Question 1

____________________ security is the physical security that specifically involves protecting the hardware of the host system, particularly portable laptops, netbooks, and tablet computers that can easily be stolen.

Accepted Answer

The answer of ____________________ security is the physical security that...

Question 2

Match the following terms to the appropriate definitions.
-​An attack that uses the user's web browser settings to impersonate the user
A)Access list
B)Activity phase controls
C)Android
D)Barricade
E)Bayesian filtering
F)Cross-site request forgery (XSRF)
G)Fuzz testing
H)iOS
I)NoSQL
J)Supervisory control and data acquisition (SCADA)

Accepted Answer

Cross-site request forgery (XSRF) attack uses the user's web browser settings to impersonate the user.

Answer: A 
 Access list is a list of permissions granted to users or applications on a system.

Answer: H 
 iOS is a mobile operating system developed by Apple Inc.

Answer: D 
 A barricade is a security measure used to prevent unauthorized access.

Answer: E 
 Bayesian filtering is a statistical method used to filter out unwanted messages or emails.

Answer: G 
 Fuzz testing is a software testing technique that feeds random input to an application to identify vulnerabilities.

Answer: I 
 NoSQL is a type of database that stores data in a non-tabular form.

Answer: J 
 Supervisory control and data acquisition (SCADA) is a system used to monitor and control industrial processes.

Question 3

Match the following terms to the appropriate definitions.
-​A paper or electronic record of individuals who have permission to enter a secure area, the time that they entered, and the time they left the area
A)Access list
B)Activity phase controls
C)Android
D)Barricade
E)Bayesian filtering
F)Cross-site request forgery (XSRF)
G)Fuzz testing
H)iOS
I)NoSQL
J)Supervisory control and data acquisition (SCADA)

Accepted Answer

An access list is a paper or electronic record of individuals who have permission to enter a secure area, the time that they entered, and the time they left the area.

Answer: D
 A barricade is a physical barrier used to prevent unauthorized access to a location or area.

Answer: J
 Supervisory control and data acquisition (SCADA) is a system used to monitor and control industrial processes and infrastructure, such as electrical power grids and water treatment facilities.

Answer: C and H
 Android and iOS are mobile operating systems used on smartphones and tablets.

Answer: I
 NoSQL is a type of database that is not based on traditional relational database management systems (RDBMS).

Answer: B
 Activity phase controls are security measures used to control access to a specific area or system based on the current activity or phase of the activity.

Answer: E
 Bayesian filtering is a spam-filtering technique that involves using statistical algorithms to identify and flag potentially unwanted messages.

Answer: F
 Cross-site request forgery (XSRF) is a type of web-based attack that involves injecting malicious code into a user's browser to gain unauthorized access to their accounts or data.

Answer: G
 Fuzz testing is a type of software testing that involves sending random or unexpected inputs to a program or system to see how it responds.

Question 4

Match the following terms to the appropriate definitions.
-Spam filtering software that analyzes every word in an email and determines how frequently a word occurs in order to determine if it is spam.​
A)Access list
B)Activity phase controls
C)Android
D)Barricade
E)Bayesian filtering
F)Cross-site request forgery (XSRF)
G)Fuzz testing
H)iOS
I)NoSQL
J)Supervisory control and data acquisition (SCADA)

Accepted Answer

Bayesian filtering is the spam filtering software that analyzes every word in an email and determines how frequently a word occurs in order to determine if it is spam.

Answer: D
 Barricade is a security measure that prevents unauthorized access to a system or network.

Answer: J
 Supervisory control and data acquisition (SCADA) is a system that monitors and controls industrial processes.

Answer: H
 iOS is a mobile operating system developed by Apple Inc.

Answer: I
 NoSQL is a database that uses a non-relational data model.

Note: The remaining terms do not have appropriate definitions provided to make a matching exercise possible.

Question 5

A(n) ____________________ is a record or list of individuals who have permission to enter a secure area, the time that they entered, and the time they left the area.

Accepted Answer

The answer of A(n) ____________________ is a record or list...

Question 6

How can an area be made secure from a non-secured area via two interlocking doors to a small room?
A)Using a lockout
B)Using a mantrap
C)Using a closet
D)Using a pit

Accepted Answer

A mantrap is a security mechanism designed to control access to a secure area. It is typically composed of two interlocking doors that are used to secure a small room or vestibule. The first door must be closed before the second one can be opened, ensuring that only one person is allowed into the secure area at a time. This prevents unauthorized individuals from tailgating or piggybacking their way into the secure area.

