Deck 11: Cybersecurity

Question 1

________ developed the 10-domain Common Body of Knowledge (CBK)for IT security and controls.

Answer 1

International Information Systems Security Certification Consortium ((ISC)2)

Question 2

What percent of electronic records breached were in the financial services industry?

A)84%
B)89%
C)93%
D)97%

Answer 2

C

Question 3

Cybercrimes are crimes connected to what? (Select the best answer)

A)Information assets and IT
B)The financial services industry
C)Electronic payments
D)Electronic transfer of funds

Answer 3

A

Question 4

Laws related to cybersecurity originate from legislation, regulations, and case law.

Question 5

Phishing involves attempts to obtain passwords by sniffing messages sent between computers on the network.

Question 6

________ attacks are typically for very small amounts over numerous accounts that accumulate into significant sums.

Question 7

________ relates to the laws and regulations to prevent, investigate, and prosecute cybercrimes.

Question 8

________ involves attempts to obtain passwords by sniffing messages sent between computers on the network.

Question 9

Personal data, such as home address and credit card number, are stored on hotel card keys.

Question 10

Which of the following is not part of the 10 domains of cybersecurity?

A)Application Security Domain
B)Database Security Domain
C)Information Security and Risk Management Domain
D)Control Access Domain

Question 11

What percent of the breaches in the financial services industry were tied to organized crime?

A)34%
B)66%
C)84%
D)90%

Question 12

List the 10 domains that comprise the 10-domain Common body of Knowledge (CBK)?

Question 13

The IT used in the accounting system can actually create vulnerabilities to cyberattacks of this confidential data.

Question 14

While dumpster diving is unethical, it may not be illegal.

Question 15

________ are crimes connected to information assets and IT.

Question 16

________ refers to rummaging through garbage for discarded documents or digital media.

Question 17

The civil code, legislation passed by federal or state legislatures specifying civil penalties, is enforced by governmental agencies with monetary penalties and prison sentences.

Question 18

________ involves collecting, examining, and preserving evidence of cybercrimes.

Question 19

Dumpster diving attacks involve manipulating and tricking an individual into divulging confidential information to be used for fraudulent purposes.

Question 20

________ attacks involve manipulating and tricking an individual into divulging confidential information to be used for fraudulent purposes.

Question 21

In the government sector, unauthorized disclosure of data with this classification might be harmful to national security.

A)Sensitive But Unclassified
B)Top Secret
C)Confidential
D)Secret

Question 22

________ software are computer programs used for managing computer hardware.

Question 23

List and define the information sensitivity classifications for the private sector.

Question 24

What percent of breaches were aided by significant errors?

A)45%
B)67%
C)78%
D)87%

Question 25

________ architecture consists of computer hardware components and computer software.

Question 26

List and define the fundamental principles of information security.

Question 27

Bridges connect LANs of similar or different types to create an intranet.

Question 28

To understand cybersecurity and how to evaluate whether cybersecurity is adequate for an accounting system, a basic understanding of IT architecture is not needed.

Question 29

Which legislation requires each federal agency to develop, document, and implement an agency-wide information security program?

A)Employee Privacy Issues
B)Federal Information Security Management Act of 2002 (FISMA)
C)Computer Fraud and Abuse Act
D)Federal Privacy Act of 1974

Question 30

In the private sector, data with this classification requires higher than normal security measures to ensure data integrity and security.

A)Confidential
B)Sensitive
C)Private
D)Public

Question 31

Which of the following is not part of cyber forensics?

A)Collecting evidence of cyber crime
B)Preserving evidence of cyber crime
C)Examining evidence of cyber crime
D)Prevent cybercrime

Question 32

Enterprise security architecture studies the enterprise architecture and business environment to develop an overall strategy and plan that best fits enterprise-specific needs.

Question 33

Wide area networks (WANs)cover a large geographic region, such as the lower Midwest.

Question 34

It is the first day of your new job as an accounting intern. In the elevator on the way to your cubicle, a gentleman in the elevator (that you later learn is the controller of the company)says to you, "A salami attack." Shaking his head, he repeats, "It sounds more like someone being hit over the head with a sausage. It's just a small amount, so why should we care? You are our new intern, aren't you? Well, why don't you send me an email by this afternoon explaining how what is a salami attack and why we should prevent them."

