Question 1

Black hats are also known as ethical hackers.

Accepted Answer

Black hats are hackers who use their knowledge for malicious purposes, while ethical hackers (also known as white hats) use their skills for security testing and vulnerability assessments to improve security measures.

Question 2

A worm travels from computer to computer in a network,but it does not usually erase data.

Accepted Answer

A worm is a type of malicious software that is designed to spread from one computer to another through a network. Unlike a virus, which can modify or erase data, a worm typically does not cause any damage to data. Rather, its goal is to spread as quickly and widely as possible, often by exploiting vulnerabilities in the network or software that is running on the computers. While a worm can still be harmful in terms of consuming network resources and slowing down the affected computers, it is generally not as destructive as a virus.

Question 3

Confidentiality,integrity,and availability are collectively referred to as the CIA triangle.

Accepted Answer

This is true. The CIA triangle is a widely used model for information security, with confidentiality, integrity, and availability as its central tenets.

Question 4

An intrusion detection system can protect against both external and internal access.

Accepted Answer

An intrusion detection system can monitor and detect unusual activity both from outside the network (external) and within the network (internal).

Question 5

Part of ensuring integrity is identifying authorized users and granting them access privileges.

Accepted Answer

Granting access privileges is a key part of ensuring integrity by controlling who can access and modify data.

Question 6

When a program containing a virus is used,the virus attaches itself to other files,and the cycle continues.

Accepted Answer

This is how viruses typically work - they replicate and spread by attaching themselves to other files, potentially causing damage and spreading to other systems.

Question 7

A proxy server acts as an intermediary between network users and the Internet.

Accepted Answer

A proxy server is designed to act as a gateway between network users and the Internet, serving as an intermediary that relays requests and responses between the two environments. By doing so, the proxy server can help to improve network security, filter content, optimize network performance, and more. In essence, it serves as an important tool for managing network traffic and ensuring that users have fast, safe, and reliable access to the information and resources they need online.

Question 8

If a drive in the RAID system fails,data stored on it can be reconstructed from data stored on the remaining drives.

Accepted Answer

This statement is true. RAID systems use redundant data storage to ensure that if one drive fails, data can still be recovered from the remaining drives. This is typically accomplished through mirroring or parity techniques.

Question 9

Social engineering techniques are easily detectable because they involve threatening employees with physical violence.

Accepted Answer

Social engineering techniques often involve manipulating employees through psychological tactics, such as creating a sense of urgency or using flattery or deception. Threatening physical violence would be considered illegal and not a common technique.

Question 10

Application-filtering firewalls are less expensive than packet-filtering firewalls.

Accepted Answer

Application-filtering firewalls tend to be more expensive than packet-filtering firewalls because they provide more advanced features and require more processing power.

Question 11

Social engineering takes advantage of the human element of security systems.

Accepted Answer

Social engineering involves manipulating individuals to reveal confidential information or perform actions that may compromise security. This type of attack targets the human element of security systems, rather than the technical components.

Question 12

When using mirror disks,if one of the two disks containing the same data fails,the other disk also fails.

Accepted Answer

If one of the two disks in a mirror disk setup fails, the other disk will still have a copy of the data and continue to function. The failed disk can be replaced and the mirror rebuilt, without any loss of data.

Question 13

Level 1 security protects the back-end systems to ensure confidentiality,accuracy,and integrity of data.

Accepted Answer

The answer of Level 1 security protects the back-end systems...

Question 14

A distributed denial-of-service (DDoS)attack involves hundreds of computers working together to bombard a Web site with thousands of requests for information in a short period.

Accepted Answer

A DDoS attack involves multiple computers, also known as a botnet, working together to overload a targeted website or network with traffic, making it unavailable to users.

Question 15

Trojans do not replicate themselves,as viruses and worms do.

Accepted Answer

Trojans are malicious software programs that trick users into executing them, often by disguising themselves as legitimate software. However, unlike viruses and worms, they do not have the ability to replicate themselves and spread to other systems without the user's intervention.

Question 16

Viruses can only be transmitted through direct computer-to-computer contact.

Accepted Answer

Viruses can be transmitted through various means such as email, file sharing, and infected websites, in addition to direct computer-to-computer contact.

Question 17

A firewall cannot reject an incoming packet,but instead sends a warning to the network administrator.

Accepted Answer

A firewall can definitely reject an incoming packet depending on its configuration and rules set up. It can also send a warning or log the incident for the network administrator to review.

Question 18

Spoofing is sending fraudulent e-mails that seem to come from legitimate sources,such as a bank or university.

Accepted Answer

The answer of Spoofing is sending fraudulent e-mails that seem...

Question 19

Social engineering is an example of an unintentional security threat.

Accepted Answer

Social engineering is a deliberate and intentional security threat that involves manipulating individuals to disclose sensitive information or perform actions that could compromise security.

Question 20

Hand geometry is an example of a biometric security measure.

Accepted Answer

Hand geometry is a type of biometric security measure that uses the physical characteristics of a person's hand to verify their identity.

Quiz 5: Protecting Information Resources