Question 7

Match the following terms to the appropriate definitions.
-​An operating system for Google Android smartphones and other devices.
A)Access list
B)Activity phase controls
C)Android
D)Barricade
E)Bayesian filtering
F)Cross-site request forgery (XSRF)
G)Fuzz testing
H)iOS
I)NoSQL
J)Supervisory control and data acquisition (SCADA)

Accepted Answer

Android is an operating system developed by Google for smartphones and other devices.

Question 8

Instead of using a key or entering a code to open a door, a user can use an object, such as an ID badge, to identify themselves in order to gain access to a secure area. What term describes this type of object?
A)logical token
B)physical sensor
C)physical token
D)hybrid sensor

Accepted Answer

Physical tokens are objects used for authentication purposes. They can include items such as ID badges, smart cards, or key fobs.

Question 9

What is the name for a cumulative package of all patches and hotfixes as well as additional features up to a given point?
A)feature pack
B)roll-up
C)service pack
D)patch

Accepted Answer

A service pack is a cumulative package of all patches and hotfixes as well as additional features up to a given point. Feature pack refers to a collection of new features that are not necessarily patches or hotfixes. A roll-up is similar to a service pack, but typically includes only previously released patches and hotfixes. A patch is a small piece of code that is used to fix a specific problem with a software application.

Question 10

____________________ locks keep a record of when the door was opened and by which code.

Accepted Answer

The answer of ____________________ locks keep a record of when...

Question 11

Match the following terms to the appropriate definitions.
-​A software testing technique that deliberately provides invalid, unexpected, or random data as inputs to a computer program.
A)Access list
B)Activity phase controls
C)Android
D)Barricade
E)Bayesian filtering
F)Cross-site request forgery (XSRF)
G)Fuzz testing
H)iOS
I)NoSQL
J)Supervisory control and data acquisition (SCADA)

Accepted Answer

Fuzz testing is a software testing technique that deliberately provides invalid, unexpected, or random data as inputs to a computer program.

Answer: A 
 Access list is a list of permissions attached to an object.

Answer: C 
 Android is an operating system used in mobile devices, particularly smartphones.

Answer: D 
 Barricade is a physical obstruction to prevent access to a certain location.

Answer: E 
 Bayesian filtering is a statistical technique used to filter out unwanted or irrelevant data from a set of data.

Answer: F 
 Cross-site request forgery (XSRF) is an attack in which an attacker tricks a victim into performing unwanted actions on a web application.

Answer: H 
 iOS is an operating system used in mobile devices, particularly iPhones and iPads.

Answer: I 
 NoSQL is a type of database management system that does not use a relational model for data storage.

Answer: J 
 Supervisory control and data acquisition (SCADA) is a control system used to monitor and control industrial processes.

Question 12

____________________ paint is a nontoxic petroleum gel-based paint that is thickly applied and does not harden, making any coated surface very difficult to climb.
​Match the following terms to the appropriate definitions.​

Accepted Answer

The answer of ____________________ paint is a nontoxic petroleum gel-based...

Question 13

A _____________ is a document or series of documents that clearly defines the defense mechanisms an organization will employ in order to keep information secure.​

Accepted Answer

The answer of A _____________ is a document or series...

Question 14

Anti-virus products typically utilize what type of virus scanning analysis?​
A)​Static analysis
B)​Wildcard scanning analysis
C)​Heuristic detection analysis
D)​String scanning​ analysis

Accepted Answer

The answer of Anti-virus products typically utilize what type of...

Question 15

Match the following terms to the appropriate definitions.
-​Large-scale, industrial control systems.
A)Access list
B)Activity phase controls
C)Android
D)Barricade
E)Bayesian filtering
F)Cross-site request forgery (XSRF)
G)Fuzz testing
H)iOS
I)NoSQL
J)Supervisory control and data acquisition (SCADA)

Accepted Answer

SCADA is a type of large-scale, industrial control system used in industries such as manufacturing, energy, and transportation.

Answer: I 
 NoSQL is a type of database management system that is commonly used in industrial control systems due to its ability to handle large amounts of data.

Answer: F 
 XSRF is a type of attack that can target industrial control systems and is used to gain unauthorized access by tricking a user into providing sensitive information.

Answer: G 
 Fuzz testing is a technique used to identify vulnerabilities in industrial control systems by sending random data inputs to applications and monitoring for unexpected behavior.

Answer: D 
 Barricades are physical barriers that are often used to prevent unauthorized access to areas where industrial control systems are located.

Answer: C and H 
 Android and iOS are mobile operating systems that can be used to access industrial control systems remotely.

Answer: A 
 Access lists are used to control who has permission to access industrial control systems and what actions they are authorized to perform.

Answer: B 
 Activity phase controls are used in industrial control systems to manage and monitor different stages of a process, such as production, assembly, or packaging.

