a system for signs of trouble,logging all system failures,diagnosing the problem,and applying corrective action.

A) Benchmark testing
B) Throughput management
C) Responsive testing
D) Fault management

Question 53

A _____ is a formal reference point that measures system characteristics at a specific time.

A) feature line
B) baseline
C) product point
D) viewport

Question 54

_____ is the process of tracking system releases.

A) Configuration control
B) Version control
C) Source control
D) Quality control

Question 55

A _____ is responsible for assigning maintenance tasks to individuals or to a maintenance team.

A) tester
B) programmer
C) system validator
D) system administrator

Question 56

_____ is a process for controlling changes in system requirements during software development.

A) Data management
B) Disk management
C) Configuration management
D) Email management

Question 57

To avoid problems,preventive maintenance _____.

A) adds enhancements to an operational system and makes the system easier to use
B) diagnoses and corrects errors in an operational system
C) involves changing an operational system to make it more efficient,reliable,or maintainable
D) requires analysis of areas where trouble is likely to occur

Question 58

The _____ is the configuration of a system documented at the beginning of the project and consists of all necessary system requirements and design constraints.

A) functional baseline
B) extension baseline
C) allocated baseline
D) product baseline

Question 59

The _____ documents a system at the end of the design phase,identifies any changes since the beginning of the project,and includes testing and verification of all system requirements and features.

A) functional baseline
B) operational baseline
C) allocated baseline
D) product baseline

Question 60

In maintenance management,_____ means examining the whole in order to learn about the individual elements.

A) synthesis
B) adoption
C) analysis
D) elucidation

Question 61

A _____ is a security weakness or soft spot.

A) proxy
B) vulnerability
C) firewall
D) malware

Question 62

A _____ is an internal or external entity that could endanger an asset.

A) proxy
B) facade
C) firewall
D) threat

Question 63

Another of George's clients has software that is outdated and has become increasingly vulnerable to attack.How does George categorize this threat?

A) Human error
B) Technical obsolescence
C) Service failure
D) Espionage

Question 64

Provide three signs indicating a system has reached the end of its economically useful life.

Question 65

Define network.What is required to connect to a network?

Question 66

The first step in managing IT security is to develop a _____ based on confidentiality,integrity,and availability.

A) security policy
B) risk policy
C) threat report
D) concealment report

Question 67

List at least eight different tasks a service desk staff member might have to perform during a typical day.

Question 68

_____ develops safeguards that reduce risks and their impact.

A) Risk assessment
B) Risk verification
C) Risk identification
D) Risk control

Question 69

_____ prevents unauthorized users from creating,modifying,or deleting information.

A) Availability
B) Integrity
C) Confidentiality
D) Evacuation

Question 70

What is capacity planning? Include an explanation of what-if analysis in your answer.

Question 71

_____ analyzes an organization's assets,threats,and vulnerabilities.

A) Risk uncertainty
B) Risk diversification
C) Risk identification
D) Risk control

Question 72

_____ protects information from unauthorized disclosure and safeguards privacy.

A) Availability
B) Integrity
C) Confidentiality
D) Accessibility

Question 73

Explain the importance of technical credentials and certification.

Question 74

A(n)_____ is an attack that takes advantage of a vulnerability.

A) proxy
B) exploit
C) firewall
D) archive

Question 75

_____ measures the time between submitting a request for information and the fulfillment of the request.

A) Bandwidth
B) Turnaround time
C) Throughput
D) Frequency

Question 76

_____ ensures that authorized users have timely and reliable access to necessary information.

A) Availability
B) Integrity
C) Confidentiality
D) Concealability

Question 77

One of his firm's clients details an incident in which a hacker - a former employee - thieved trade secrets from the client and threatened to release them to the competition if he was not paid.In which of the following categories should George place this incident?

A) Vandalism
B) Trespass and espionage
C) Extortion
D) Software attack

Question 78

_____ is a process that monitors current activity and performance levels,anticipates future activity,and forecasts the resources needed to provide desired levels of service.

A) Restructuring
B) Capacity planning
C) Resource sizing
D) Reorganizing

Question 79

_____ measures risk likelihood and impact.

A) Risk assessment
B) Risk marking
C) Risk identification
D) Risk control

Question 80

_____,a risk control strategy,eliminates risks by adding protective safeguards.

A) Avoidance
B) Acceptance
C) Conveyance
D) Transference