Question 1

Someone who gains access to a system and causes harm is a __________?

Accepted Answer

A)  White hat hacker
B)  Black hat hacker
C)  Grey hat hacker
D)  Red hat hacker B

Question 2

A(n)______ is a basic security device that filters traffic and is a barrier between a network and the outside world or between a system and other systems.

Accepted Answer

A)  Firewall
B)  Proxy server
C)  Intrusion detection system
D)  Network Monitor A

Question 3

The type of hacking that involves breaking into telephone systems is called sneaking.

Accepted Answer

A) True 
 B)False  False

Question 4

The Health Insurance Portability and Accountability Act of 1996 requires government agencies to identify sensitive systems,conduct computer security training,and develop computer security plans.

Accepted Answer

A) True 
 B)False

Question 5

Confidentiality,integrity,and availability are three pillars of the CIA triangle.

Accepted Answer

A) True 
 B)False

Question 6

Malware is a generic term for software that has a malicious purpose.

Accepted Answer

A) True 
 B)False

Question 7

Which of these is a repository for detailed information on virus outbreaks?

Accepted Answer

A)  Computer Emergency Response Team
B)  F-Secure
C)  SANS Institute
D)  Microsoft Security Advisor

Question 8

The Domain Name Service is what translates human-readable domain names into IP addresses that computers and routers understand.

Accepted Answer

A) True 
 B)False

Question 9

Which of these is a repository of security-related documentation and also sponsors a number of security research projects?

Accepted Answer

A)  Computer Emergency Response Team
B)  F-Secure
C)  SANS Institute
D)  Microsoft Security Advisor

Question 10

Your company is instituting a new security awareness program.You are responsible for educating end users on a variety of threats,including social engineering.Which of the following best defines social engineering?

Accepted Answer

A)  Illegal copying of software
B)  Gathering information from discarded manuals and printouts
C)  Using people skills to obtain proprietary information
D)  Destruction or alteration of data

Question 11

The technique for breaching a system's security by exploiting human nature rather than technology is war-driving.

Accepted Answer

A) True 
 B)False

Question 12

Someone who finds a flaw in a system and reports that flaw to the vendor of the system is a __________.

Accepted Answer

A)  White hat hacker
B)  Black hat hacker
C)  Gray hat hacker
D)  Red hat hacker

Question 13

Which of these was the first computer incident-response team?

Accepted Answer

A)  Computer Emergency Response Team
B)  F-Secure
C)  SANS Institute
D)  Microsoft Security Advisor

Question 14

Software that lays dormant until some specific condition is met is a Trojan horse.

Accepted Answer

A) True 
 B)False

Question 15

A(n)hides the internal network's IP address and presents a single IP address to the outside world.

Accepted Answer

A)  Firewall
B)  Proxy server
C)  Intrusion detection system
D)  Network Monitor

Question 16

Someone who legally breaks into a system to assess security deficiencies is a ________.

Accepted Answer

A)  Script kiddy
B)  Penetration tester
C)  White hat hacker
D)  Black hat hacker

Question 17

Someone who calls himself a hacker but lacks the expertise is a ________.

Accepted Answer

A)  Script kiddy
B)  Sneaker
C)  White hat hacker
D)  Black hat hacker

Question 18

Someone who breaks into a system legally to assess security deficiencies is a sneaker.

Accepted Answer

A) True 
 B)False

Question 19

Auditing is the process to determine if a user's credentials are authorized to access a network resource.

Accepted Answer

A) True 
 B)False

Question 20

In which type of hacking does the user block access from legitimate users without actually accessing the attacked system?

Accepted Answer

A)  Denial of service
B)  Web attack
C)  Session hijacking
D)  None of the above

Exam 1: Introduction to Computer Security

Someone who gains access to a system and causes harm is a __________?

A(n) ______ is a basic security device that filters traffic and is a barrier between a network and the outside world or between a system and other systems.

The type of hacking that involves breaking into telephone systems is called sneaking.

The Health Insurance Portability and Accountability Act of 1996 requires government agencies to identify sensitive systems,conduct computer security training,and develop computer security plans.

Confidentiality,integrity,and availability are three pillars of the CIA triangle.

Malware is a generic term for software that has a malicious purpose.

Which of these is a repository for detailed information on virus outbreaks?

The Domain Name Service is what translates human-readable domain names into IP addresses that computers and routers understand.

Which of these is a repository of security-related documentation and also sponsors a number of security research projects?

Your company is instituting a new security awareness program.You are responsible for educating end users on a variety of threats,including social engineering.Which of the following best defines social engineering?

The technique for breaching a system's security by exploiting human nature rather than technology is war-driving.

Someone who finds a flaw in a system and reports that flaw to the vendor of the system is a __________.

Which of these was the first computer incident-response team?

Software that lays dormant until some specific condition is met is a Trojan horse.

A(n) hides the internal network's IP address and presents a single IP address to the outside world.

Someone who legally breaks into a system to assess security deficiencies is a ________.

Someone who calls himself a hacker but lacks the expertise is a ________.

Someone who breaks into a system legally to assess security deficiencies is a sneaker.

Auditing is the process to determine if a user's credentials are authorized to access a network resource.

In which type of hacking does the user block access from legitimate users without actually accessing the attacked system?