Question 16

Match the following terms to the appropriate definitions.
-Subtypes of security controls, classified as deterrent, preventive, detective, compensation, or corrective.​
A)Access list
B)Activity phase controls
C)Android
D)Barricade
E)Bayesian filtering
F)Cross-site request forgery (XSRF)
G)Fuzz testing
H)iOS
I)NoSQL
J)Supervisory control and data acquisition (SCADA)

Accepted Answer

The answer of Match the following terms to the appropriate...

Question 17

Match the following terms to the appropriate definitions.
-A structure designed to block the passage of traffic​
A)Access list
B)Activity phase controls
C)Android
D)Barricade
E)Bayesian filtering
F)Cross-site request forgery (XSRF)
G)Fuzz testing
H)iOS
I)NoSQL
J)Supervisory control and data acquisition (SCADA)

Accepted Answer

A barricade is a structure designed to block the passage of traffic.

Answer: J
 SCADA stands for Supervisory Control and Data Acquisition, which refers to a system for remotely monitoring and controlling industrial processes.

Answer: A
 An access list is a set of rules that define who is allowed to access a system or network.

Answer: E
 Bayesian filtering is a statistical method used for filtering unwanted messages, such as spam emails.

Answer: F
 Cross-site request forgery (XSRF) is a type of security exploit where an attacker tricks a user into performing an action on a website without their knowledge or consent.

Answer: G
 Fuzz testing is a software testing technique where random data is inputted into a program to discover unexpected behaviors or vulnerabilities.

Answer: H
 iOS is a mobile operating system developed by Apple.

Answer: C
 Android is a mobile operating system developed by Google.

Answer: I
 NoSQL refers to a type of database management system that does not use a structured query language like SQL.

Question 18

Match the following terms to the appropriate definitions.
-A mobile operating system for Apple iPhones​
A)Access list
B)Activity phase controls
C)Android
D)Barricade
E)Bayesian filtering
F)Cross-site request forgery (XSRF)
G)Fuzz testing
H)iOS
I)NoSQL
J)Supervisory control and data acquisition (SCADA)

Accepted Answer

iOS is the mobile operating system developed by Apple for its iPhone devices.

Question 19

What is the name for a standard or checklist against which systems can be evaluated and audited for their level of security (security posture)?
A)reference
B)baseline
C)profile
D)minimum

Accepted Answer

A baseline is a standard or checklist that serves as a benchmark for evaluating and auditing the security posture of systems. It outlines the minimum security requirements and configurations necessary for the system to be considered secure. A reference is a source of information, a profile is a set of characteristics, and a minimum is the lowest amount or level.

Question 20

Match the following terms to the appropriate definitions.
-​A nonrelational database that is better tuned for accessing large data sets.
A)Access list
B)Activity phase controls
C)Android
D)Barricade
E)Bayesian filtering
F)Cross-site request forgery (XSRF)
G)Fuzz testing
H)iOS
I)NoSQL
J)Supervisory control and data acquisition (SCADA)

Accepted Answer

NoSQL databases are nonrelational and are designed to handle large amounts of data more efficiently than traditional relational databases.

Answer: J 
 SCADA systems are used for monitoring and controlling large-scale industrial processes, such as those used in manufacturing or power generation.

Answer: E 
 Bayesian filtering is a statistical algorithm used for identifying and categorizing incoming messages or data based on their probability of being spam or relevant to the user.

Answer: F 
 XSRF is a form of cyber attack where a hacker tricks a user into unknowingly sending unauthorized commands to a website or application.

Answer: G 
 Fuzz testing is a software testing technique where invalid, unexpected, or random data is input into a program to detect unknown vulnerabilities or errors.

Answer: C and H 
 Android and iOS are both mobile operating systems used on smartphones and other mobile devices.

Quiz 4: Host, Application, and Data Security

____________________ security is the physical security that specifically involves protecting the hardware of the host system, particularly portable laptops, netbooks, and tablet computers that can easily be stolen.

Match the following terms to the appropriate definitions. -An attack that uses the user's web browser settings to impersonate the user

Match the following terms to the appropriate definitions. -A paper or electronic record of individuals who have permission to enter a secure area, the time that they entered, and the time they left the area

Match the following terms to the appropriate definitions. -Spam filtering software that analyzes every word in an email and determines how frequently a word occurs in order to determine if it is spam.

A(n) ____________________ is a record or list of individuals who have permission to enter a secure area, the time that they entered, and the time they left the area.

How can an area be made secure from a non-secured area via two interlocking doors to a small room?

Match the following terms to the appropriate definitions. -An operating system for Google Android smartphones and other devices.

Instead of using a key or entering a code to open a door, a user can use an object, such as an ID badge, to identify themselves in order to gain access to a secure area. What term describes this type of object?

What is the name for a cumulative package of all patches and hotfixes as well as additional features up to a given point?

____________________ locks keep a record of when the door was opened and by which code.

Match the following terms to the appropriate definitions. -A software testing technique that deliberately provides invalid, unexpected, or random data as inputs to a computer program.

____________________ paint is a nontoxic petroleum gel-based paint that is thickly applied and does not harden, making any coated surface very difficult to climb. Match the following terms to the appropriate definitions.

A _____________ is a document or series of documents that clearly defines the defense mechanisms an organization will employ in order to keep information secure.

Anti-virus products typically utilize what type of virus scanning analysis?

Match the following terms to the appropriate definitions. -Large-scale, industrial control systems.

Match the following terms to the appropriate definitions. -Subtypes of security controls, classified as deterrent, preventive, detective, compensation, or corrective.

Match the following terms to the appropriate definitions. -A structure designed to block the passage of traffic

Match the following terms to the appropriate definitions. -A mobile operating system for Apple iPhones

What is the name for a standard or checklist against which systems can be evaluated and audited for their level of security (security posture) ?

Match the following terms to the appropriate definitions. -A nonrelational database that is better tuned for accessing large data sets.

Quiz 4: Host, Application, and Data Security

____________________ security is the physical security that specifically involves protecting the hardware of the host system, particularly portable laptops, netbooks, and tablet computers that can easily be stolen.

Match the following terms to the appropriate definitions. -​An attack that uses the user's web browser settings to impersonate the user

Match the following terms to the appropriate definitions. -​A paper or electronic record of individuals who have permission to enter a secure area, the time that they entered, and the time they left the area

Match the following terms to the appropriate definitions. -Spam filtering software that analyzes every word in an email and determines how frequently a word occurs in order to determine if it is spam.​

A(n) ____________________ is a record or list of individuals who have permission to enter a secure area, the time that they entered, and the time they left the area.

How can an area be made secure from a non-secured area via two interlocking doors to a small room?

Match the following terms to the appropriate definitions. -​An operating system for Google Android smartphones and other devices.

Instead of using a key or entering a code to open a door, a user can use an object, such as an ID badge, to identify themselves in order to gain access to a secure area. What term describes this type of object?

What is the name for a cumulative package of all patches and hotfixes as well as additional features up to a given point?

____________________ locks keep a record of when the door was opened and by which code.

Match the following terms to the appropriate definitions. -​A software testing technique that deliberately provides invalid, unexpected, or random data as inputs to a computer program.

____________________ paint is a nontoxic petroleum gel-based paint that is thickly applied and does not harden, making any coated surface very difficult to climb. ​Match the following terms to the appropriate definitions.​

A _____________ is a document or series of documents that clearly defines the defense mechanisms an organization will employ in order to keep information secure.​

Anti-virus products typically utilize what type of virus scanning analysis?​

Match the following terms to the appropriate definitions. -​Large-scale, industrial control systems.

Match the following terms to the appropriate definitions. -Subtypes of security controls, classified as deterrent, preventive, detective, compensation, or corrective.​

Match the following terms to the appropriate definitions. -A structure designed to block the passage of traffic​

Match the following terms to the appropriate definitions. -A mobile operating system for Apple iPhones​

What is the name for a standard or checklist against which systems can be evaluated and audited for their level of security (security posture) ?

Match the following terms to the appropriate definitions. -​A nonrelational database that is better tuned for accessing large data sets.

Match the following terms to the appropriate definitions. -An attack that uses the user's web browser settings to impersonate the user

Match the following terms to the appropriate definitions. -A paper or electronic record of individuals who have permission to enter a secure area, the time that they entered, and the time they left the area

Match the following terms to the appropriate definitions. -Spam filtering software that analyzes every word in an email and determines how frequently a word occurs in order to determine if it is spam.

Match the following terms to the appropriate definitions. -An operating system for Google Android smartphones and other devices.

Match the following terms to the appropriate definitions. -A software testing technique that deliberately provides invalid, unexpected, or random data as inputs to a computer program.

____________________ paint is a nontoxic petroleum gel-based paint that is thickly applied and does not harden, making any coated surface very difficult to climb. Match the following terms to the appropriate definitions.

A _____________ is a document or series of documents that clearly defines the defense mechanisms an organization will employ in order to keep information secure.

Anti-virus products typically utilize what type of virus scanning analysis?

Match the following terms to the appropriate definitions. -Large-scale, industrial control systems.

Match the following terms to the appropriate definitions. -Subtypes of security controls, classified as deterrent, preventive, detective, compensation, or corrective.

Match the following terms to the appropriate definitions. -A structure designed to block the passage of traffic

Match the following terms to the appropriate definitions. -A mobile operating system for Apple iPhones

Match the following terms to the appropriate definitions. -A nonrelational database that is better tuned for accessing large data sets.