Question 1

As a physical security measure,_____.

Accepted Answer

A) electronic trackers are attached to a computer at the power outlet 
B) passwords are used to restrict access to computers 
C) firewalls are used to filter data packets 
D) a user's signature is verified before granting accessibility

Question 2

Spoofing happens when:

Accepted Answer

A) a word is converted into a digital pattern. 
B) keystrokes are monitored and recorded. 
C) an illegitimate program poses as a legitimate one. 
D) a firewall rejects the incoming data packets.

Question 3

Auction fraud is sending fraudulent e-mails that seem to come from legitimate sources,such as a bank or university.

Accepted Answer

A) True 
 B)False

Question 4

In the context of intentional computer and network threats,describe how blended threats work.

Accepted Answer

The answer of In the context of intentional computer and...

Question 5

Application-filtering firewalls are less expensive than packet-filtering firewalls.

Accepted Answer

A) True 
 B)False

Question 6

Which of the following is a biometric security measure?

Accepted Answer

A) Terminal resource security 
B) A corner bolt 
C) A callback modem 
D) Signature analysis

Question 7

Discuss the guidelines for improving a firewall's capabilities.

Accepted Answer

The answer of Discuss the guidelines for improving a firewall's...

Question 8

In the context of biometric security measures,briefly describe some biometric devices and measures.

Accepted Answer

The answer of In the context of biometric security measures,briefly...

Question 9

_____ is used to encrypt the data sent through a virtual private network (VPN).

Accepted Answer

A) User Datagram Protocol 
B) Transmission Control Protocol 
C) Transport Layer Security 
D) Internet Protocol Security

Question 10

In the context of intentional security threats,_____ can erase data and wreak havoc on computers and networks but do not replicate themselves.

Accepted Answer

A) Trojan programs 
B) worms 
C) viruses 
D) McCumber cubes

Question 11

Describe the three levels of security in a comprehensive security system.

Accepted Answer

The answer of Describe the three levels of security in...

Question 12

A level 3 security system focuses on protecting the _____ against intrusion,denial-of-service attacks,and unauthorized access.

Accepted Answer

A) back-end server 
B) corporate network 
C) user's work station 
D) front-end server

Question 13

_____ monitor and record the keys pressed on a keyboard and can be software or hardware devices.

Accepted Answer

A) Keystroke loggers 
B) Key chain planners 
C) Key punchers 
D) Key performers

Question 14

_____ is a computer crime that involves destroying or disrupting computer services.

Accepted Answer

A) Keystroke logging 
B) Dumpster diving 
C) Bombing 
D) Sabotage

Question 15

_____ uses a public key known to everyone and a private key known only to the recipient.

Accepted Answer

A) Symmetric encryption 
B) Asymmetric encryption 
C) Remote key encryption 
D) Secret key encryption

Question 16

_____ is a form of spyware that collects information about a user (without the user's consent)to determine which commercials to display in the user's Web browser.

Accepted Answer

A) Firmware 
B) Silverware 
C) Freeware 
D) Adware

Question 17

_____ is a commonly used encryption protocol that manages transmission security on the Internet.

Accepted Answer

A) Application Layer 
B) Secure Sockets Layer 
C) Transmission Control Protocol 
D) User Datagram Protocol

Question 18

Which statement is true of asymmetric encryption?

Accepted Answer

A) It uses the same key to encrypt and decrypt a message. 
B) It requires a large amount of processing power. 
C) It can easily share a key over the Internet. 
D) It needs the shared key to be a secret between the sender and the receiver.

Question 19

Which statement best describes spyware?

Accepted Answer

A) It is software that secretly gathers information about users while they browse the Web. 
B) It is an attack that floods a server with service requests to prevent legitimate users' access to the system. 
C) It is encryption security that manages transmission security on the Internet. 
D) It is a programming routine built into a system by its designer to bypass system security and sneak back into the system later to access programs or files.

Question 20

In the context of access controls,briefly explain the guidelines that need to be followed to increase the effectiveness of passwords.

Accepted Answer

The answer of In the context of access controls,briefly explain...

Exam 5: Protecting Information Resources