Question 1

In the context of computer crimes and attacks, the difference between phishing and spear phishing is that:

Accepted Answer

A)   in spear phishing, the attack is targeted toward a specific person or a group.
B)   spear phishing involves monitoring and recording keystrokes.
C)   in spear phishing, hackers capture and record network traffic.
D)   spear phishing involves collecting sensitive information via phone calls.E) A) and C)
F) None of the above

Question 2

In the context of intentional computer and network threats, social engineers protects the integrity of information resources.

Accepted Answer

A) True 
 B)False

Question 3

_____ uses a public key known to everyone and a private key known only to the recipient.

Accepted Answer

A)   Symmetric encryption
B)   Asymmetric encryption
C)   Remote key encryption
D)   Secret key encryptionE) C) and D)
F) A) and B)

Question 4

_____ can interfere with users' control of their computers, through such methods as installing additional software and redirecting Web browsers.

Accepted Answer

A)   Keystroke loggers
B)   Spyware
C)   Firmware
D)   Script loggersE) B) and C)
F) A) and B)

Question 5

When an organization develops a comprehensive security plan, it should set up a security committee with representatives from all departments as well as upper management.

Accepted Answer

A) True 
 B)False

Question 6

A level 3 security system focuses on protecting the _____ against intrusion, denial-of-service attacks, and unauthorized access.

Accepted Answer

A)   back-end server
B)   corporate network
C)   user's work station
D)   front-end serverE) B) and C)
F) A) and B)

Question 7

_____ is a commonly used encryption protocol that manages transmission security on the Internet.

Accepted Answer

A)   Application Layer
B)   Secure Sockets Layer
C)   Transmission Control Protocol
D)   User Datagram ProtocolE) B) and C)
F) A) and D)

Question 8

In the context of the CIA triangle, confidentiality means that computers and networks are operating and authorized users can access the information they need.

Accepted Answer

A) True 
 B)False

Question 9

Which of the following statements is true of application-filtering firewalls?

Accepted Answer

A)   They are less secure than packet-filtering firewalls.
B)   They filter viruses less effectively than packet-filtering firewalls.
C)   They filter faster than packet-filtering firewalls.
D)   They are more expensive than packet-filtering firewalls.E) None of the above
F) C) and D)

Question 10

In the context of security, _____ is an attack that takes advantage of the human element of security systems.

Accepted Answer

A)   disk mirroring
B)   weblogging
C)   voice recognition
D)   social engineeringE) A) and B)
F) A) and C)

Question 11

Which of the following biometric security measures compares the length of each finger, the translucence of fingertips, and the webbing between fingers against stored data to verify users' identities?

Accepted Answer

A)   Hand geometry
B)   Fingerprint recognition
C)   Vein analysis
D)   Palm printsE) A) and D)
F) All of the above

Question 12

When a computer is infected by a virus, _____.

Accepted Answer

A)   the system's disk access is fast
B)   system updates are recommended often
C)   some programs suddenly increase in size
D)   the available memory space remains constantE) C) and D)
F) A) and B)

Question 13

In the context of fault-tolerant systems, describe uninterruptible power supply (UPS).

Accepted Answer

Answers will vary.UPS is a backup power ...

Question 14

In the context of intentional computer and network threats, describe how blended threats work.

Accepted Answer

Answers will vary.A blended threat is a ...

Question 15

Briefly explain the McCumber cube.

Accepted Answer

Answers will vary.The Committee on Natio...

Question 16

Describe how a virtual private network (VPN) works.

Accepted Answer

Answers will vary.A VPN provides a secur...

Question 17

List the actions that a firewall can take after examining a packet.

Accepted Answer

Answers will vary.A firewall can examine...

Question 18

In the context of firewall as a nonbiometric security measure, a _____ is software that acts as an intermediary between two systems.

