Question 1

_____ is a process that monitors current activity and performance levels, anticipates future activity, and forecasts the resources needed to provide desired levels of service.​
A) Restructuring
B) Capacity planning
C) Resource sizing
D) Reorganizing

Accepted Answer

Capacity planning is the process of monitoring current activity and performance levels, anticipating future activity, and forecasting the resources needed to provide desired levels of service.

Question 2

_____ ensures that authorized users have timely and reliable access to necessary information.​
A) Availability
B) Integrity
C) Confidentiality
D) Concealability

Accepted Answer

Availability ensures that authorized users have timely and reliable access to necessary information. This means that the information is able to be accessed when needed, without delay or interruption.

Question 3

_____ prevents unauthorized users from creating, modifying, or deleting information.​
A) Availability
B) Integrity
C) Confidentiality
D) Evacuation

Accepted Answer

Integrity refers to maintaining the accuracy and completeness of data, as well as preventing unauthorized changes or deletion of information.

Question 4

The first step in managing IT security is to develop a _____ based on confidentiality, integrity, and availability.​
A) security policy
B) risk policy
C) threat report
D) concealment report

Accepted Answer

Developing a security policy based on the principles of confidentiality, integrity, and availability is the first step in managing IT security. The security policy outlines the organization's approach to managing and protecting its information assets. A risk policy is a part of a security policy that deals with identifying and managing risks to information assets. A threat report and a concealment report are not related to the development of a security policy.

Question 5

_____ includes monitoring a system for signs of trouble, logging all system failures, diagnosing the problem, and applying corrective action.​
A) Benchmark testing
B) Throughput management
C) Responsive testing
D) Fault management

Accepted Answer

Fault management includes all the mentioned activities such as monitoring, logging, diagnosing, and applying corrective action to address system failures or faults. Benchmark testing, throughput management and responsive testing are not directly related to system fault management.

Question 6

_____ is the overall time between a request for system activity and the delivery of the response.
A) Response time
B) Throughput time
C) Refresh rate
D) Base rate

Accepted Answer

Response time is the overall time between a request for system activity and the delivery of the response. Throughput time refers to the time required to complete a specific process or task, refresh rate refers to the number of times per second an image is refreshed on a screen, and base rate is a statistical term that refers to the underlying frequency of an event.

Question 7

To measure system performance, companies use _____, which uses a set of standard tests on one system to compare its performance and capacity to that of other systems.​
A) metric analysis
B) ​benchmark testing
C) threat analysis
D) allocation testing

Accepted Answer

Benchmark testing uses standard tests to compare performance and capacity of one system to other systems. Metric analysis involves measuring key performance indicators within a system. Threat analysis involves identifying potential security threats to a system. Allocation testing involves measuring the allocation of resources within a system.

Question 8

_____ analyzes an organization's assets, threats, and vulnerabilities.​
A) Risk uncertainty
B) Risk diversification
C) Risk identification
D) Risk control

Accepted Answer

Risk identification is the process of identifying and analyzing the assets, threats, and vulnerabilities of an organization. This helps in understanding the potential risks and the impact they may have on the organization, thereby allowing the organization to take proactive measures to manage these risks. Risk uncertainty is the level of uncertainty associated with a risk, while risk diversification is the strategy of spreading investments across different assets to reduce the overall risk. Risk control is the process of implementing measures to mitigate the identified risks.

Question 9

_____ protects information from unauthorized disclosure and safeguards privacy.​
A) Availability
B) Integrity
C) Confidentiality
D) Accessibility

Accepted Answer

Confidentiality refers to the protection of information from unauthorized disclosure and maintaining privacy. Availability refers to ensuring that information is accessible when needed. Integrity refers to maintaining the accuracy and consistency of information. Accessibility refers to ensuring that information is easily accessible to authorized users.

Question 10

_____ measures risk likelihood and impact.
A) Risk assessment
B) Risk marker
C) Risk identification
D) Risk control

Accepted Answer

Risk assessment is the process of evaluating the likelihood and impact of identified risks. It involves assessing the likelihood or probability of a risk occurring and the potential impact or consequences if it does occur. This information can then be used to prioritize risks and determine appropriate risk management strategies. Risk identification is the process of identifying potential risks, not assessing them. Risk markers and risk control are not relevant to the measurement of risk likelihood and impact.

Question 11

_____ measures actual system performance under specific circumstances and is affected by network loads and hardware efficiency.​
A) Throughput
B) Resolution
C) Dimensionality
D) Latency

Accepted Answer

Throughput measures the amount of data that can be transmitted over a network in a given amount of time, taking into account factors such as network load and hardware efficiency.

Question 12

_____ describes the amount of data that a system can transfer in a fixed time period.​
A) Latency
B) Resolution
C) Dimensionality
D) Bandwidth

Accepted Answer

Bandwidth describes the amount of data that a system can transfer in a fixed time period. Latency refers to the amount of time it takes for data to travel from its source to its destination, resolution refers to the number of pixels or detail in an image, and dimensionality refers to the number of dimensions in a dataset.

Question 13

In addition to benchmark testing, performance measurements, called _____, can monitor the number of transactions processed in a given time period, the number of records accessed, and the volume of online data.​
A) metrics
B) wireframes
C) viewports
D) baselines

Accepted Answer

Metrics are measurements that can be used to monitor performance, such as the number of transactions processed, records accessed, and data volume. Wireframes are visual representations of website or application design, viewports are the user's visible area of a webpage, and baselines can be used as a point of comparison in benchmark testing but do not directly monitor ongoing performance.

