Exam 5: Protecting Information Resources

_________ is an attempt to gain access to a network by posing as an authorized user in order to find sensitive information,such as passwords and credit card information.

Explain the concept of mirror disks.

Data sent through a virtual private network (VPN)can be encrypted using the _____.

In the context of security threats,a _____ floods a network or server with service requests to prevent legitimate users' access to the system.

What is the function of a virtual private network (VPN)?

Identify a true statement about firewalls.

_________ monitor and record the keys pressed on a keyboard and can be software or hardware devices.

In the context of the CIA triangle,part of ensuring integrity is identifying authorized users and granting them access privileges.

A level 1 security system is used to protect _____ against unauthorized access.

_________,a biometric security measure,translates words into digital patterns,which are recorded and examined for tone and pitch.

Describe the process of vein analysis in biometric security measures.

Which of the following is a type of access control used to protect systems from unauthorized access?

_____ encryption is also known as secret key encryption.

In the context of security threats,_________ means using "people skills"-such as being a good listener and assuming a friendly,unthreatening air-to trick others into revealing private information.

Describe how uninterruptible power supply (UPS)is used a part of a comprehensive security system.

A _____ plan lists the tasks that must be performed to restore damaged data and equipment.

What are the functions of a computer emergency response team (CERT)?

A distributed denial-of-service (DDoS)attack involves hundreds of computers working together to bombard a Web site with thousands of requests for information in a short period.

What is an intrusion detection system (IDS)?

A _________ threat is a security threat that combines the characteristics of computer viruses,worms,and other malicious codes with vulnerabilities found on public and private networks.