Question 1

The ____ are the foundation of a security framework.

Accepted Answer

A)  spheres of security 
B)  NIST documents 
C)  layered implementations of security 
D)  CIA triads 
A)  spheres of security 
B)  NIST documents 
C)  layered implementations of security 
D)  CIA triads

Question 2

The value of information comes from the characteristics it possesses.

Accepted Answer

A) True 
 B)False

Question 3

Which individual is considered to be a script kiddie who uses automated tools to inundate a Web site with a barrage of network traffic, usually resulting in a denial of service?

Accepted Answer

A)  Cyberterrorist 
B)  Packet monkey 
C)  Phreaker 
D)  Hacktivist 
A)  Cyberterrorist 
B)  Packet monkey 
C)  Phreaker 
D)  Hacktivist

Question 4

An indirect attack involves a hacker using a personal computer to break into a system.

Accepted Answer

A) True 
 B)False

Question 5

How does a man-in-the-middle attack work?

Accepted Answer

In the well-known man-in-the-middle atta

Question 6

Describe the chief information security officer (CISO) position.

Accepted Answer

The chief information security officer (

Question 7

Describe how benchmarking and best practices are used and where more information on best practices may be found.

Accepted Answer

Benchmarking and best practices are meth

Question 8

An unlocked door is an example of a(n) ____.

Accepted Answer

A)  vulnerability 
B)  threat 
C)  risk 
D)  exploit 
A)  vulnerability 
B)  threat 
C)  risk 
D)  exploit

Question 9

Which threat is the most common intellectual property (IP) breach?

Accepted Answer

A)  Software piracy 
B)  Spoofing 
C)  Shoulder surfing 
D)  Password cracking 
A)  Software piracy 
B)  Spoofing 
C)  Shoulder surfing 
D)  Password cracking

Question 10

Match each item with a statement below.
a.Accuracy
f.Data users
b.Authenticity
g.Integrity
c.Availability
h.Utility
d.Confidentiality
i.Data custodians
e.Data owners
-The quality or state of having value for some purpose or end.

Accepted Answer

The answer of Match each item with a statement below.
a.Accuracy
f.Data...

Question 11

The security blueprint is a detailed version of the security framework.

Accepted Answer

A) True 
 B)False

Question 12

In information security, ____ exists when a vulnerability known to an attacker is present.

Accepted Answer

A)  threat 
B)  loss 
C)  risk 
D)  exposure 
A)  threat 
B)  loss 
C)  risk 
D)  exposure

Question 13

Describe the issue-specific security policy (ISSP) and list three issues it may cover.

Accepted Answer

The issue-specific security policy (ISSP

Question 14

Which term identifies a single instance of an information asset suffering damage, unintended or unauthorized modification, or disclosure?

Accepted Answer

A)  Exploit 
B)  Exposure 
C)  Vulnerability 
D)  Loss 
A)  Exploit 
B)  Exposure 
C)  Vulnerability 
D)  Loss

Question 15

____________________ is the protection of information and its critical elements, including the systems and hardware that use, store, and transmit that information.

Accepted Answer

Information security

Question 16

Match each item with a statement below.
a.Accuracy
f.Data users
b.Authenticity
g.Integrity
c.Availability
h.Utility
d.Confidentiality
i.Data custodians
e.Data owners
-A term meaning information is free from mistakes or errors and has the value that the end user expects it to have.

Accepted Answer

The answer of Match each item with a statement below.
a.Accuracy
f.Data...

Question 17

Which resource is a physical asset?

Accepted Answer

A)  Web site 
B)  Computer system 
C)  Data 
D)  Information 
A)  Web site 
B)  Computer system 
C)  Data 
D)  Information

Question 18

Which attack is used when a copy of the hash of the user's password has been obtained?

Accepted Answer

A)  Rainbow attack 
B)  Brute force attack 
C)  Dictionary attack 
D)  Spoofing 
A)  Rainbow attack 
B)  Brute force attack 
C)  Dictionary attack 
D)  Spoofing

Question 19

Discuss the layered implementation of security.

Accepted Answer

One of the basic tenets of security arch

Question 20

The McCumber Cube provides a ____ description of the architectural approach widely used in computer and information security.

