Question 1

_____ is a type of data encryption that enables users of the Internet to securely and privately exchange data through the use of a pair of keys that is obtained from a trusted authority and shared through that authority.
A)A public key infrastructure
B)Open key encryption
C)Secret key encryption
D)A private key infrastructure

Accepted Answer

The description fits that of a public key infrastructure (PKI) which uses a pair of keys, a public one and a private one, to encrypt and decrypt data respectively. These keys are obtained from a trusted authority and shared through that authority, ensuring secure and private data exchange. Open key encryption does not exist as a term, secret key encryption uses a single key for both encryption and decryption, and a private key infrastructure is not a recognized encryption method.

Question 2

In the event of a network attack or intrusion,a _____ lists the tasks that must be performed by the organization to restore damaged data and equipment.
A)risk assessment plan
B)systems engineering plan
C)disaster recovery plan
D)security compliance plan

Accepted Answer

A disaster recovery plan (DRP) is a documented process or set of procedures to recover and protect a business IT infrastructure in the event of a disaster or any other breach of security. It outlines the steps to be taken to recover data and systems, restore application functionality, and return the organization to its normal operations. A DRP is an essential part of any organization's security framework, and failure to have a DRP in place can result in significant financial losses and reputational damage. A risk assessment plan, systems engineering plan, and security compliance plan are all important components of an organization's security program, but they do not address the recovery and restoration of IT infrastructure after an attack or intrusion.

Question 3

Which statement is true of symmetric encryption?
A)It uses two different keys to encrypt and decrypt a message.
B)It requires more processing power than asymmetric encryption.
C)It is difficult to share a key over the Internet in symmetric encryption.
D)It is impossible to create digital signatures using symmetric encryption.

Accepted Answer

DC) Sharing a key securely over the Internet is a challenge in symmetric encryption because the same key used for encryption is also used for decryption. This means the key must be transmitted or shared in a secure manner to avoid interception.D) Digital signatures typically require asymmetric encryption, where a private key is used for signing, and a public key is used for verification. Symmetric encryption, using the same key for encryption and decryption, does not facilitate the creation of digital signatures in the same way.

Question 4

_____ is an example of antispyware software.
A)STOPzilla
B)AndroZip
C)Tumblr
D)Dogpile

Accepted Answer

STOPzilla is a well-known and popular software specifically designed to detect and remove spyware, adware, and other malicious programs from a computer system. AndroZip is a file archiver tool, Tumblr is a social media platform, and Dogpile is a search engine.

Question 5

_____ is a commonly used encryption protocol that manages transmission security on the Internet.
A)Application Layer
B)Secure Sockets Layer
C)Transmission Control Protocol
D)User Datagram Protocol

Accepted Answer

The Secure Sockets Layer (SSL) protocol is commonly used for managing transmission security on the Internet. It is used to establish encrypted links between web servers and browsers, ensuring that all data transmitted between them remains confidential and cannot be intercepted by third parties. The SSL protocol has been succeeded by the Transport Layer Security (TLS) protocol, which provides similar functionality with stronger security.

Question 6

In data encryption,the https in a browser address bar indicates a safe HTTP connection over _____.
A)Secure Sockets Layer
B)Transport Layer Security
C)User Datagram Protocol
D)Transmission Control Protocol

Accepted Answer

The answer of In data encryption,the https in a browser...

Question 7

Which form of text needs to be unscrambled using a decryption key?
A)Plaintext
B)Cleartext
C)Teletext
D)Ciphertext

Accepted Answer

Only ciphertext needs to be unscrambled using a decryption key, as it is the form of text that has been encrypted and is not readable without the key. Plaintext, cleartext, and teletext are all unencrypted forms of text.

Question 8

_____ outlines procedures for keeping an organization operational in the event of a natural disaster or a network attack or intrusion.
A)An access control system
B)Business continuity planning
C)An intrusion detection system
D)Terminal resource security

Accepted Answer

Business continuity planning outlines procedures for keeping an organization operational in the event of a natural disaster or a network attack or intrusion. An access control system manages user access to a system or network resources. An intrusion detection system monitors network traffic for suspicious activity. Terminal resource security is concerned with securing individual devices or workstations.

Question 9

_____ is a form of spyware that collects information about a user (without the user's consent)to determine which commercials to display in the user's Web browser.
A)Firmware
B)Silverware
C)Freeware
D)Adware

Accepted Answer

Adware is a type of spyware that tracks a user's browsing habits in order to display targeted advertisements. It is often installed without the user's knowledge or consent. Firmware is software that is embedded in a device's hardware, while silverware refers to eating utensils made of silver. Freeware is software that is available for free.

Question 10

When planning a comprehensive security system,the first step is designing _____,which use a combination of hardware and software for improving reliability,a way of ensuring availability in case of a system failure.
A)database-resilient systems
B)vulnerability-evade systems
C)primary-defense systems
D)fault-tolerant systems

Accepted Answer

The term "fault-tolerant systems" refers to systems designed with redundancy and backup mechanisms to ensure continued functionality and availability in the event of a component failure. This is a crucial aspect of comprehensive security systems, as it ensures that the system can continue to operate even if one or more components experience issues.

Question 11

_____ is an attempt to gain access to a network by posing as an authorized user in order to find sensitive information,such as passwords and credit card information.
A)Phishing
B)Keystroke logging
C)Spoofing
D)Pharming

Accepted Answer

Spoofing is when someone creates a fake login or website that appears legitimate in order to trick users into giving away sensitive information. It is a form of social engineering where the attacker poses as a trusted source to gain access to privileged information. Phishing is a similar attack where the attacker sends fraudulent emails or messages to individuals in order to obtain sensitive data, while keystroke logging involves the use of software to record the keys pressed on a keyboard in order to capture passwords and other sensitive information. Pharming is a more advanced attack where the attacker hijacks a legitimate website's domain name system (DNS) server and redirects users to a fake website without their knowledge.

Question 12

_____,a recent cryptographic protocol,ensures data security and integrity over public networks,such as the Internet.
A)Transport Layer Security
B)Terminal Resource Security
C)Transmission Control Security
D)User Datagram Security

Accepted Answer

Transport Layer Security (TLS) is a cryptographic protocol designed to provide secure communication over the internet. It ensures data security and integrity by encrypting data transmitted between applications and servers. It is widely used to secure online transactions, email, and web browsing.

Question 13

_____ uses a public key known to everyone and a private key known only to the recipient.
A)Symmetric encryption
B)Asymmetric encryption
C)Remote key encryption
D)Secret key encryption

Accepted Answer

This description matches asymmetric encryption, where the public key can be freely shared and the private key is kept secret by the recipient.

Question 14

Data sent through a virtual private network (VPN)can be encrypted using the _____.
A)User Datagram Protocol
B)Transmission Control Protocol
C)Internet Control Message Protocol
D)Layer Two Tunneling Protocol

Accepted Answer

Layer Two Tunneling Protocol (L2TP) is a commonly used protocol for VPNs. It provides encryption and tunneling of data between two endpoints, making it a secure method for remote access and communication. The other protocols listed (User Datagram Protocol, Transmission Control Protocol, and Internet Control Message Protocol) are used for different purposes within networking and do not provide the same level of encryption and security as L2TP.

Question 15

In the context of e-commerce transaction security measures,authentication is a critical factor because it ensures that:
A)a system quickly recovers in the event of a system failure or disaster.
B)the person using a credit card number is the card's legitimate owner.
C)the accuracy of information resources within an organization is maintained.
D)a system can easily be restored to operational status.

Accepted Answer

Authentication ensures that the person using a credit card number is the card's legitimate owner, which is crucial for preventing fraudulent transactions in e-commerce. None of the other options are directly related to the purpose of authentication.

