Deck 5: Protecting Information Resources

Question 1

Black hats are also known as ethical hackers.

Answer 1

False

Question 2

A worm travels from computer to computer in a network,but it does not usually erase data.

Answer 2

True

Question 3

Confidentiality,integrity,and availability are collectively referred to as the CIA triangle.

Answer 3

True

Question 4

An intrusion detection system can protect against both external and internal access.

Question 5

Part of ensuring integrity is identifying authorized users and granting them access privileges.

Question 6

When a program containing a virus is used,the virus attaches itself to other files,and the cycle continues.

Question 7

A proxy server acts as an intermediary between network users and the Internet.

Question 8

If a drive in the RAID system fails,data stored on it can be reconstructed from data stored on the remaining drives.

Question 9

Social engineering techniques are easily detectable because they involve threatening employees with physical violence.

Question 10

Application-filtering firewalls are less expensive than packet-filtering firewalls.

Question 11

Social engineering takes advantage of the human element of security systems.

Question 12

When using mirror disks,if one of the two disks containing the same data fails,the other disk also fails.

Question 13

Level 1 security protects the back-end systems to ensure confidentiality,accuracy,and integrity of data.

Question 14

A distributed denial-of-service (DDoS)attack involves hundreds of computers working together to bombard a Web site with thousands of requests for information in a short period.

Question 15

Trojans do not replicate themselves,as viruses and worms do.

Question 16

Viruses can only be transmitted through direct computer-to-computer contact.

Question 17

A firewall cannot reject an incoming packet,but instead sends a warning to the network administrator.

Question 18

Spoofing is sending fraudulent e-mails that seem to come from legitimate sources,such as a bank or university.

Question 19

Social engineering is an example of an unintentional security threat.

Question 20

Hand geometry is an example of a biometric security measure.

Question 21

A ____ is an inexperienced,usually young hacker who uses programs that others have developed to attack computer and network systems.

A)script kiddie
B)black hat
C)white hat
D)hex editor

Question 22

Backup facilities should never be shared in an attempt to reduce costs.

Question 23

Level 2 security involves ____.

A)back-end systems
B)corporate networks
C)physical security
D)front-end servers

Question 24

The main advantage of asymmetric encryption is that it is faster and requires only a small amount of processing power.

Question 25

____ refers to the accuracy of information resources within an organization.

A)Validity
B)Confidentiality
C)Integrity
D)Availability

Question 26

Terminal resource security is a software feature that erases the screen and signs the user off automatically after a specified length of inactivity.

Question 27

____ is the process of capturing and recording network traffic.

A)Sniffing
B)Phishing
C)Spoofing
D)Pharming

Question 28

____ are hackers who specialize in unauthorized penetration of information systems.

A)Script kiddies
B)Black hats
C)White hats
D)Hex editors

Question 29

Level 3 security involves ____.

A)back-end systems
B)corporate networks
C)physical security
D)front-end servers

Question 30

Level 1 security involves ____.

A)back-end systems
B)corporate networks
C)physical security
D)front-end servers

Question 31

The cost of setting up a virtual private network is usually high.

Question 32

____ means that computers and networks are operating and authorized users can access the information they need.

A)Validity
B)Confidentiality
C)Integrity
D)Availability

Question 33

An ideal password should be eight characters or longer.

Question 34

In symmetric encryption,the same key is used to encrypt and decrypt the message.

Question 35

____ are computer security experts who specialize in penetration testing and other testing methods to ensure that a company's information systems are secure.

A)Script kiddies
B)Black hats
C)White hats
D)Hex editors

Question 36

An intrusion detection system cannot prevent DoS attacks.

Question 37

____ means that a system must prevent disclosing information to anyone who is not authorized to access it.

A)Validity
B)Confidentiality
C)Integrity
D)Availability

Question 38

Symmetric encryption is also called public key encryption.

Question 39

Data encryption transforms data into a scrambled form called ciphertext.

Question 40

Corner bolts are secured to a computer at the power outlet.

Question 41

Which of the following is considered an intentional threat?

A)Floods
B)User's accidental deletion of data
C)Social engineering
D)Power outages

Question 42

A(n)____ is often used so remote users have a secure connection to the organization's network.

A)biometric security system
B)intrusion detection system
C)virtual private network
D)terminal resource network

Question 43

A(n)____ is software that acts as an intermediary between two systems.

A)packet-filtering firewall
B)application-filtering firewall
C)proxy server
D)intrusion detection system

Question 44

Which of the following is a type of access control?

A)Steel encasements
B)Passwords
C)Firewalls
D)Identification badges

Question 45

____ security measures use a physiological element to enhance security measures.

A)Physical
B)Social
C)Biofeedback
D)Biometric

Question 46

Typically,an organization leases the media used for a VPN on a(n)____ basis.

