Question 1

A _____  consists of self-propagating program code that is triggered by a specified time or event.

Accepted Answer

A virus is a type of malware that, when executed, replicates itself by modifying other computer programs and inserting its own code. It often spreads to other computers through email attachments, internet downloads, or shared files, and can be triggered by specific events or times.

Question 2

Before establishing a security program, organizations should __________.

Accepted Answer

Conducting a basic risk analysis is essential before establishing a security program because it helps identify potential threats, vulnerabilities, and the impact of those threats, allowing the organization to prioritize and address them effectively.

Question 3

A(n)_____ contains code intended to disrupt a computer, network, or Web site and is usually hidden inside a popular program.

Accepted Answer

A Trojan program is designed to disrupt a computer, network, or website, often by being hidden within a seemingly harmless program.

Question 4

According to a 2019 study, which of the following is not an accurate statistic about ransomware attacks?

Accepted Answer

The statement that 97% of targeted US companies paid a ransom is not accurate. While ransomware attacks are a significant threat and many organizations do end up paying ransoms, the percentage is not as high as 97%. The actual percentage varies by study and over time, but it is generally lower than this figure.

Question 5

The top two targets for ransomware attacks are the __________.

Accepted Answer

The healthcare industry and financial institutions are among the top targets for ransomware attacks due to the critical nature of their services and the valuable data they hold, making them more likely to pay ransoms to regain access to their systems and data.

Question 6

Which of the following is recommended in the context of a comprehensive security plan?

Accepted Answer

Training employees in security measures is a fundamental part of a comprehensive security plan, ensuring that all staff members are aware of and can effectively contribute to the organization's security efforts.

Question 7

When planning a comprehensive security system, the first step is designing _____ , which use a combination of hardware and software for improving reliability, a way of ensuring availability in case of a system failure.

Accepted Answer

Fault-tolerant systems are designed to continue operating without interruption even in the event of a failure. They use a combination of hardware and software to ensure system availability and reliability, making them the correct choice for improving reliability and ensuring availability in case of system failure.

Question 8

_____  is the unauthorized use of system data for personal gain, such as transferring money from another's account or charging purchases to someone else's account.

Accepted Answer

Computer fraud involves the unauthorized use of system data for personal gain, such as transferring money from another's account or charging purchases to someone else's account.

Question 9

A(n)_____  is a combination of hardware and software that acts as a filter or barrier between a private network and external computers or networks.

Accepted Answer

A firewall is specifically designed to serve as a barrier or filter between a private network and external computers or networks, controlling incoming and outgoing network traffic based on predetermined security rules.

Question 10

Code Red, Melissa, and Sasser are examples of _____ .

Accepted Answer

Code Red, Melissa, and Sasser are all examples of computer worms, which are malicious software programs that replicate themselves in order to spread to other computers.

Question 11

A ________ is rented from a third party and usually contains telecommunication equipment.

Accepted Answer

A co-location facility is rented from a third party to house telecommunication equipment, providing space, power, cooling, and physical security for the server, storage, and networking equipment of other firms.

Question 12

If disaster strikes, which of the following is a step that an organization should follow in order to resume normal operations?

Accepted Answer

Notifying all affected parties is crucial for transparency and coordination in resuming normal operations after a disaster.

Question 13

_____  is one of the most popular password managers.

Accepted Answer

Dashlane is well-known and widely used as a password manager, offering features to store and manage passwords securely.

Question 14

_____  is an attempt to gain access to a network by posing as an authorized user in order to find sensitive information, such as passwords and credit card information.

Accepted Answer

Spoofing is the act of disguising a communication from an unknown source as being from a known, trusted source, which can be used to gain unauthorized access to a network.

Question 15

A _____  is a security threat that may launch a worm through a Trojan horse or launch a denial-of-service attack at a targeted IP address.

Accepted Answer

A blended threat is a sophisticated security threat that combines the characteristics of viruses, worms, Trojan horses, and other malicious code with server and Internet vulnerabilities to initiate, transmit, and spread an attack.

Question 16

_____  is a method of access control that prevents unauthorized users from using an unattended computer to access the network and data.

Accepted Answer

Terminal resource security is designed to prevent unauthorized access to a computer or network by securing the terminal or endpoint, especially when it is unattended. This method ensures that unattended devices do not become gateways for unauthorized access.

Question 17

Which of the following is not considered part of a comprehensive security plan?

Accepted Answer

Leaving logged-on workstations unattended is a security risk, not a component of a comprehensive security plan. Strong passwords, physical security measures, and updated antivirus programs are all essential parts of a comprehensive security plan.

Question 18

_____ , a biometric security measure, translates words into digital patterns, which are recorded and examined for tone and pitch.

Accepted Answer

Voice recognition technology works by converting spoken words into digital patterns, which are then analyzed for specific characteristics such as tone and pitch to verify an individual's identity.

Question 19

When developing a comprehensive security plan, which of the following steps is not recommended?

Accepted Answer

Zero trust security is a recommended approach in modern cybersecurity strategies. It operates on the principle of "never trust, always verify," which enhances security by not automatically trusting anything inside or outside the network perimeter. Avoiding its implementation is not recommended.

Question 20

Which federal law requires IT professionals to test the effectiveness of security measures protecting a company's data and vital records?

Accepted Answer

The Sarbanes-Oxley Act of 2002 (often shortened to SOX) mandates that IT departments must establish internal controls and procedures for financial reporting to protect against data tampering. This includes testing the effectiveness of those security measures to ensure the integrity of the company's data and vital records.

Quiz 5: Protecting Information Resources

A _____ consists of self-propagating program code that is triggered by a specified time or event.

Before establishing a security program, organizations should __________.

A(n) _____ contains code intended to disrupt a computer, network, or Web site and is usually hidden inside a popular program.

According to a 2019 study, which of the following is not an accurate statistic about ransomware attacks?

The top two targets for ransomware attacks are the __________.

Which of the following is recommended in the context of a comprehensive security plan?

When planning a comprehensive security system, the first step is designing _____ , which use a combination of hardware and software for improving reliability, a way of ensuring availability in case of a system failure.

_____ is the unauthorized use of system data for personal gain, such as transferring money from another's account or charging purchases to someone else's account.

A(n) _____ is a combination of hardware and software that acts as a filter or barrier between a private network and external computers or networks.

Code Red, Melissa, and Sasser are examples of _____ .

A ________ is rented from a third party and usually contains telecommunication equipment.

If disaster strikes, which of the following is a step that an organization should follow in order to resume normal operations?

_____ is one of the most popular password managers.

_____ is an attempt to gain access to a network by posing as an authorized user in order to find sensitive information, such as passwords and credit card information.

A _____ is a security threat that may launch a worm through a Trojan horse or launch a denial-of-service attack at a targeted IP address.

_____ is a method of access control that prevents unauthorized users from using an unattended computer to access the network and data.

Which of the following is not considered part of a comprehensive security plan?

_____ , a biometric security measure, translates words into digital patterns, which are recorded and examined for tone and pitch.

When developing a comprehensive security plan, which of the following steps is not recommended?

Which federal law requires IT professionals to test the effectiveness of security measures protecting a company's data and vital records?