Question 1

_____ outlines procedures for keeping an organization operational in the event of a natural disaster or a network attack or intrusion.

Accepted Answer

Business continuity planning involves preparing and outlining procedures for keeping an organization operational in the event of a natural disaster or a network attack or intrusion. An access control system, intrusion detection system, and terminal resource security are all security measures that protect against unauthorized access and attacks, but do not specifically address business continuity planning.

Question 2

In the context of security, _____ is an attack that takes advantage of the human element of security systems.

Accepted Answer

Social engineering is an attack that targets the human element of security systems, often by tricking people into giving up sensitive information or granting access to secure areas or systems. Disk mirroring involves creating an exact duplicate of data on multiple disks, weblogging refers to the practice of writing and maintaining a blog or weblog, and voice recognition is a method of biometric authentication.

Question 3

__________is the unauthorized use of system data for personal gain, such as transferring money from another's account or charging purchases to someone else's account.

Accepted Answer

Computer fraud involves unauthorized access to sensitive data for personal gain, which encompasses transferring money from another's account or making charges to someone else's account. Denial-of-service (B) is a cyber-attack that makes a website unavailable to its intended users. Keystroke logging (C) is the practice of recording a user's keyboard inputs, typically without their knowledge or consent. Social engineering (D) involves tricking or manipulating individuals into divulging sensitive information or performing actions that are not in their best interest.

Question 4

Which of the following statements best describes spyware?

Accepted Answer

Spyware is software that is installed on a computer without the user's knowledge or consent and collects information about the user's online activity, such as websites visited, search queries, and personal information. It may also track keystrokes and capture screenshots.

Question 5

In the context of intentional computer and network threats, a _____ floods a network or server with service requests to prevent legitimate users' access to the system.

Accepted Answer

A denial-of-service attack floods a network or server with illegitimate service requests to prevent legitimate users' access to the system.

Question 6

When planning a comprehensive security system, the first step is designing__________, which use a combination of hardware and software for improving reliability-a way of ensuring availability in case of a system failure.

Accepted Answer

Fault-tolerant systems are designed to improve reliability and ensure availability even in case of system failures. They use a combination of hardware and software to achieve this goal, making them an essential component of any comprehensive security system. The other options are not relevant to designing a comprehensive security system.

Question 7

_____ primarily control access to computers and networks and include devices for securing computers and peripherals from theft.

Accepted Answer

Physical security measures primarily control access to computers and networks and include devices for securing computers and peripherals from theft. Nonbiometric security measures refer to measures such as passwords and firewalls, virtual security measures refer to measures such as virtual private networks (VPNs), and biometric security measures use unique biological traits such as fingerprints or facial recognition for authentication.

Question 8

In data encryption, thehttpsin a browser address bar indicates a safe HTTP connection over _____.

Accepted Answer

The answer of In data encryption, thehttpsin a browser address...

Question 9

When a computer is infected by a virus, _____.

Accepted Answer

When a computer is infected by a virus, some programs may suddenly increase in size due to the virus code being added to them, causing them to use more memory space. The other options are not related to virus infection.

Question 10

In the context of firewall as a nonbiometric security measure, a _____ is software that acts as an intermediary between two systems.

Accepted Answer

A proxy server is a type of software that acts as an intermediary between two systems. It serves as a gateway for clients to access resources from other servers. This makes it a useful tool for implementing firewall rules as it can filter and block incoming traffic from untrusted sources while allowing access to resources from trusted sources. Logic bombs, callback modems, and block multiplexers are not relevant to the context of a firewall.

Question 11

_____ can interfere with users' control of their computers, through such methods as installing additional software and redirecting Web browsers.

Accepted Answer

Spyware is specifically designed to interfere with users' control of their computers, typically by installing additional software and redirecting Web browsers. Keystroke loggers (A) and script loggers (D) can capture sensitive information, but they do not necessarily interfere with users' control of their computers. Firmware (C) is a type of software that runs on hardware devices, and while it can be targeted by attackers, it is not typically associated with interference with user control.

Question 12

Which of the following biometric security measures compares the length of each finger, the translucence of fingertips, and the webbing between fingers against stored data to verify users' identities?

Accepted Answer

The answer of Which of the following biometric security measures...

Question 13

_____ is also known as secret key encryption.

Accepted Answer

Symmetric encryption, also known as secret key encryption, uses the same key to both encrypt and decrypt data. This is in contrast to public key cryptography, which uses a public key for encryption and a private key for decryption. Message authentication and auto key generation are both separate encryption techniques.

Question 14

__________is used to encrypt the data sent through a virtual private network (VPN).

Accepted Answer

Internet Protocol Security (IPSec) is the protocol commonly used to encrypt the data sent through a virtual private network (VPN). It provides secure data transmission by encrypting the data sent between the two endpoints of the VPN connection. The encryption and decryption of the data are done at the network layer, which means that all the higher-layer protocols can take advantage of the secure data transmission without any modifications.

Question 15

In the context of computer and network security, _____ means that computers and networks are operating and authorized users can access the information they need.

Accepted Answer

Availability refers to the state of being available and accessible to authorized users. In the context of computer and network security, it means that computers and networks are up and running and that authorized users can access the information they need. This is an important aspect of security, as it ensures that users can perform their tasks and that data is available when needed.

Question 16

The process of capturing and recording network traffic is referred to as _____.

Accepted Answer

Sniffing is the term used to describe the process of capturing and recording network traffic. Phishing, bombing, and pharming are all malicious activities that involve tricking or attacking users or networks, but they do not involve capturing network traffic.

Question 17

_____ is a type of data encryption that enables users of the Internet to securely and privately exchange data through the use of a pair of keys that is obtained from a trusted authority and shared through that authority.

Accepted Answer

The description given matches that of a public key infrastructure (PKI), which uses a pair of keys - a public key and a private key - to encrypt and decrypt data. The public key can be freely distributed while the private key is kept secure. The trusted authority is often referred to as a certificate authority (CA) and is responsible for verifying the identities of users and issuing digital certificates.

Question 18

__________is a form of spyware that collects information about a user (without the user's consent) to determine which commercials to display in the user's Web browser.

Accepted Answer

Adware is a form of spyware that collects information about a user's browsing habits, such as the websites they visit and the search terms they enter, in order to display targeted advertisements. This is done without the user's consent or knowledge. Silverware and freeware are not related to this type of activity, and hardware is a physical component of a computer system. "Select" is not a viable answer choice.

Question 19

Which of the following is a type of access control used to protect systems from unauthorized access?

Accepted Answer

The answer of Which of the following is a type...

Question 20

In the context of computer and network security, _____ means that a system must not allow the disclosing of information by anyone who is not authorized to access it.

Accepted Answer

Confidentiality refers to the protection of sensitive information from unauthorized access. This means that a system should ensure that only authorized users have access to the information and that there are controls in place to prevent unauthorized access or disclosure of the information.

Quiz 5: Protecting Information Resources