Question 1

A firewall allows the organization to:

Accepted Answer

A)   enforce a security policy on data exchanged between its network and the Internet.
B)   check the accuracy of all transactions between its network and the Internet.
C)   create an enterprise system on the Internet.
D)   check the content of all incoming and outgoing email messages.
E)   authenticate users.F) All of the above
G) C) and E)

Question 2

Which of the following specifications replaced WEP with a stronger security standard that features changing encryption keys?

Accepted Answer

A)   TLS
B)   AUP
C)   VPN
D)   WPA2
E)   S-HTTPF) None of the above
G) D) and E)

Question 3

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

Accepted Answer

A)   SSL
B)   Symmetric key encryption
C)   Public key encryption
D)   Private key encryption
E)   TLSF) A) and D)
G) A) and E)

Question 4

Which of the following focuses primarily on the technical issues of keeping systems up and running?

Accepted Answer

A)   Business continuity planning
B)   Security policies
C)   Disaster recovery planning
D)   An AUP
E)   An information systems auditF) All of the above
G) A) and E)

Question 5

All of the following countries are popular sources of malware attacks except:

Accepted Answer

A)   the Netherlands.
B)   the United Kingdom.
C)   the United States.
D)   Germany.
E)   Mexico.F) C) and E)
G) A) and C)

Question 6

Packet filtering catches most types of network attacks.

Accepted Answer

A) True 
 B)False

Question 7

Pharming involves:

Accepted Answer

A)   redirecting users to a fraudulent website even when the user has typed in the correct address in the web browser.
B)   pretending to be a legitimate business's representative in order to garner information about a security system.
C)   setting up fake websites to ask users for confidential information.
D)   using emails for threats or harassment.
E)   malware that displays annoying pop-up messages.F) A) and E)
G) B) and D)

Question 8

A digital certificate system:

Accepted Answer

A)   uses third-party CAs to validate a user's identity.
B)   uses digital signatures to validate a user's identity.
C)   uses tokens to validate a user's identity.
D)   is used primarily by individuals for personal correspondence.
E)   uses deep packet inspection to validate a user's identity.F) A) and D)
G) A) and C)

Question 9

Computer forensics tasks include all of the following except:

Accepted Answer

A)   presenting collected evidence in a court of law.
B)   securely storing recovered electronic data.
C)   collecting physical evidence on the computer.
D)   finding significant information in a large volume of electronic data.
E)   recovering data from computers while preserving evidential integrity.F) C) and D)
G) A) and E)

Question 10

________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

Accepted Answer

A)   Identity theft
B)   Spoofing
C)   Social engineering
D)   Evil twins
E)   CybervandalismF) C) and D)
G) A) and E)

Question 11

CryptoLocker is an example of which of the following?

Accepted Answer

A)   Trojan Horse
B)   SQL injection attack
C)   Sniffer
D)   Evil twin
E)   RansomwareF) All of the above
G) C) and D)

Question 12

For 100 percent availability, online transaction processing requires:

Accepted Answer

A)   high-capacity storage.
B)   a multi-tier server network.
C)   fault-tolerant computer systems.
D)   dedicated phone lines.
E)   deep packet inspection.F) A) and B)
G) C) and D)

Question 13

An authentication token:

Accepted Answer

A)   is a device the size of a credit card that contains access permission data.
B)   is a type of smart card.
C)   is a device that displays passcodes.
D)   is an electronic marker attached to a digital authorization file.
E)   compares a person's unique characteristics against a stored profile of these characteristics to determine any differences between these characteristics and the stored profile.F) B) and D)
G) A) and D)

Question 14

Using numerous computers to inundate and overwhelm the network from numerous launch points is called a(n)  ________ attack.

Accepted Answer

A)   DDoS
B)   DoS
C)   SQL injection
D)   phishing
E)   ransomwareF) None of the above
G) A) and D)

Question 15

Viruses cannot be spread through email.

Accepted Answer

A) True 
 B)False

Question 16

Three major concerns of system builders and users are disaster, security, and human error. Of the three, which do you think is most difficult to deal with? Why?

Accepted Answer

Student answers will vary. Example answe...

Question 17

SSL is a protocol used to establish a secure connection between two computers.

Accepted Answer

A) True 
 B)False

Question 18

When errors are discovered in software programs, the sources of the errors are found and eliminated through a process called debugging.

Accepted Answer

A) True 
 B)False

Question 19

DoS attacks are used to destroy information and access restricted areas of a company's information system.

Accepted Answer

A) True 
 B)False

Question 20

Analysis of an information system that rates the likelihood of a security incident occurring and its cost is included in a(n) :

Accepted Answer

A)   security policy.
B)   AUP.
C)   risk assessment.
D)   business impact analysis.
E)   What-if analysis.F) C) and D)
G) B) and E)

Exam 8: Securing Information Systems

An authentication token:

Correct AnswerverifiedShow Answer

Viruses cannot be spread through email.

Correct AnswerverifiedShow Answer

Packet filtering catches most types of network attacks.

Correct AnswerverifiedShow Answer

For 100 percent availability, online transaction processing requires:

Correct AnswerverifiedShow Answer

All of the following countries are popular sources of malware attacks except:

Correct AnswerverifiedShow Answer

A digital certificate system:

Correct AnswerverifiedShow Answer

Three major concerns of system builders and users are disaster, security, and human error. Of the three, which do you think is most difficult to deal with? Why?

Correct AnswerverifiedStudent answers will vary. Example answe...View AnswerShow Answer

Analysis of an information system that rates the likelihood of a security incident occurring and its cost is included in a(n) :

Correct AnswerverifiedShow Answer

Which of the following focuses primarily on the technical issues of keeping systems up and running?

Correct AnswerverifiedShow Answer

________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

Correct AnswerverifiedShow Answer

SSL is a protocol used to establish a secure connection between two computers.

Correct AnswerverifiedShow Answer

Using numerous computers to inundate and overwhelm the network from numerous launch points is called a(n) ________ attack.

Correct AnswerverifiedShow Answer

Which of the following specifications replaced WEP with a stronger security standard that features changing encryption keys?

Correct AnswerverifiedShow Answer

CryptoLocker is an example of which of the following?

Correct AnswerverifiedShow Answer

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

Correct AnswerverifiedShow Answer

Computer forensics tasks include all of the following except:

Correct AnswerverifiedShow Answer

Pharming involves:

Correct AnswerverifiedShow Answer

A firewall allows the organization to:

Correct AnswerverifiedShow Answer

When errors are discovered in software programs, the sources of the errors are found and eliminated through a process called debugging.

Correct AnswerverifiedShow Answer

DoS attacks are used to destroy information and access restricted areas of a company's information system.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Student answers will vary. Example answe...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified