Question 1

Match each item with a statement below.
a.Accuracy
f.Data users
b.Authenticity
g.Integrity
c.Availability
h.Utility
d.Confidentiality
i.Data custodians
e.Data owners
-Enables authorized users to access information without interference or obstruction, and to receive it in the required format.

Accepted Answer

C

Question 2

Organizations must minimize ____ to match their risk appetite.

Accepted Answer

A)   threats
B)   access
C)   risk
D)   loss C

Question 3

By balancing information security and access, a completely secure information system can be created.

Accepted Answer

A) True 
 B)False  False

Question 4

Match each item with a statement below.
a.Accuracy
f.Data users
b.Authenticity
g.Integrity
c.Availability
h.Utility
d.Confidentiality
i.Data custodians
e.Data owners
-People responsible for the security and use of a particular set of information.

Accepted Answer

The answer of Match each item with a statement below.
a.Accuracy
f.Data...

Question 5

Match each item with a statement below.
a.Accuracy
f.Data users
b.Authenticity
g.Integrity
c.Availability
h.Utility
d.Confidentiality
i.Data custodians
e.Data owners
-End users who work with the information to perform their daily jobs supporting the mission of the organization, and who therefore share the responsibility for data security.

Accepted Answer

The answer of Match each item with a statement below.
a.Accuracy
f.Data...

Question 6

A(n) ____ is an application error that occurs when more data is sent to a buffer than it can handle.

Accepted Answer

A)   timing attack
B)   application control list
C)   dictionary attack
D)   buffer overflow

Question 7

An enterprise information security policy (EISP) is also known as a(n) ____.

Accepted Answer

A)   issue-specific security policy
B)   general security policy
C)   systems-specific security policy
D)   strategic planning policy

Question 8

Which individual interferes with or disrupts systems to protest the operations, policies, or actions of an organization or government agency?

Accepted Answer

A)   Cyberterrorist
B)   Packet monkey
C)   Phreaker
D)   Hacktivist

Question 9

Define social engineering and briefly describe how it is accomplished.

Accepted Answer

The answer of Define social engineering and briefly describe how...

Question 10

When organizations record versions of their policy in English and alternate languages, they are attempting to meet the ____ criteria to make the policy effective and legally enforceable.

Accepted Answer

A)   Comprehension (understanding) 
B)   Compliance (agreement) 
C)   Review (reading) 
D)   Dissemination (distribution)

Question 11

Implementing multiple types of technology and thereby preventing the failure of one system from compromising the security of information is referred to as ____________________.

Accepted Answer

The answer of Implementing multiple types of technology and thereby...

Question 12

____________________ is a technique used to gain unauthorized access to computers, wherein the intruder sends messages whose IP addresses indicate to the recipient that the messages are coming from a trusted host.

Accepted Answer

The answer of ____________________ is a technique used to gain...

Question 13

List the four important organizational functions an information security program performs.

Accepted Answer

The answer of List the four important organizational functions an...

Question 14

Which term describes a subject or object's ability to use, manipulate, modify, or affect another subject or object?

Accepted Answer

A)   Attack
B)   Possession
C)   Exploit
D)   Access

Question 15

Match each item with a statement below.
a.Accuracy
f.Data users
b.Authenticity
g.Integrity
c.Availability
h.Utility
d.Confidentiality
i.Data custodians
e.Data owners
-The protection of information from disclosure or exposure to unauthorized individuals or systems.

Accepted Answer

The answer of Match each item with a statement below.
a.Accuracy
f.Data...

Question 16

Match each item with a statement below.
a.Accuracy
f.Data users
b.Authenticity
g.Integrity
c.Availability
h.Utility
d.Confidentiality
i.Data custodians
e.Data owners
-A term meaning information remains whole, complete, and uncorrupted.

Accepted Answer

The answer of Match each item with a statement below.
a.Accuracy
f.Data...

Question 17

How does a distributed denial-of-service (DDoS) attack work and why are they so dangerous?

Accepted Answer

The answer of How does a distributed denial-of-service (DDoS) attack...

Question 18

Match each item with a statement below.
a.Accuracy
f.Data users
b.Authenticity
g.Integrity
c.Availability
h.Utility
d.Confidentiality
i.Data custodians
e.Data owners
-A term referring to the quality or state of being genuine or original rather than a reproduction or fabrication.

Accepted Answer

The answer of Match each item with a statement below.
a.Accuracy
f.Data...

Question 19

The CIA triad is based on three characteristics of information that form the foundation for many security programs: ____.

Accepted Answer

A)   confidentiality, integrity, and asset
B)   confidentiality, integrity, and availability
C)   confidentiality, information, and availability
D)   communication, information, and asset

Question 20

Describe the purpose of the Security Area Working Group and RFC 2196.

Accepted Answer

The answer of Describe the purpose of the Security Area...

Exam 1: Introduction to Information Security

Match each item with a statement below. a.Accuracy f.Data users b.Authenticity g.Integrity c.Availability h.Utility d.Confidentiality i.Data custodians e.Data owners -Enables authorized users to access information without interference or obstruction, and to receive it in the required format.

Organizations must minimize ____ to match their risk appetite.

By balancing information security and access, a completely secure information system can be created.

Match each item with a statement below. a.Accuracy f.Data users b.Authenticity g.Integrity c.Availability h.Utility d.Confidentiality i.Data custodians e.Data owners -People responsible for the security and use of a particular set of information.

A(n) ____ is an application error that occurs when more data is sent to a buffer than it can handle.

An enterprise information security policy (EISP) is also known as a(n) ____.

Which individual interferes with or disrupts systems to protest the operations, policies, or actions of an organization or government agency?

Define social engineering and briefly describe how it is accomplished.

When organizations record versions of their policy in English and alternate languages, they are attempting to meet the ____ criteria to make the policy effective and legally enforceable.

Implementing multiple types of technology and thereby preventing the failure of one system from compromising the security of information is referred to as ____________________.

____________________ is a technique used to gain unauthorized access to computers, wherein the intruder sends messages whose IP addresses indicate to the recipient that the messages are coming from a trusted host.

List the four important organizational functions an information security program performs.

Which term describes a subject or object's ability to use, manipulate, modify, or affect another subject or object?

Match each item with a statement below. a.Accuracy f.Data users b.Authenticity g.Integrity c.Availability h.Utility d.Confidentiality i.Data custodians e.Data owners -The protection of information from disclosure or exposure to unauthorized individuals or systems.

Match each item with a statement below. a.Accuracy f.Data users b.Authenticity g.Integrity c.Availability h.Utility d.Confidentiality i.Data custodians e.Data owners -A term meaning information remains whole, complete, and uncorrupted.

How does a distributed denial-of-service (DDoS) attack work and why are they so dangerous?

Match each item with a statement below. a.Accuracy f.Data users b.Authenticity g.Integrity c.Availability h.Utility d.Confidentiality i.Data custodians e.Data owners -A term referring to the quality or state of being genuine or original rather than a reproduction or fabrication.

The CIA triad is based on three characteristics of information that form the foundation for many security programs: ____.

Describe the purpose of the Security Area Working Group and RFC 2196.