Question 1

The CVE list is

Accepted Answer

A)  A list of all likely impacts of vulnerabilities 
B)  A list of all known viruses 
C)  A list of all known information security firms 
D)  An inventory of known software vulnerabilities 
A)  A list of all likely impacts of vulnerabilities 
B)  A list of all known viruses 
C)  A list of all known information security firms 
D)  An inventory of known software vulnerabilities

Question 2

An unrestricted uploads vulnerability refers to a situation where

Accepted Answer

A)  Files are accepted as input without verifying their specifications 
B)  Input from other users is supplied as output to other users 
C)  A program puts more data into a storage location than it can hold 
D)  User input is used without confirming its validity 
A)  Files are accepted as input without verifying their specifications 
B)  Input from other users is supplied as output to other users 
C)  A program puts more data into a storage location than it can hold 
D)  User input is used without confirming its validity

Question 3

A missing authorization vulnerability refers to a situation where

Accepted Answer

A)  Users are allowed access to privileged parts of a program without verification of credentials 
B)  Input from other users is supplied as output to other users 
C)  A program puts more data into a storage location than it can hold 
D)  User input is used without confirming its validity 
A)  Users are allowed access to privileged parts of a program without verification of credentials 
B)  Input from other users is supplied as output to other users 
C)  A program puts more data into a storage location than it can hold 
D)  User input is used without confirming its validity

Question 4

Social engineering is

Accepted Answer

A)  Software used to hide the existence of malicious software on computer systems 
B)  Exploits that compromise a previously unknown software vulnerability 
C)  Computers that perform malicious tasks at the direction of a remote controller 
D)  Manipulating people into performing desired actions 
A)  Software used to hide the existence of malicious software on computer systems 
B)  Exploits that compromise a previously unknown software vulnerability 
C)  Computers that perform malicious tasks at the direction of a remote controller 
D)  Manipulating people into performing desired actions

Question 5

Models are useful because

Accepted Answer

A)  They highlight resource or information that is to be protected 
B)  They highlight weaknesses in information systems that can be compromised 
C)  They draw attention to the essential details of a problem 
D)  They describe safeguards used to minimize the impact of threats 
A)  They highlight resource or information that is to be protected 
B)  They highlight weaknesses in information systems that can be compromised 
C)  They draw attention to the essential details of a problem 
D)  They describe safeguards used to minimize the impact of threats

The CVE list is

An unrestricted uploads vulnerability refers to a situation where

A missing authorization vulnerability refers to a situation where

Social engineering is

Models are useful because

Introduction

System Administration

System Administration 2

Asset Identification and Characterization

Threats and Vulnerabilities

Encryption Controls

Identity and Access Management

Hardware and Software Controls

Shell Scripting

Incident Handling

Incident Analysis

Policies, Standards and Guidelines

It Risk Analysis and Risk Management

Filters

Exam 4: Basic Information Security Model

The CVE list is

An unrestricted uploads vulnerability refers to a situation where

A missing authorization vulnerability refers to a situation where

Social engineering is

Models are useful because

Introduction

System Administration

System Administration 2

Asset Identification and Characterization

Threats and Vulnerabilities

Encryption Controls

Identity and Access Management

Hardware and Software Controls

Shell Scripting

Incident Handling

Incident Analysis

Policies, Standards and Guidelines

It Risk Analysis and Risk Management

Filters