Question 1

Auction fraud is sending fraudulent e-mails that seem to come from legitimate sources, such as a bank or university.

Accepted Answer

A) True 
 B)False

Question 2

In data encryption, the https in a browser address bar indicates a safe HTTP connection over _____.

Accepted Answer

A)  Secure Sockets Layer 
B)  Transport Layer Security 
C)  User Datagram Protocol 
D)  Transmission Control Protocol

Question 3

Level 1 security protects back-end systems to ensure confidentiality, accuracy, and integrity of data.

Accepted Answer

A) True 
 B)False

Question 4

In the context of biometric security measures, briefly describe some biometric devices and measures.

Accepted Answer

The answer of In the context of biometric security measures,...

Question 5

A(n) _____is a combination of hardware and software that acts as a filter or barrier between a private network and external computers or networks. ​

Accepted Answer

A)  firewall 
B)  rootkit 
C)  intrusion detection system 
D)  electronic tracker

Question 6

_____is a form of spyware that collects information about a user (without the user's consent) to determine which commercials to display in the user's Web browser.monitor and record the keys pressed on a keyboard and can be software or hardware devices. ​

Accepted Answer

A)  Keystroke loggers 
B)  Key chain planners 
C)  Key punchers 
D)  Key performers

Question 7

As a physical security measure, _____.

Accepted Answer

A)  electronic trackers are attached to a computer at the power outlet 
B)  passwords are used to restrict access to computers 
C)  firewalls are used to filter data packets 
D)  a user's signature is verified before granting accessibility

Question 8

In the context of computer and network security, _____ refers to the accuracy of information resources within an organization.

Accepted Answer

A)  validity 
B)  confidentiality 
C)  integrity 
D)  availability

Question 9

Application-filtering firewalls are less expensive than packet-filtering firewalls.

Accepted Answer

A) True 
 B)False

Question 10

Briefly list some of the indications of a computer being infected by a virus.

Accepted Answer

The answer of Briefly list some of the indications of...

Question 11

John downloaded Alten Cleaner, a program that poses as a computer registry cleaner, on his computer. Once he installed the program on his computer, the program illegitimately gained access to John's passwords and credit card information. In this scenario, it is evident that John was a victim of _____.

Accepted Answer

A)  spoofing 
B)  phishing 
C)  baiting 
D)  pharming

Question 12

_____ are usually placed in front of a firewall and can identify attack signatures, trace patterns, generate alarms for a network administrator, and cause routers to terminate connections with suspicious sources.

Accepted Answer

A)  Intrusion detection systems 
B)  Proxy servers 
C)  Identification badges 
D)  Virtual private networks

Question 13

In the context of computer and network security, a security system is said to possess _____ when it does not allow data to be corrupted or allow unauthorized changes to a corporate database.

Accepted Answer

A)  integrity 
B)  confidentiality 
C)  validity 
D)  availability

Question 14

Terminal resource security is a software feature that erases the screen and signs a user off automatically after a specified length of inactivity.

Accepted Answer

A) True 
 B)False

Question 15

The Committee on National Security Systems (CNSS) proposed a model known as the _____ for evaluating information security.

Accepted Answer

A)  McCumber cube 
B)  Six Sigma model 
C)  Bohr model 
D)  SWOT analysis

Question 16

Similar to phishing, _____ is directing Internet users to fraudulent Web sites with the intention of stealing their personal information, such as Social Security numbers, passwords, bank account numbers, and credit card numbers.

Accepted Answer

A)  sniffing 
B)  screening 
C)  pharming 
D)  cybersquatting

Question 17

_____is a form of spyware that collects information about a user (without the user's consent) to determine which commercials to display in the user's Web browser. ​

Accepted Answer

A)  Adware 
B)  Silverware 
C)  Freeware 
D)  Hardware

Question 18

A _____is a security threat that may launch a worm through a Trojan horse or launch a denial-of-service attack at a targeted IP address. ​

Accepted Answer

A)  blended threat 
B)  magnetic threat 
C)  signal threat 
D)  router threat

Question 19

In the context of data encryption, briefly describe asymmetric encryption.

Accepted Answer

The answer of In the context of data encryption, briefly...

Question 20

In the context of computer and network security, _____ means a quick recovery in the event of a system failure or disaster.

Accepted Answer

A)  availability 
B)  confidentiality 
C)  integrity 
D)  validity

Exam 5: Protecting Information Resources

Auction fraud is sending fraudulent e-mails that seem to come from legitimate sources, such as a bank or university.

In data encryption, the https in a browser address bar indicates a safe HTTP connection over _____.

Level 1 security protects back-end systems to ensure confidentiality, accuracy, and integrity of data.

In the context of biometric security measures, briefly describe some biometric devices and measures.

A(n) _____is a combination of hardware and software that acts as a filter or barrier between a private network and external computers or networks. ​

_____is a form of spyware that collects information about a user (without the user's consent) to determine which commercials to display in the user's Web browser.monitor and record the keys pressed on a keyboard and can be software or hardware devices. ​

As a physical security measure, _____.

In the context of computer and network security, _____ refers to the accuracy of information resources within an organization.

Application-filtering firewalls are less expensive than packet-filtering firewalls.

Briefly list some of the indications of a computer being infected by a virus.

_____ are usually placed in front of a firewall and can identify attack signatures, trace patterns, generate alarms for a network administrator, and cause routers to terminate connections with suspicious sources.

In the context of computer and network security, a security system is said to possess _____ when it does not allow data to be corrupted or allow unauthorized changes to a corporate database.

Terminal resource security is a software feature that erases the screen and signs a user off automatically after a specified length of inactivity.

The Committee on National Security Systems (CNSS) proposed a model known as the _____ for evaluating information security.

Similar to phishing, _____ is directing Internet users to fraudulent Web sites with the intention of stealing their personal information, such as Social Security numbers, passwords, bank account numbers, and credit card numbers.

_____is a form of spyware that collects information about a user (without the user's consent) to determine which commercials to display in the user's Web browser. ​

A _____is a security threat that may launch a worm through a Trojan horse or launch a denial-of-service attack at a targeted IP address. ​

In the context of data encryption, briefly describe asymmetric encryption.

In the context of computer and network security, _____ means a quick recovery in the event of a system failure or disaster.

A(n) _____is a combination of hardware and software that acts as a filter or barrier between a private network and external computers or networks.

_____is a form of spyware that collects information about a user (without the user's consent) to determine which commercials to display in the user's Web browser.monitor and record the keys pressed on a keyboard and can be software or hardware devices.

_____is a form of spyware that collects information about a user (without the user's consent) to determine which commercials to display in the user's Web browser.

A _____is a security threat that may launch a worm through a Trojan horse or launch a denial-of-service attack at a targeted IP address.