Accepted Answer

A)   logic bomb
B)   callback modem
C)   proxy server
D)   block multiplexerE) B) and D)
F) All of the above

Question 19

Discuss the guidelines for improving a firewall's capabilities.

Accepted Answer

Answers will vary.Guidelines for improvi...

Question 20

When planning a comprehensive security system, the first step is designing _____, which use a combination of hardware and software for improving reliability-a way of ensuring availability in case of a system failure. ​

Accepted Answer

A)   fault-tolerant systems
B)   vulnerability-evade systems
C)   primary-defense systems
D)   database-resilient systemsE) All of the above
F) A) and C)

Exam 5: Protecting Information Resources

When planning a comprehensive security system, the first step is designing _____, which use a combination of hardware and software for improving reliability-a way of ensuring availability in case of a system failure. ​

Correct AnswerverifiedShow Answer

Which of the following biometric security measures compares the length of each finger, the translucence of fingertips, and the webbing between fingers against stored data to verify users' identities?

Correct AnswerverifiedShow Answer

When an organization develops a comprehensive security plan, it should set up a security committee with representatives from all departments as well as upper management.

Correct AnswerverifiedShow Answer

In the context of security, _____ is an attack that takes advantage of the human element of security systems.

Correct AnswerverifiedShow Answer

Briefly explain the McCumber cube.

Correct AnswerverifiedAnswers will vary.The Committee on Natio...View AnswerShow Answer

_____ is a commonly used encryption protocol that manages transmission security on the Internet.

Correct AnswerverifiedShow Answer

When a computer is infected by a virus, _____.

Correct AnswerverifiedShow Answer

_____ uses a public key known to everyone and a private key known only to the recipient.

Correct AnswerverifiedShow Answer

Describe how a virtual private network (VPN) works.

Correct AnswerverifiedAnswers will vary.A VPN provides a secur...View AnswerShow Answer

In the context of intentional computer and network threats, describe how blended threats work.

Correct AnswerverifiedAnswers will vary.A blended threat is a ...View AnswerShow Answer

In the context of intentional computer and network threats, social engineers protects the integrity of information resources.

Correct AnswerverifiedShow Answer

_____ can interfere with users' control of their computers, through such methods as installing additional software and redirecting Web browsers.

Correct AnswerverifiedShow Answer

Which of the following statements is true of application-filtering firewalls?

Correct AnswerverifiedShow Answer

Discuss the guidelines for improving a firewall's capabilities.

Correct AnswerverifiedAnswers will vary.Guidelines for improvi...View AnswerShow Answer

In the context of fault-tolerant systems, describe uninterruptible power supply (UPS).

Correct AnswerverifiedAnswers will vary.UPS is a backup power ...View AnswerShow Answer

A level 3 security system focuses on protecting the _____ against intrusion, denial-of-service attacks, and unauthorized access.

Correct AnswerverifiedShow Answer

In the context of firewall as a nonbiometric security measure, a _____ is software that acts as an intermediary between two systems.

Correct AnswerverifiedShow Answer

In the context of the CIA triangle, confidentiality means that computers and networks are operating and authorized users can access the information they need.

Correct AnswerverifiedShow Answer

List the actions that a firewall can take after examining a packet.

Correct AnswerverifiedAnswers will vary.A firewall can examine...View AnswerShow Answer

In the context of computer crimes and attacks, the difference between phishing and spear phishing is that:

Correct AnswerverifiedShow Answer

When planning a comprehensive security system, the first step is designing _____, which use a combination of hardware and software for improving reliability-a way of ensuring availability in case of a system failure.

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Answers will vary.The Committee on Natio...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Answers will vary.A VPN provides a secur...
View Answer

Correct Answer
verified
Answers will vary.A blended threat is a ...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Answers will vary.Guidelines for improvi...
View Answer

Correct Answer
verified
Answers will vary.UPS is a backup power ...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Answers will vary.A firewall can examine...
View Answer

Correct Answer
verified