Question 35

Information security consists of the policies and procedures required to secure information assets, including IT hardware, software, and stored data.

Question 36

What percent of breaches came from within a corporation?

A)20%
B)35%
C)50%
D)68%

Question 37

Which legislation requires financial institutions to provide customers with privacy notices and prohibits the institutions from sharing customer information with nonaffiliated third parties?

A)Federal Privacy Act of 1974
B)Sarbanes-Oxley
C)Gramm-Leach-Bliley Act
D)Computer Security Act of 1987

Question 38

List and define information sensitivity classification for governmental sector.

Question 39

The Internet is a collection of many networks of various types, connecting different LANs
MANs, and WANs together.

Question 40

Application software are computer programs used for managing computer hardware.

Question 41

Match the network protocol with the appropriate definition.

A)A software program that provides message transportation services between sending and receiving computers
B)A software program commonly used to connect computers to create a LAN
C)A software program that allows the enterprise network to connect to the network of vendors and suppliers through proprietary lines
D)A software program that provides routing services to messages transmitted over the Internet
Electronic data interchange (EDI)

Question 42

Match the network protocol with the appropriate definition.

A)A software program that provides message transportation services between sending and receiving computers
B)A software program commonly used to connect computers to create a LAN
C)A software program that allows the enterprise network to connect to the network of vendors and suppliers through proprietary lines
D)A software program that provides routing services to messages transmitted over the Internet
Transport control protocol (TCP)

Question 43

________ is the electrical transmission of data through analog or digital transmission media.

Question 44

Match the network protocol with the appropriate definition.

A)A software program that provides message transportation services between sending and receiving computers
B)A software program commonly used to connect computers to create a LAN
C)A software program that allows the enterprise network to connect to the network of vendors and suppliers through proprietary lines
D)A software program that provides routing services to messages transmitted over the Internet
Internet protocol (IP)

Question 45

Which domain covers security for the electrical transmission of data through analog or digital transmission media?

A)Security architecture and design
B)Telecommunications
C)Application security
D)Cryptography

Question 46

In IT architecture security, what is not part of the software application ring?

A)Accounting software
B)Web browsers
C)Word processing applications
D)Relational database management system

Question 47

Which of the following is a computer input device?

A)Touch screen
B)Plotter
C)Speakers
D)Flash drive

Question 48

________ firewall is a special type of firewall located on a server used to intercept and inspect all incoming messages prior to delivering them to the intended recipients.

Question 49

Securing computer architecture involves three rings of protection. What is in each ring? Provide examples.

Question 50

Security of the IT architecture should be considered in which phase of the system development life cycle (SDLC)?

A)All the phases
B)Design phase
C)Install phase
D)Build/purchase phase

Question 51

What is a microcomputer?

A)A computer with moderate computing power
B)A personal computer or laptop
C)A smart phone
D)A powerful, high-speed computer used for complex numerical calculations

Question 52

What are the basic hardware components of a computer?

Question 53

Which routing device connects the enterprise's intranet to the Internet?

A)Router
B)Bridge
C)Gateway
D)A and C

Question 54

The network administrator must know how to identify potential vulnerabilities and troubleshoot effectively.

Question 55

Which network protocol (software)is commonly used to connect computers to create a LAN?

A)Internet protocol (IP)
B)Ethernet protocol
C)Electronic data interchange (EDI)
D)Transport control protocol (TCP)

Question 56

What does network hardware include? Please describe each component.

Question 57

When application software is updated to fix an error or add a new feature, a section of coding called a ________ is inserted into the program.

Question 58

Network cyberattacks typically target ________ because they offer access to the network.

Question 59

Match the network protocol with the appropriate definition.

A)A software program that provides message transportation services between sending and receiving computers
B)A software program commonly used to connect computers to create a LAN
C)A software program that allows the enterprise network to connect to the network of vendors and suppliers through proprietary lines
D)A software program that provides routing services to messages transmitted over the Internet
Ethernet protocol

Question 60

Which network protocol (software)allows the enterprise network to connect to the network of vendors and suppliers through proprietary lines?