A)yearly
B)10-year
C)as-needed
D)monthly

Question 47

Which of the following is a biometric security measure?

A)electronic trackers
B)passwords
C)firewalls
D)signature analysis

Question 48

A ____ is a programming routine built into a system by its designer or programmer.

A)logic bomb
B)worm
C)virus
D)backdoor

Question 49

____ encryption uses a public key known to everyone and a private key known only to the recipient.

A)Symmetric
B)Asymmetric
C)SSL
D)TLS

Question 50

____ are usually placed in front of a firewall and can identify attack signatures and trace patterns.

A)Intrusion detection systems
B)Proxy servers
C)Physical security measures
D)Biometric security measures

Question 51

____ is a commonly used encryption protocol that manages transmission security on the Internet.

A)Transport Layer Security
B)Secure Sockets Layer
C)Transmission Control Protocol
D)User Datagram Protocol

Question 52

A logic bomb is a type of ____.

A)Trojan program
B)worm
C)virus
D)backdoor

Question 53

A ____ travels from computer to computer in a network,but it does not usually erase data.

A)Trojan program
B)worm
C)virus
D)backdoor

Question 54

Which of the following is a physical security measure?

A)Electronic trackers
B)Passwords
C)Firewalls
D)Signature analysis

Question 55

A ____ attack typically targets Internet servers.

A)logic bomb
B)denial-of-service
C)backdoor
D)worm

Question 56

____ take advantage of the human element of security systems.

A)Denial-of-service attacks
B)Trojan programs
C)Blended threats
D)Social engineering attacks

Question 57

____ ensures data security and integrity over public networks,such as the Internet.

A)Transport Layer Security
B)Secure Sockets Layer
C)Transmission Control Protocol
D)User Datagram Protocol

Question 58

Which of the following is a nonbiometric security measure?

A)electronic trackers
B)passwords
C)firewalls
D)signature analysis

Question 59

A ____ attack floods a network or server with service requests to prevent legitimate users' access to the system.

A)logic bomb
B)denial-of-service
C)backdoor
D)worm

Question 60

Data encryption transforms data into a scrambled form called ____.

A)plaintext
B)cleartext
C)codetext
D)ciphertext

Question 61

A(n)____________________ contains code intended to disrupt a computer,network,or Web site,and it is usually hidden inside a popular program.

Question 62

____________________ is an attack that takes advantage of the human element of security systems.

Question 63

Many organizations now follow the ____ model to form teams that can handle network intrusions and attacks quickly and effectively.

A)CERT
B)Sarbanes-Oxley
C)CIRC
D)McCumber cube

Question 64

____________________ means that a system must prevent disclosing information to anyone who is not authorized to access it.

Question 65

A(n)____________________ is a security threat that combines the characteristics of computer viruses,worms,and other malicious codes with vulnerabilities found on public and private networks.

Question 66

____________________ are independent programs that can spread themselves without having to be attached to a host program.

Question 67

A ____ plan lists the tasks that must be performed to restore damaged data and equipment.

A)risk assessment
B)systems engineering
C)disaster recovery
D)security compliance

Question 68

____________________ ensure availability in the event of a system failure by using a combination of hardware and software.

Question 69

In ____ encryption,the same key is used to encrypt and decrypt the message.

A)symmetric
B)asymmetric
C)SSL
D)TLS

Question 70

The main function of the ____ model is to provide information on security incidents,including information systems' vulnerabilities,viruses,and malicious programs.

A)CERT
B)Sarbanes-Oxley
C)CIRC
D)McCumber cube

Question 71

A(n)____________________ consists of self-propagating program code that is triggered by a specified time or event.

Question 72

A(n)____________________ is a combination of hardware and software that acts as a filter or barrier between a private network and external computers or networks.

Question 73

____________________ are inexperienced,usually young hackers who use programs that others have developed to attack computer and network systems.

Question 74

____________________ outlines procedures for keeping an organization operational in the event of a natural disaster or network attack.

Question 75

____ outlines procedures for keeping an organization operational in the event of a natural disaster or network attack.

A)Systems engineering
B)Business continuity planning
C)Risk management
D)Security analysis

Question 76

____________________ is a software feature that erases the screen and signs the user off automatically after a specified length of inactivity.

Question 77

____________________ means that computers and networks are operating and authorized users can access the information they need.

Question 78

In ____________________ encryption,the same key is used to encrypt and decrypt the message.

Question 79

A(n)____________________ is software that acts as an intermediary between two systems.

Question 80

The ____________________ biometric security method translates words into digital patterns,which are recorded and examined for tone and pitch.