Question 1

A(n) project team should consist of a number of individuals who are experienced in one or multiple facets of the technical and nontechnical areas. _________________________

Accepted Answer

It is important for a project team to have a diverse set of skills and experiences to ensure successful completion of a project.

Question 2

SecOps focuses on integrating the need for the development team to provide iterative and
rapid improvements to system functionality and the need for the operations team to improve
security and minimize the disruption from software release cycles. _________________________

Accepted Answer

DevOps

Question 3

Information has redundancy when it is free from mistakes or errors and it has the value that the end user expects. _________________________

Accepted Answer

accuracy

Question 4

Indirect attacks originate from a compromised system or resource that is malfunctioning or working under the control of a threat. _________________________

Accepted Answer

Indirect attacks stem from compromised systems or resources that are being controlled by a threat actor without their knowledge. These attacks are often used for actions such as distributing malware or flooding the network with traffic.

Question 5

A server would experience a(n) __________ attack when a hacker compromises it to acquire information via a remote location using a network connection.
A)indirect
B)direct
C)software
D)hardware

Accepted Answer

A direct attack is when a hacker gains unauthorized access to a system or network through a direct connection, such as a network connection. In this case, the hacker is compromising the server to acquire information remotely, which fits the description of a direct attack. The other options are not relevant to this scenario.

Question 6

MULTICS stands for Multiple Information and Computing Service. _________________________

Accepted Answer

Multiplexed

Question 7

__________ was the first operating system to integrate security as one of its core functions.
A)UNIX
B)DOS
C)MULTICS
D)ARPANET

Accepted Answer

MULTICS (Multiplexed Information and Computing Service) was the first operating system to integrate security as one of its core functions. Developed in the late 1960s by a collaboration between MIT, General Electric and Bell Labs, it implemented a hierarchical file system, access controls and authentication mechanisms, and was designed to be a highly secure system. While it was not widely adopted, many of its security principles influenced subsequent operating systems such as UNIX, which was developed by some of the same individuals who worked on MULTICS.

Question 8

The Analysis phase of the SDLC examines the event or plan that initiates the process and specifies the objectives, constraints, and scope of the project. _________________________

Accepted Answer

Investigation

Question 9

According to the CNSS, networking is "the protection of information and its critical elements." _________________________

Accepted Answer

information security

Question 10

The Security Development Life Cycle (SDLC) is a general methodology for the design and implementation of an information system. _________________________

Accepted Answer

Systems

Question 11

__________ is a network project that preceded the Internet.
A)NIST
B)ARPANET
C)FIPS
D)DES

Accepted Answer

ARPANET was a network project that preceded the Internet. NIST is a standards organization, FIPS is a set of standards, and DES is an encryption algorithm.

Question 12

Hardware is the physical technology that houses and executes the software, stores and transports the data, and provides interfaces for the entry and removal of information from the system. _________________________

Accepted Answer

Hardware refers to the physical components of a computer or technological device, including the central processing unit, motherboard, storage devices, and input/output peripherals. These components work together to execute software instructions and store and retrieve data.

Question 13

Confidentiality ensures that only those with the rights and privileges to access information are able to do so. _________________________

Accepted Answer

Confidentiality is one of the basic principles of information security that ensures the protection of sensitive information against unauthorized access, disclosure, or exposure. It ensures that only authorized parties with the appropriate rights and privileges are able to access and handle the information, and that it remains protected from malicious or accidental disclosure.

Question 14

The famous study entitled "Protection Analysis: Final Report" focused on a project undertaken by ARPA to understand and detect __________ in operating systems security.
A)bugs
B)vulnerabilities
C)malware
D)maintenance hooks

Accepted Answer

The report focused on understanding and detecting vulnerabilities in operating systems security, not bugs, malware or maintenance hooks.

Question 15

Information security can begin as a grassroots effort in which systems administrators attempt to improve the security of their systems, often referred to as the bottom-up approach. _________________________

Accepted Answer

The statement is true, information security can be initiated by systems administrators improving the security of their systems from the bottom-up approach.

Question 16

A(n) hardware system is the entire set of people, procedures, and technology that enable business to use information. _________________________

Accepted Answer

information

Question 17

Key end users should be assigned to a developmental team, known as the united application development team. _________________________

Accepted Answer

joint

Question 18

Of the two approaches to information security implementation, the top-down approach has a higher probability of success. _________________________

Accepted Answer

The top-down approach involves senior management taking the lead in implementing information security measures, ensuring that all levels of the organization are committed to the security objectives, and providing the necessary resources for successful implementation. This approach ensures that security measures are implemented consistently and effectively throughout the organization, reducing the risk of vulnerabilities. In contrast, the bottom-up approach relies on individual employees identifying security risks and implementing measures on their own, which can lead to inconsistent implementation and a higher likelihood of security breaches.

Question 19

__________ security addresses the issues necessary to protect the tangible items, objects, or areas of an organization from unauthorized access and misuse.
A)Physical
B)Personal
C)Object
D)Standard

Accepted Answer

Physical security deals with the protection of the physical resources of an organization such as buildings, facilities, equipment, and other tangible items. It aims to prevent unauthorized access, damage, theft, or other threats to these resources. Personal security is related to the protection of individuals from physical harm, while object security and standard security are not relevant in this context.

Question 20

When unauthorized individuals or systems can view information, confidentiality is breached. _________________________

Accepted Answer

Confidentiality is breached when unauthorized individuals or systems can view information.

Quiz 1: Introduction to Information Security