Question 1

SSL is a protocol used to establish a secure connection between two computers.

Accepted Answer

SSL (Secure Sockets Layer) is a protocol used to establish a secure and encrypted connection between two computers over the internet. This is often used to ensure that sensitive information, such as passwords or credit card numbers, are transmitted securely and cannot be intercepted by hackers or malicious third parties. SSL has since been replaced by the newer TLS (Transport Layer Security) protocol, but the terms SSL and TLS are often used interchangeably.

Question 2

Sniffers enable hackers to steal proprietary information from anywhere on a network,including e-mail messages,company files,and confidential reports.

Accepted Answer

Sniffers are designed to intercept and read data packets traveling over a network. Therefore, they can be used by hackers to capture confidential information, such as e-mails, files, and reports.

Question 3

In a walkthrough,hackers are able to bypass security controls of a system with little opposition.

Accepted Answer

False

Question 4

A drive-by download is a technique used by hackers to enable accessing files on a wireless network.

Accepted Answer

A drive-by download is a technique used by hackers to download and install malware onto a user's device without their knowledge or consent, typically by exploiting vulnerabilities in software or web browsers. It does not necessarily involve accessing files on a wireless network.

Question 5

Computer worms spread much more rapidly than computer viruses.

Accepted Answer

Computer worms are self-replicating programs that can spread quickly through a computer network or the internet, while computer viruses require a host program to spread and often rely on user actions to propagate. Therefore, worms can spread much more rapidly than viruses.

Question 6

High-availability computing is also referred to as fault tolerance.

Accepted Answer

The answer of High-availability computing is also referred to as...

Question 7

NAT conceals the IP addresses of the organization's internal host computers to deter sniffer programs.

Accepted Answer

NAT (Network Address Translation) is a technique used to mask the internal IP addresses of an organization's host computers by mapping them to a single external IP address. This helps to provide a layer of security and prevent external sniffer programs from obtaining the internal IP addresses.

Question 8

An acceptable use policy defines the acceptable level of access to information assets for different users.

Accepted Answer

The answer of An acceptable use policy defines the acceptable...

Question 9

Public key encryption uses two keys.

Accepted Answer

Public key encryption uses two keys, a public key and a private key. The public key is used to encrypt the message and can be shared freely, while the private key is kept secret and used to decrypt the message.

Question 10

Wireless networks are vulnerable to penetration because radio frequency bands are easy to scan.

Accepted Answer

Wireless networks use radio frequencies to communicate, which can easily be scanned by attackers looking to identify vulnerabilities and access points for infiltration. This makes them more susceptible to penetration than wired networks.

Question 11

DoS attacks are used to destroy information and access restricted areas of a company's information system.

Accepted Answer

DoS attacks (Denial of Service attacks) are used to disrupt or disable access to networks, servers, or websites by overwhelming them with traffic. They do not typically involve destruction of information or access to restricted areas.

Question 12

Mobile devices are not targeted as extensively by malware as traditional computers.

Accepted Answer

The answer of Mobile devices are not targeted as extensively...

Question 13

Unauthorized access is a security challenge that is most likely to occur in a network at the point of client computers.

Accepted Answer

Client computers can be easily infected by malware and can be used to gain unauthorized access to a network. It is important to ensure that client computers have updated security software and policies in place to prevent unauthorized access. However, unauthorized access can also occur at other points in the network, such as through a weak password or unsecured server.

Question 14

Zero defects cannot be achieved in larger software programs because fully testing programs that contain thousands of choices and millions of paths would require thousands of years.

Accepted Answer

It is practically impossible to test every possible scenario in larger software programs, so zero defects cannot be achieved. However, there are strategies and frameworks that aim to minimize the number of defects and improve the overall quality of the software.

Question 15

One form of spoofing involves forging the return address on an e-mail so that the e-mail message appears to come from someone other than the sender.

Accepted Answer

This statement is true. Spoofing can involve manipulating various elements of an email, including the sender's address, in order to deceive the recipient into thinking the message is from a trusted source.

Question 16

Packet filtering catches most types of network attacks.

Accepted Answer

Packet filtering primarily examines headers of packets to decide whether to allow or block them based on predefined rules. It does not analyze the payload deeply enough to catch most types of sophisticated network attacks, such as those involving malware or advanced persistent threats (APTs).

Question 17

Biometric authentication is the use of physical characteristics such as retinal images to provide identification.

Accepted Answer

Biometric authentication uses physical characteristics such as retinal images, fingerprints, or facial recognition to provide identification.

Question 18

Computers using cable modems to connect to the Internet are more open to penetration than those connecting via dial-up.

Accepted Answer

Cable modems use an always-on connection, making them more susceptible to hacking attempts and malware infections compared to dial-up connections that only connect when initiated by the user.

Question 19

A Trojan horse is a software program that appears to be benign but then does something other than expected.

Accepted Answer

A Trojan horse is a type of malware that disguises itself as a legitimate software program but actually performs malicious actions, such as stealing personal information or damaging the computer system.

Question 20

Viruses can be spread through e-mail.

Accepted Answer

Yes, viruses can be spread through e-mail as attachments or links in the body of the e-mail. It is important to always proceed with caution when opening e-mails or clicking on links from unknown or suspicious sources.

Quiz 8: Securing Information Systems