Accepted Answer

A)  linear 
B)  triangular 
C)  graphical 
D)  semantic 
A)  linear 
B)  triangular 
C)  graphical 
D)  semantic

The ____ are the foundation of a security framework.

The value of information comes from the characteristics it possesses.

Which individual is considered to be a script kiddie who uses automated tools to inundate a Web site with a barrage of network traffic, usually resulting in a denial of service?

An indirect attack involves a hacker using a personal computer to break into a system.

How does a man-in-the-middle attack work?

Describe the chief information security officer (CISO) position.

Describe how benchmarking and best practices are used and where more information on best practices may be found.

An unlocked door is an example of a(n) ____.

Which threat is the most common intellectual property (IP) breach?

Match each item with a statement below. a.Accuracy f.Data users b.Authenticity g.Integrity c.Availability h.Utility d.Confidentiality i.Data custodians e.Data owners -The quality or state of having value for some purpose or end.

The security blueprint is a detailed version of the security framework.

In information security, ____ exists when a vulnerability known to an attacker is present.

Describe the issue-specific security policy (ISSP) and list three issues it may cover.

Which term identifies a single instance of an information asset suffering damage, unintended or unauthorized modification, or disclosure?

____________________ is the protection of information and its critical elements, including the systems and hardware that use, store, and transmit that information.

Match each item with a statement below. a.Accuracy f.Data users b.Authenticity g.Integrity c.Availability h.Utility d.Confidentiality i.Data custodians e.Data owners -A term meaning information is free from mistakes or errors and has the value that the end user expects it to have.

Which resource is a physical asset?

Which attack is used when a copy of the hash of the user's password has been obtained?

Discuss the layered implementation of security.

The McCumber Cube provides a ____ description of the architectural approach widely used in computer and information security.

Introduction to Networking

Cryptography

Firewall Technologies and Administration

Network Authentication and Remote Access Using Vpn

Network Monitoring and Intrusion Detection and Prevention Systems

Wireless Network Security

Security of Web Applications

Network Vulnerability Assessment

Auditing, Monitoring, and Logging

Contingency Planning and Networking Incident Response

Digital Forensics

Filters

Exam 1: Introduction to Information Security

The ____ are the foundation of a security framework.

The value of information comes from the characteristics it possesses.

Which individual is considered to be a script kiddie who uses automated tools to inundate a Web site with a barrage of network traffic, usually resulting in a denial of service?

An indirect attack involves a hacker using a personal computer to break into a system.

How does a man-in-the-middle attack work?

Describe the chief information security officer (CISO) position.

Describe how benchmarking and best practices are used and where more information on best practices may be found.

An unlocked door is an example of a(n) ____.

Which threat is the most common intellectual property (IP) breach?

Match each item with a statement below. a.Accuracy f.Data users b.Authenticity g.Integrity c.Availability h.Utility d.Confidentiality i.Data custodians e.Data owners -The quality or state of having value for some purpose or end.

The security blueprint is a detailed version of the security framework.

In information security, ____ exists when a vulnerability known to an attacker is present.

Describe the issue-specific security policy (ISSP) and list three issues it may cover.

Which term identifies a single instance of an information asset suffering damage, unintended or unauthorized modification, or disclosure?

____________________ is the protection of information and its critical elements, including the systems and hardware that use, store, and transmit that information.

Match each item with a statement below. a.Accuracy f.Data users b.Authenticity g.Integrity c.Availability h.Utility d.Confidentiality i.Data custodians e.Data owners -A term meaning information is free from mistakes or errors and has the value that the end user expects it to have.

Which resource is a physical asset?

Which attack is used when a copy of the hash of the user's password has been obtained?

Discuss the layered implementation of security.

The McCumber Cube provides a ____ description of the architectural approach widely used in computer and information security.

Introduction to Networking

Cryptography

Firewall Technologies and Administration

Network Authentication and Remote Access Using Vpn

Network Monitoring and Intrusion Detection and Prevention Systems

Wireless Network Security

Security of Web Applications

Network Vulnerability Assessment

Auditing, Monitoring, and Logging

Contingency Planning and Networking Incident Response

Digital Forensics

Filters