Question 1

When someone external to your organization blocks access to your network and/or its resources, this is known as a denial-of-service attack.

Accepted Answer

A denial-of-service attack typically involves an external entity overwhelming a network or server with a flood of traffic or requests, effectively denying legitimate users access to its resources.

Question 2

An uninterruptible power supply utilizes a second redundant disk for every disk on the server.

Accepted Answer

An uninterruptible power supply (UPS) is a device that provides emergency power to a load when the input power source, typically the utility mains, fails. It does not utilize a second redundant disk for every disk on the server. However, some servers may have a RAID configuration that utilizes multiple disks for redundancy and data protection.

Question 3

The CERT was established at Carnegie Mellon University.

Accepted Answer

The CERT (Computer Emergency Response Team) was established at Carnegie Mellon University in 1988.

Question 4

Macro viruses can spread when an infected file is opened.

Accepted Answer

Macro viruses are designed to infect and spread through documents that contain macros, such as Microsoft Word or Excel files. When an infected document is opened, the virus can activate and spread to other documents on the system or to other users who open the infected file.

Question 5

Preventive controls mitigate or stop a person from acting or an event from occurring.

Accepted Answer

Preventive controls are put in place to prevent or stop an incident from occurring or a person from acting. These controls are designed to stop a threat before it can exploit a vulnerability. Examples of preventive controls include access control lists, firewalls, and security awareness training.

Question 6

The ideal solution for planning for disaster recovery is to have a fully redundant backup network placed in a different location that would not be threatened by the same natural or man-made disaster that would destroy the original network.

Accepted Answer

A fully redundant backup network placed in a different location is the most ideal solution for disaster recovery as it ensures business continuity and minimizes the impact of any potential disruptions on the original network. It also provides a failover option in case the primary network fails or is destroyed due to any natural or man-made disasters.

Question 7

Maintaining data integrity is not a primary goal of security.

Accepted Answer

Maintaining data integrity is a primary goal of security, along with other goals like confidentiality and availability. Data integrity ensures that data is accurate, complete, and unaltered. Security measures like access controls, encryption, and backups are implemented to maintain data integrity.

Question 8

DoS attackers generally use fake source IP addresses, making it harder to identify the DoS messages.

Accepted Answer

DoS attackers often use spoofed or fake source IP addresses to hide their identity and location, making it difficult to trace the origin of the attack.

Question 9

Business continuity planning refers primarily to ensuring availability, with some aspects of data integrity.

Accepted Answer

Business continuity planning is primarily concerned with ensuring the availability of critical business processes and systems during disruptions, but it also involves aspects of data integrity, such as maintaining backups and ensuring appropriate security measures are in place.

Question 10

Security on a network not only means being able to prevent a hacker from breaking into your computer but also includes being able to recover from temporary service problems or from natural disasters.

Accepted Answer

Security on a network goes beyond just preventing hacking attempts. It also involves ensuring resilience in the face of temporary service interruptions or natural disasters. This allows for quick recovery, minimal damage, and overall protection of network operations.

Question 11

Disk mirroring writes duplicate copies of all data on at least two different disks.

Accepted Answer

Disk mirroring, also known as RAID 1, writes duplicate copies of all data on at least two different disks. This is done for redundancy and to provide a backup in case one disk fails.

Question 12

The denial-of-service attack disrupts the network by flooding the network with messages so that regular messages cannot be processed.

Accepted Answer

A denial-of-service attack overwhelms the network with traffic, making it difficult or impossible for legitimate messages to get through.

Question 13

Corrective controls reveal or discover unwanted events.

Accepted Answer

Corrective controls are designed to fix or correct issues after they have been identified, not to reveal or discover them.

Question 14

Companies have learned that threats from hacking from its own employees occur about as often as by outsiders.

Accepted Answer

According to various studies and reports, insider threats (hacking from employees or contractors) are responsible for almost half or more of all cyber incidents in companies, making it as common as external threats. Therefore, the statement is true.

Question 15

Confidentiality refers to the protection of the organizational data from unauthorized disclosure of customer and proprietary data.

Accepted Answer

Confidentiality is the protection of sensitive information from unauthorized access or disclosure, including customer and proprietary data.

Question 16

Intrusion primarily refers to the loss of confidentiality of organizational data.

Accepted Answer

The answer of Intrusion primarily refers to the loss of...

Question 17

Controls are mechanisms that reduce or eliminate threats to network security.

Accepted Answer

Controls such as firewalls, access controls, and encryption are designed to prevent or mitigate threats to network security.

Question 18

A threat to the data communications network is any potential adverse occurrence that can do harm, interrupt the systems using the network, or cause a monetary loss to the organization.

Accepted Answer

A threat to the data communications network can take many forms, including cyber attacks, natural disasters, equipment failure, human error, and more. These threats can cause disruptions to network availability, compromise the confidentiality or integrity of data, or result in financial losses for the organization. It is important for organizations to assess potential threats and implement appropriate safeguards to protect their network and data.

Question 19

The rise of the Internet has increased significantly the potential vulnerability of an organization's assets.

Accepted Answer

The Internet has connected organizations to a larger network, providing more access points for potential threats and vulnerabilities. This makes it easier for attackers to access an organization's assets, such as data and systems. Therefore, the Internet has increased the potential vulnerability of an organization's assets.

Question 20

Researchers estimate that only one or two new viruses are developed every week.

Accepted Answer

This statement is false. According to the World Health Organization, there are an estimated 1,000 illnesses caused by viruses that currently affect humans, and new viruses have emerged in the past, such as HIV/AIDS, SARS, and COVID-19. Additionally, there is ongoing research and monitoring of viruses in order to identify and respond to any potential new threats.

Quiz 11: Network Security