Exam 5: Protecting Information Resources

Which of the following intentional computer and network threats is a type of Trojan program used to release a virus, worm, or other destructive code?

_____ primarily control access to computers and networks and include devices for securing computers and peripherals from theft.

Briefly discuss the process of data encryption.

_____  is a form of spyware that collects information about a user (without the user's consent)to determine which commercials to display in the user's Web browser.

Terminal resource security is a software feature that erases the screen and signs a user off automatically after a specified length of inactivity.

The main drawback of an intrusion detection system (IDS)is its inability to prevent denial-of-service (DoS)attacks.

According to a 2019 study, which of the following is not an accurate statistic about ransomware attacks?

An intrusion detection system (IDS)can protect networks against both external and internal access.

Which form of text needs to be unscrambled using a decryption key?

_____ are usually placed in front of a firewall and can identify attack signatures, trace patterns, generate alarms for a network administrator, and cause routers to terminate connections with suspicious sources.

In the context of computer and network security, _____ means that a system must not allow the disclosing of information by anyone who is not authorized to access it.

In the context of business continuity planning, list at least five of the procedures for keeping an organization operational in the event of a disaster.

Briefly explain the McCumber cube.

In the context of computer and network security, _____ means that computers and networks are operating and authorized users can access the information they need.

_____ , a biometric security measure, translates words into digital patterns, which are recorded and examined for tone and pitch.

Which statement is true of application-filtering firewalls?

In the context of access controls, briefly explain the guidelines that need to be followed to increase the effectiveness of passwords.

Briefly discuss dumpster diving and shoulder surfing, two commonly used social-engineering techniques.

In the event of a network attack or intrusion, a _____ lists the tasks that must be performed by the organization to restore damaged data and equipment.

_____  is an example of antispyware software.