Question 1

Two watchdog organizations that investigate allegations of software abuse: SIIA and NSA.

Accepted Answer

The SIIA (Software & Information Industry Association) is a watchdog organization that investigates software abuse, but the NSA (National Security Agency) is a government agency focused on national security, not software abuse.

Question 2

A worm can deposit copies of itself onto all Web servers that the infected system can reach,so that users who subsequently visit those sites become infected.

Accepted Answer

This statement is true. A worm can spread copies of itself to multiple web servers that are connected to the infected system, leading to the spread of infection to users who later visit those websites.

Question 3

A mail bomb is a form of DoS.

Accepted Answer

A mail bomb is a form of denial of service attack (DoS), in which the attacker sends a large number of email messages to the target's email server or inbox, causing it to crash or become inaccessible.

Question 4

Information security safeguards the technology assets in use at the organization.

Accepted Answer

Information security is the practice of protecting the confidentiality, integrity, and availability of information and technology assets in use at the organization.

Question 5

Compared to Web site defacement,vandalism within a network is less malicious in intent and more public.

Accepted Answer

Vandalism within a network can be just as malicious in intent as web site defacement and is typically less public, as it takes place within a closed network environment rather than on the public-facing internet.

Question 6

A number of technical mechanisms-digital watermarks and embedded code,copyright codes,and even the intentional placement of bad sectors on software media-have been used to enforce copyright laws.

Accepted Answer

Yes, these technical mechanisms have been used to enforce copyright laws.

Question 7

A firewall is a mechanism that keeps certain kinds of network traffic out of a private network.

Accepted Answer

A firewall is a network security device that monitors and filters incoming and outgoing network traffic based on an organization's previously established security policies. Its purpose is to prevent unauthorized access to or from a private network.

Question 8

Forces of nature,force majeure,or acts of God can present some of the most dangerous threats,because they are usually occur with very little warning and are beyond the control of people.

Accepted Answer

Forces of nature, force majeure, or acts of God can indeed present dangerous threats that are often unpredictable and beyond human control.

Question 9

Organizations can use dictionaries to disallow passwords during the reset process and thus guard against easy-to-guess passwords.

Accepted Answer

Dictionaries can be used to disallow commonly used or easily guessable passwords during the password reset process, helping to increase the security of user accounts.

Question 10

Information security's primary mission is to ensure that systems and their contents retain their confidentiality at all costs.

Accepted Answer

While confidentiality is one of the primary goals of information security, it is not the only one. Information security also aims to ensure the availability and integrity of systems and their contents, as well as to protect against unauthorized access and malicious attacks.

Question 11

DoS attacks cannot be launched against routers.

Accepted Answer

DoS attacks can be launched against routers as they are vulnerable to various types of attacks, such as SYN floods, ping floods, and UDP floods. These attacks can overwhelm the router's resources, causing it to become unresponsive or even crash.

Question 12

Much human error or failure can be prevented with training and ongoing awareness activities.

Accepted Answer

By providing adequate training and ongoing awareness activities, individuals are better equipped to make informed decisions and avoid mistakes that may lead to errors or failures. This can include training on proper procedures, safety protocols, and risk management, as well as regular reminders and updates to help reinforce important concepts and maintain vigilance.

Question 13

An act of theft performed by a hacker falls into the category of "theft," but is also often accompanied by defacement actions to delay discovery and thus may also be placed within the category of "forces of nature."

Accepted Answer

Theft performed by a hacker is a deliberate action and cannot be categorized as a force of nature. Defacement actions may be used to cover up the theft, but they do not change the nature of the act itself.

Question 14

A timing attack involves the interception of cryptographic elements to determine keys and encryption algorithms.

Accepted Answer

A timing attack does involve intercepting cryptographic elements to determine keys and encryption algorithms.

Question 15

A worm requires that another program is running before it can begin functioning.

Accepted Answer

The answer of A worm requires that another program is...

Question 16

Attacks conducted by scripts are usually unpredictable.

Accepted Answer

The answer of Attacks conducted by scripts are usually unpredictable....

Question 17

Expert hackers are extremely talented individuals who usually devote lots of time and energy to attempting to break into other people's information systems.

Accepted Answer

Expert hackers are indeed highly skilled individuals who spend a significant amount of time and effort trying to breach security systems, usually with the goal of obtaining unauthorized access to sensitive or confidential information.

Question 18

With electronic information is stolen,the crime is readily apparent.

Accepted Answer

The theft of electronic information is often not immediately apparent because it can be copied without leaving a trace, unlike physical theft.

Question 19

With the removal of copyright protection,software can be easily distributed and installed.

Accepted Answer

With the removal of copyright protection, software can be easily distributed and installed without legal repercussions. This can make it easier for unauthorized individuals to access and use software without proper licensing or payment. However, it is important to note that distributing and using such software is illegal and can lead to civil or criminal penalties.

Question 20

A sniffer program shows all the data going by on a network segment including passwords,the data inside files-such as word-processing documents-and screens full of sensitive data from applications.

Accepted Answer

Sniffer program can capture and display all the data passing through a network, including sensitive information like passwords, file contents, and screen displays from applications.

Quiz 2: The Need for Security