Question 1

Code Red, Melissa, and Sasser are examples of _____ .

Accepted Answer

A) corner bolts 
B) firewalls 
C) cable shields 
D) worms

Question 2

Summarize the seven steps an organization should follow in order to resume operations in the event of a disaster.

Accepted Answer

The answer of Summarize the seven steps an organization should...

Question 3

Social engineering is an attack that takes advantage of the backdoors in security systems.

Accepted Answer

A) True 
 B)False

Question 4

Briefly list some of the indications of a computer being infected by a virus.

Accepted Answer

The answer of Briefly list some of the indications of...

Question 5

Briefly discuss how a worm can disrupt a computer or a network.

Accepted Answer

The answer of Briefly discuss how a worm can disrupt...

Question 6

Which federal law requires IT professionals to test the effectiveness of security measures protecting a company's data and vital records?

Accepted Answer

A) Sarbanes-Oxley Act of 2002 
B) Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 
C) General Data Protection Regulation (GDPR) 
D) The Federal Trade Commission Act

Question 7

Which of the following is not considered part of a comprehensive security plan?

Accepted Answer

A) Leaving logged-on workstations unattended 
B) Using strong passwords 
C) Using physical security measures, such as corner bolts on workstations, ID badges, and door locks 
D) Installing antivirus programs, and making sure they are updated automatically

Question 8

Application-filtering firewalls are less expensive than packet-filtering firewalls.

Accepted Answer

A) True 
 B)False

Question 9

A level 3 security system focuses on protecting the _____ against intrusion, denial-of-service attacks, and unauthorized access.

Accepted Answer

A) back-end server 
B) corporate network 
C) user's work station 
D) front-end server

Question 10

A _____ is a type of an intentional computer and network threat.

Accepted Answer

A) latch 
B) proxy server 
C) backdoor 
D) corner bolt

Question 11

In the context of intentional computer and network threats, a _____ is a programming routine built into a system by its designer or programmer to bypass system security and sneak back into the system later to access programs or files.

Accepted Answer

A) logic bomb 
B) proxy server 
C) firewall 
D) backdoor

Question 12

The Committee on National Security Systems (CNSS)proposed a model known as the _____ for evaluating information security.

Accepted Answer

A) McCumber cube 
B) Six Sigma model 
C) Bohr model 
D) SWOT analysis

Question 13

In the event of disaster, organizations should document all actions taken to regain normality.

Accepted Answer

A) True 
 B)False

Question 14

_____ is a type of data encryption that enables users of the Internet to securely and privately exchange data through the use of a pair of keys that is obtained from a trusted authority and shared through that authority.

Accepted Answer

A) A public key infrastructure 
B) Open key encryption 
C) Secret key encryption 
D) A private key infrastructure

Question 15

A hot site, an alternative site to use in case of disaster, does not have the necessary equipment to get up an running immediately.

Accepted Answer

A) True 
 B)False

Question 16

_____ is a computer crime that involves destroying or disrupting computer services.

Accepted Answer

A) Keystroke logging 
B) Dumpster diving 
C) Bombing 
D) Sabotage

Question 17

When developing a comprehensive security plan, employees' awareness of security problems should be minimized.

Accepted Answer

A) True 
 B)False

Question 18

The top two targets for ransomware attacks are the __________.

Accepted Answer

A) Internal Revenue Service and the Social Security Administration 
B) petroleum industry and nuclear facilities 
C) aviation and aerospace industries 
D) healthcare industry and financial institutions

Question 19

In the context of biometric security measures, briefly describe some biometric devices and measures.

Accepted Answer

The answer of In the context of biometric security measures,...

Question 20

In the context of fault-tolerant systems, describe uninterruptible power supply (UPS).

Accepted Answer

The answer of In the context of fault-tolerant systems, describe...

Exam 5: Protecting Information Resources

Code Red, Melissa, and Sasser are examples of _____ .

Summarize the seven steps an organization should follow in order to resume operations in the event of a disaster.

Social engineering is an attack that takes advantage of the backdoors in security systems.

Briefly list some of the indications of a computer being infected by a virus.

Briefly discuss how a worm can disrupt a computer or a network.

Which federal law requires IT professionals to test the effectiveness of security measures protecting a company's data and vital records?

Which of the following is not considered part of a comprehensive security plan?

Application-filtering firewalls are less expensive than packet-filtering firewalls.

A level 3 security system focuses on protecting the _____ against intrusion, denial-of-service attacks, and unauthorized access.

A _____ is a type of an intentional computer and network threat.

In the context of intentional computer and network threats, a _____ is a programming routine built into a system by its designer or programmer to bypass system security and sneak back into the system later to access programs or files.

The Committee on National Security Systems (CNSS) proposed a model known as the _____ for evaluating information security.

In the event of disaster, organizations should document all actions taken to regain normality.

_____ is a type of data encryption that enables users of the Internet to securely and privately exchange data through the use of a pair of keys that is obtained from a trusted authority and shared through that authority.

A hot site, an alternative site to use in case of disaster, does not have the necessary equipment to get up an running immediately.

_____ is a computer crime that involves destroying or disrupting computer services.

When developing a comprehensive security plan, employees' awareness of security problems should be minimized.

The top two targets for ransomware attacks are the __________.

In the context of biometric security measures, briefly describe some biometric devices and measures.

In the context of fault-tolerant systems, describe uninterruptible power supply (UPS).