Question 1

Computer security strategies in the form of ________ can be implemented to maintain accountability for those who have legitimate access to a computer system or database.

Accepted Answer

A)   Logical controls
B)   Administrative controls
C)   Data encryption
D)   Firewalls
E)   All of the above. B

Question 2

________ property is defined as information created through research and development.

Accepted Answer

A)   Real
B)   Proprietary
C)   Intellectual
D)   Private
E)   All of the above. C

Question 3

________ involves information risk assessment and intelligence activities in a process whereby operations are analyzed to identify vulnerabilities.

Accepted Answer

A)   OPSEC
B)   COMPSEC
C)   INFOTEL
D)   INTELSEC
E)   OPSEEK A

Question 4

INFOSEC views operations from an adversary's perspective in an effort to seek out an organization's vulnerabilities and protect its critical information.

Accepted Answer

A) True 
 B)False

Question 5

Computer crime is generally defined as any crime committed with computer technology.

Accepted Answer

A) True 
 B)False

Question 6

_______ security involves the use of non-exclusive codes and ciphers to transform transmitted data to render it unintelligible.

Accepted Answer

A)   Line
B)   Transmission
C)   Cryptographic
D)   Emanations
E)   Technical

Question 7

Communications ________ security involves prevention of adverse surveillance by devices such as microphones.

Accepted Answer

A)   Line
B)   Transmission
C)   Cryptographic
D)   Emanations
E)   Technical

Question 8

According to the United States ________, critical information includes all forms and types of financial, business, scientific, economic, or engineering information.

Accepted Answer

A)   Economic Security Directive 298
B)   Economic Security National Statute
C)   Economic Security Act of 1986
D)   Economic Security Act of 1996
E)   All of the above.

Question 9

The ________ involves collaboration among several organizations and provides operations security training to agencies and businesses.

Accepted Answer

A)   National Operations Security Initiative
B)   National Infrastructure Network
C)   Interagency OPSEC Services Administration
D)   Interagency OPSEC Support Staff
E)   Interagency OPSEC Services Group

Question 10

What is the purpose of information security (INFOSEC)?

Accepted Answer

The answer of What is the purpose of information security...

Question 11

________ includes all efforts to protect information transmitted by voice, wire, satellite, and other systems from unauthorized interception.

Accepted Answer

A)   OPSEC
B)   COMSEC
C)   INFOTEL
D)   INTELSEC
E)   OPSEEK

Question 12

________ information policies remind staff of special agreements created to maintain confidentiality and rights to privacy.

Accepted Answer

A)   Minimum protection
B)   Authorization
C)   Special audit assignment
D)   Legal protection
E)   All of the above.

Question 13

According to John Carroll's "simple security principle"
for safeguarding sensitive computer information, no person should view information that has a classification that exceeds the viewer's security clearance.

Accepted Answer

A) True 
 B)False

Question 14

Unlike business information, all government information must be released upon request.

Accepted Answer

A) True 
 B)False

Question 15

According to the protocol for classification of business information, ________ is assigned to the business equivalent of top secret information.

Accepted Answer

A)   Company confidential, special control
B)   Company confidential
C)   Private confidential
D)   Internal use only
E)   Restricted

Question 16

According to some experts, theft of money and securities of government represent the greatest threat to governments and businesses today.

Accepted Answer

A) True 
 B)False

Question 17

________ pose(s) security risks and challenges for individuals as well as organizations.

Accepted Answer

A)   Social networking media
B)   Facebook use
C)   Cyberstalking
D)   Smart phones
E)   All of the above are correct.

Question 18

The ________ is an FBI-maintained computer security resource available to security professionals and computer systems administrators.

Accepted Answer

A)   CERT
B)   SCANS
C)   SWAT
D)   NIPC
E)   All of the above.

Question 19

In the United States government's hierarchical information security structure, the ________ classification is assigned to information which, if disclosed, could be prejudicial to the interests of the United States.

Accepted Answer

A)   Top secret
B)   Secret
C)   Confidential
D)   Unclassified but sensitive
E)   Caveats

Question 20

Phishing is not a form of identity theft.

Accepted Answer

A) True 
 B)False

Exam 6: Information, Communications, and Computer Security

Computer security strategies in the form of ________ can be implemented to maintain accountability for those who have legitimate access to a computer system or database.

________ property is defined as information created through research and development.

________ involves information risk assessment and intelligence activities in a process whereby operations are analyzed to identify vulnerabilities.

INFOSEC views operations from an adversary's perspective in an effort to seek out an organization's vulnerabilities and protect its critical information.

Computer crime is generally defined as any crime committed with computer technology.

_______ security involves the use of non-exclusive codes and ciphers to transform transmitted data to render it unintelligible.

Communications ________ security involves prevention of adverse surveillance by devices such as microphones.

According to the United States ________, critical information includes all forms and types of financial, business, scientific, economic, or engineering information.

The ________ involves collaboration among several organizations and provides operations security training to agencies and businesses.

What is the purpose of information security (INFOSEC)?

________ includes all efforts to protect information transmitted by voice, wire, satellite, and other systems from unauthorized interception.

________ information policies remind staff of special agreements created to maintain confidentiality and rights to privacy.

According to John Carroll's "simple security principle" for safeguarding sensitive computer information, no person should view information that has a classification that exceeds the viewer's security clearance.

Unlike business information, all government information must be released upon request.

According to the protocol for classification of business information, ________ is assigned to the business equivalent of top secret information.

According to some experts, theft of money and securities of government represent the greatest threat to governments and businesses today.

________ pose(s) security risks and challenges for individuals as well as organizations.

The ________ is an FBI-maintained computer security resource available to security professionals and computer systems administrators.

In the United States government's hierarchical information security structure, the ________ classification is assigned to information which, if disclosed, could be prejudicial to the interests of the United States.

Phishing is not a form of identity theft.