Question 14

_____ measures the time between submitting a request for information and the fulfillment of the request.​
A) Bandwidth
B) Turnaround time
C) Throughput
D) Frequency

Accepted Answer

Turnaround time measures the time between submitting a request and getting the response or fulfillment of that request. Bandwidth measures how much data can be transmitted in a given amount of time, throughput measures the efficiency of data transfer, and frequency measures the number of occurrences of a particular event in a given time period.

Question 15

A _____ is a security weakness or soft spot.
A) proxy
B) vulnerability
C) firewall
D) malware

Accepted Answer

A vulnerability is a security weakness or soft spot that can potentially be exploited by attackers to gain unauthorized access or perform other malicious actions. A proxy is a tool for accessing the internet anonymously or bypassing content filtering, but it is not necessarily a vulnerability in itself. A firewall is a security tool that controls incoming and outgoing network traffic, but it is not a vulnerability. Malware refers to various types of malicious software that can include viruses, worms, and Trojan horses, but it is not a specific term for a vulnerability.

Question 16

A(n) _____ is an attack that takes advantage of a vulnerability.
A) proxy
B) exploit
C) firewall
D) archive

Accepted Answer

An exploit is a type of cyber attack that takes advantage of a vulnerability in software, hardware or even human behavior to gain unauthorized access or cause damage. The attacker uses the exploit to carry out malicious activities such as stealing confidential information, disrupting services, or taking over control of systems.

Question 17

A _____ is an internal or external entity that could endanger an asset.
A) proxy
B) facade
C) firewall
D) threat

Accepted Answer

A threat is defined as any internal or external entity that has the potential to harm an asset by exploiting its vulnerabilities. Therefore, option D is the correct answer. Option A (proxy), option B (facade), and option C (firewall) are not applicable to the given definition.

Question 18

_____ develops safeguards that reduce risks and their impact.
A) Risk assessment
B) Risk verification
C) Risk identification
D) Risk control

Accepted Answer

Risk control involves developing safeguards to reduce the likelihood and impact of risks.

Question 19

In IT security terms, a _____ is the impact of an attack multiplied by the likelihood of a vulnerability being exploited.
A) proxy
B) risk
C) firewall
D) warning

Accepted Answer

The term in question is the definition of a risk in IT security. A proxy and firewall are both security tools, but they are not relevant to the given definition. A warning is not a security term, but rather an action taken to alert someone of a potential threat or danger.

Question 20

_____, a risk control strategy, eliminates risks by adding protective safeguards.
A) Avoidance
B) Acceptance
C) Conveyance
D) Transference

Accepted Answer

Avoidance involves eliminating the risk by avoiding the activity or situation that presents the risk altogether. Adding protective safeguards, on the other hand, is a risk mitigation strategy, which includes risk reduction or control, but not risk avoidance.

Quiz 12: Managing Systems Support and Security

_____ is a process that monitors current activity and performance levels, anticipates future activity, and forecasts the resources needed to provide desired levels of service.​

_____ ensures that authorized users have timely and reliable access to necessary information.​

_____ prevents unauthorized users from creating, modifying, or deleting information.​

The first step in managing IT security is to develop a _____ based on confidentiality, integrity, and availability.​

_____ includes monitoring a system for signs of trouble, logging all system failures, diagnosing the problem, and applying corrective action.​

_____ is the overall time between a request for system activity and the delivery of the response.

To measure system performance, companies use _____, which uses a set of standard tests on one system to compare its performance and capacity to that of other systems.​

_____ analyzes an organization's assets, threats, and vulnerabilities.​

_____ protects information from unauthorized disclosure and safeguards privacy.​

_____ measures risk likelihood and impact.

_____ measures actual system performance under specific circumstances and is affected by network loads and hardware efficiency.​

_____ describes the amount of data that a system can transfer in a fixed time period.​

In addition to benchmark testing, performance measurements, called _____, can monitor the number of transactions processed in a given time period, the number of records accessed, and the volume of online data.​

_____ measures the time between submitting a request for information and the fulfillment of the request.​

A _____ is a security weakness or soft spot.

A(n) _____ is an attack that takes advantage of a vulnerability.

A _____ is an internal or external entity that could endanger an asset.

_____ develops safeguards that reduce risks and their impact.

In IT security terms, a _____ is the impact of an attack multiplied by the likelihood of a vulnerability being exploited.

_____, a risk control strategy, eliminates risks by adding protective safeguards.

_____ is a process that monitors current activity and performance levels, anticipates future activity, and forecasts the resources needed to provide desired levels of service.

_____ ensures that authorized users have timely and reliable access to necessary information.

_____ prevents unauthorized users from creating, modifying, or deleting information.

The first step in managing IT security is to develop a _____ based on confidentiality, integrity, and availability.

_____ includes monitoring a system for signs of trouble, logging all system failures, diagnosing the problem, and applying corrective action.

To measure system performance, companies use _____, which uses a set of standard tests on one system to compare its performance and capacity to that of other systems.

_____ analyzes an organization's assets, threats, and vulnerabilities.

_____ protects information from unauthorized disclosure and safeguards privacy.

_____ measures actual system performance under specific circumstances and is affected by network loads and hardware efficiency.

_____ describes the amount of data that a system can transfer in a fixed time period.

In addition to benchmark testing, performance measurements, called _____, can monitor the number of transactions processed in a given time period, the number of records accessed, and the volume of online data.

_____ measures the time between submitting a request for information and the fulfillment of the request.