Question 16

_____ is the unauthorized use of system data for personal gain,such as transferring money from another's account or charging purchases to someone else's account.
A)Computer fraud
B)Denial-of-service
C)Keystroke logging
D)Social engineering

Accepted Answer

Computer fraud involves unauthorized use of system data for personal gain, including activities like transferring money from another's account or charging purchases to someone else's account.

Question 17

The main function of Cyber Incident Response Capability (CIRC)is to _____.
A)provide level 1 security
B)restrict access controls to unauthorized personnel
C)provide information on security incidents
D)create backdoors to bypass security protocols

Accepted Answer

The main function of CIRC is to provide information on security incidents. It is responsible for detecting, analyzing, and responding to cyber incidents that occur within an organization, as well as providing guidance and support to mitigate the impact of those incidents. CIRC does not provide level 1 security, restrict access controls, or create backdoors.

Question 18

_____ is also known as secret key encryption.
A)Symmetric encryption
B)Auto key generation
C)Public key cryptography
D)Message authentication

Accepted Answer

Symmetric encryption, also known as secret key encryption, uses the same secret key for both encryption and decryption of data. This method is faster and more efficient than public key cryptography because the key used is a single shared secret, instead of two keys used in public key cryptography.

Question 19

_____ monitor and record the keys pressed on a keyboard and can be software or hardware devices.
A)Keystroke loggers
B)Key chain planners
C)Key punchers
D)Key performers

Accepted Answer

Keystroke loggers are specifically designed to monitor and record the keys pressed on a keyboard. They can be software or hardware devices that can be installed on a computer to track the user's keystrokes. Therefore, A is the best choice.

Question 20

Which statement is true of asymmetric encryption?
A)It uses the same key to encrypt and decrypt a message.
B)It requires a large amount of processing power.
C)It can easily share a key over the Internet.
D)It needs the shared key to be a secret between the sender and the receiver.

Accepted Answer

Asymmetric encryption, unlike symmetric encryption, uses two keys (a public key and a private key) for encryption and decryption, which requires more processing power due to the complex mathematical algorithms involved.

Quiz 5: Protecting Information Resources

_____ is a type of data encryption that enables users of the Internet to securely and privately exchange data through the use of a pair of keys that is obtained from a trusted authority and shared through that authority.

In the event of a network attack or intrusion,a _____ lists the tasks that must be performed by the organization to restore damaged data and equipment.

Which statement is true of symmetric encryption?

_____ is an example of antispyware software.

_____ is a commonly used encryption protocol that manages transmission security on the Internet.

In data encryption,the https in a browser address bar indicates a safe HTTP connection over _____.

Which form of text needs to be unscrambled using a decryption key?

_____ outlines procedures for keeping an organization operational in the event of a natural disaster or a network attack or intrusion.

_____ is a form of spyware that collects information about a user (without the user's consent) to determine which commercials to display in the user's Web browser.

When planning a comprehensive security system,the first step is designing _____,which use a combination of hardware and software for improving reliability,a way of ensuring availability in case of a system failure.

_____ is an attempt to gain access to a network by posing as an authorized user in order to find sensitive information,such as passwords and credit card information.

_____,a recent cryptographic protocol,ensures data security and integrity over public networks,such as the Internet.

_____ uses a public key known to everyone and a private key known only to the recipient.

Data sent through a virtual private network (VPN) can be encrypted using the _____.

In the context of e-commerce transaction security measures,authentication is a critical factor because it ensures that:

_____ is the unauthorized use of system data for personal gain,such as transferring money from another's account or charging purchases to someone else's account.

The main function of Cyber Incident Response Capability (CIRC) is to _____.

_____ is also known as secret key encryption.

_____ monitor and record the keys pressed on a keyboard and can be software or hardware devices.

Which statement is true of asymmetric encryption?