A)Transport control protocol (TCP)
B)Ethernet protocol
C)Internet protocol (IP)
D)Electronic data interchange (EDI)

Question 61

The physical and environmental security domain addresses

A)Activities and procedures required to keep information technology running securely
B)The physical security of information technology components, such as hardware and software
C)Security for telecommunications, networks, and the Internet
D)Security for access to the enterprise system, including computers, networks, routers, and databases

Question 62

What is a honeypot and why is it used?

Question 63

Which access control threat are programs or devices that examine traffic on the enterprise network?

A)Password attack
B)Network sniffer
C)Identify theft
D)Spoofing at log-on

Question 64

What is point-to-point protocol? How does it unauthorized access to a network?

Question 65

________ controls ensure that reports and messages reach intended recipients.

Question 66

The company where you work is opening offices in another state. Because the manager of the new office is determined to keep costs down, she does not want to purchase additional firewall software for the routers and bridges being installed behind the corporate firewall. The IT department has asked you for help. Prepare a memo explaining the need for additional firewalls.

Question 67

Which authentication method involves analyzing the user's retina?

A)Single sign-on
B)Biometrics
C)Token device
D)Dynamic password

Question 68

Which of the following is not a network access point?

A)Keyboard
B)Bridge
C)Computer
D)Router

Question 69

Which of the following is not considered a deterrent to the physical access to corporate offices?

A)GPS tracking
B)Locked doors
C)Fences
D)Cameras

Question 70

IT security management responsibility includes

A)Developing contingency plans for virus attacks
B)Input/output controls
C)Maintaining security devices and software
D)Training to all employees to inform and educate them regarding security policies and procedures

Question 71

What is the purpose of installing firewalls on bridges, routers, and gateways?

A)Ensuring unauthorized access to the network
B)Preventing data from moving too quickly over the network
C)Detecting unauthorized access to the network
D)Preventing unauthorized access to the network

Question 72

A honeypot is used to

A)Store the company web site
B)Distract hackers
C)Catch hackers
D)B and C

Question 73

________, such as Symantec Enterprise Security Systems, are used to detect the damage caused by intruders and fix the applications.

Question 74

When an organization wants high traffic on its web site, what type of firewall is used?

A)Proxy firewall
B)Medium-level security firewall
C)Low-level security firewall
D)High-level security firewall

Question 75

A ________ is a hardware device containing a password generator protocol that creates a new password each time the token is used.

Question 76

Match the malware with the appropriate definition.

A)Tiny piece(s)of programming code that install themselves on the infected computer called a Zombie
B)Similar to a virus except it does not need a host application to function or reproduce
C)Code is disguised as a legitimate program, that can be downloaded and installed by users without realizing it is malware
D)Software executes when a specified event happens within the computer
E)A relatively small program that infects other application software by attaching to it and disrupting application function
Worms

Question 77

Operations security refers to

A)Security for access to the enterprise system, including computers, networks, routers, and databases
B)Security for telecommunications, networks, and the Internet
C)The physical security of information technology components, such as hardware and software
D)Activities and procedures required to keep information technology running securely

Question 78

Match the malware with the appropriate definition.

A)Tiny piece(s)of programming code that install themselves on the infected computer called a Zombie
B)Similar to a virus except it does not need a host application to function or reproduce
C)Code is disguised as a legitimate program, that can be downloaded and installed by users without realizing it is malware
D)Software executes when a specified event happens within the computer
E)A relatively small program that infects other application software by attaching to it and disrupting application function
Bots

Question 79

Physical security frameworks are useful to provide guidance on how to secure the physical facilities, grounds, and IT assets.

Question 80

Match the malware with the appropriate definition.

A)Tiny piece(s)of programming code that install themselves on the infected computer called a Zombie
B)Similar to a virus except it does not need a host application to function or reproduce
C)Code is disguised as a legitimate program, that can be downloaded and installed by users without realizing it is malware
D)Software executes when a specified event happens within the computer
E)A relatively small program that infects other application software by attaching to it and disrupting application function
Viruses