Question 1

In the context of computer and network security, _____ means that a system must not allow the disclosing of information by anyone who is not authorized to access it.

Accepted Answer

Confidentiality in computer and network security refers to the principle that information should not be made available or disclosed to unauthorized individuals, entities, or processes. It ensures that access to data is restricted to those who are permitted to have it.

Question 2

Spoofing happens when:

Accepted Answer

Spoofing refers to the act of disguising a malicious program or entity as a legitimate one to deceive users or systems, which is accurately described in option C.

Question 3

In the context of computer and network security, _____ means a quick recovery in the event of a system failure or disaster.

Accepted Answer

Availability in the context of computer and network security refers to ensuring that systems, applications, and data are accessible to authorized users when needed, which includes the ability to recover quickly from a system failure or disaster.

Question 4

An organization's comprehensive security plan should include procedures for installing software patches and updates on a regular basis.

Accepted Answer

Regularly installing software patches and updates is crucial for fixing security vulnerabilities and enhancing the overall security posture of an organization.

Question 5

The Committee on National Security Systems (CNSS)proposed a model known as the _____ for evaluating information security.

Accepted Answer

The McCumber cube is a model proposed by the Committee on National Security Systems (CNSS) for evaluating information security. It provides a three-dimensional representation of information security that includes considerations of confidentiality, integrity, and availability across the dimensions of technology, policy, and people.

Question 6

In the context of computer and network security, a security system is said to possess _____ when it does not allow data to be corrupted or allow unauthorized changes to a corporate database.

Accepted Answer

Integrity in computer and network security refers to the protection against unauthorized data alteration or corruption, ensuring that data remains accurate and unmodified.

Question 7

_____ can interfere with users' control of their computers, through such methods as installing additional software and redirecting Web browsers.

Accepted Answer

Spyware is designed to interfere with a user's control over their computer. It can install additional software, redirect web browsers, and collect personal information without consent.

Question 8

A level 1 security system is used to protect _____ against unauthorized access.

Accepted Answer

The answer of A level 1 security system is used...

Question 9

Which statement is true of phishing?

Accepted Answer

Phishing involves sending fraudulent emails that appear to be from reputable sources to induce individuals to reveal personal information, such as passwords and credit card numbers.

Question 10

In the context of computer crimes and attacks, the difference between phishing and spear phishing is that:

Accepted Answer

Spear phishing is a more targeted form of phishing, where the attacker customizes their approach to specifically target an individual or organization, making the attack more personalized and potentially more effective.

Question 11

In the context of computer and network security, _____ refers to the accuracy of information resources within an organization.

Accepted Answer

Integrity in computer and network security refers to the accuracy and completeness of data. It ensures that information is not altered or tampered with by unauthorized individuals.

Question 12

In the context of computer and network security, _____ means that computers and networks are operating and authorized users can access the information they need.

Accepted Answer

Availability in the context of computer and network security refers to ensuring that computer systems are up and running, and that authorized users have access to the information they need when they need it.

Question 13

_____ is a computer crime that involves destroying or disrupting computer services.

Accepted Answer

Sabotage is the correct answer because it specifically refers to the act of deliberately destroying, damaging, or obstructing something, in this case, computer services, which is a form of computer crime.

Question 14

One of the first steps to consider when developing an organization's comprehensive security plan should be to set up a security committee with representatives from all departments as well as upper management.

Accepted Answer

Establishing a security committee with cross-departmental representation ensures that all aspects of the organization's operations are considered in the security planning process, facilitating a more comprehensive and effective security strategy.

Question 15

In a level 2 security system, _____ must be protected to ensure confidentiality, accuracy, and integrity of data.

Accepted Answer

Back-end systems store and process sensitive data, so they must be protected to ensure confidentiality, accuracy, and integrity of data.

Question 16

Similar to phishing, _____ is directing Internet users to fraudulent Web sites with the intention of stealing their personal information, such as Social Security numbers, passwords, bank account numbers, and credit card numbers.

Accepted Answer

Pharming is the correct term for the practice of directing users to fraudulent websites to steal personal information, distinguishing it from phishing by the method of attack, often involving the manipulation of DNS records or tricking the victim's browser in some way.

Question 17

John downloaded Alten Cleaner, a program that poses as a computer registry cleaner, on his computer. Once he installed the program on his computer, the program illegitimately gained access to John's passwords and credit card information. In this scenario, it is evident that John was a victim of _____.

Accepted Answer

The answer of John downloaded Alten Cleaner, a program that...

Question 18

Which statement best describes spyware?

Accepted Answer

Spyware is designed to collect information about users without their knowledge, often for advertising purposes or more malicious intent, such as stealing personal information.

Question 19

When developing a comprehensive security plan, employees' awareness of security problems should be minimized.

Accepted Answer

Employees' awareness of security problems should be maximized, not minimized, as they play a crucial role in identifying, reporting, and preventing security threats.

Question 20

The process of capturing and recording network traffic is referred to as _____.

Accepted Answer

Sniffing is the correct term for the process of capturing and recording network traffic. This is often done for the purpose of analyzing the traffic for various reasons, such as monitoring network performance, detecting intrusions, or collecting data for malicious purposes.

Quiz 5: Protecting Information Resources