Question 1

The hacker was successful in breaching the firewall,the packet filtering router,and the internal firewall,but was quickly detected and unable to get past the workstation personal firewall.This is an example of what principle?

Accepted Answer

A) Layered security 
B) Job rotation 
C) Diversity of defense 
D) Security through obscurity

Question 2

All applications,scripts,and batch files run in the same security context of the user who is logged in at the time.

Accepted Answer

A) True 
 B)False

Question 3

The ability to manage whether a subject can interact with an object is called _______________.

Accepted Answer

The answer of The ability to manage whether a subject...

Question 4

During the day,it takes an employee twice as long to retrieve files from the server that is under attack.The attack has resulted in a degradation of availability.
If the employee is able to get the files,but it takes twice as long,it means that the employee can only get half as many files in a day.

Accepted Answer

A) True 
 B)False

Question 5

Backups,incident response teams,and computer forensics are response technologies.

Accepted Answer

A) True 
 B)False

Question 6

Jane is in the finance department.Although she should not be able to open files or folders from the marketing department,she can and does.This a problem of ___________.

Accepted Answer

A) confidentiality 
B) integrity 
C) availability 
D) authentication 
E) nonrepudiation

Question 7

A newly purchased server with a defect catches fire and all data on the device is lost.A backup was never performed.This is a failure of which element of the operational model of computer security?

Accepted Answer

A) Protection 
B) Prevention 
C) Detection 
D) Response

Question 8

When files are modified by someone who is not authorized to do so,this is problem of confidentiality.

Accepted Answer

A) True 
 B)False

Question 9

The network engineer suggests purchasing two firewalls from different companies so that a vulnerability affecting one type of firewall will not leave the entire network vulnerable.This is an example of which principle?

Accepted Answer

A) Layered defense 
B) Job rotation 
C) Diversity of defense 
D) Security through obscurity

Question 10

Your boss is concerned with information security issues concerning new employees and employees who leave the company and would like your recommendations.Describe what human resources policies should be in place.

Accepted Answer

The answer of Your boss is concerned with information security...

Question 11

During a job interview you are asked to explain in what ways you would secure the company's information if you were hired.Using any three security policies from the chapter,describe how you would secure their information.

Accepted Answer

The answer of During a job interview you are asked...

Question 12

Auditability refers to whether a control can be verified as functioning or not.

Accepted Answer

A) True 
 B)False

Question 13

Describe the Bell-LaPadula and Biba security models and the policies they use to protect information.

Accepted Answer

The answer of Describe the Bell-LaPadula and Biba security models...

Question 14

_______________ is the condition that a control can be verified as functioning.

Accepted Answer

The answer of _______________ is the condition that a control...

Question 15

Three means of establishing auditability: something you know,something you have,or something you are.

Accepted Answer

A) True 
 B)False

Question 16

Network security places the emphasis on controlling access to external resources from internal entities.

Accepted Answer

A) True 
 B)False

Question 17

Ensuring that an individual is who they claim to be before allowing them to access information they are authorized to access is _______________.

Accepted Answer

The answer of Ensuring that an individual is who they...

Question 18

Access controls,firewalls,and encryption are technologies used for prevention.

Accepted Answer

A) True 
 B)False

Question 19

Background checks,drug testing,retirement,and termination are elements found in which type of policy?

Accepted Answer

A) Due diligence 
B) Human resources 
C) Equal opportunity 
D) Privacy

Question 20

___________ places the focus on the security processes and the actual data.

Accepted Answer

A) Computer security 
B) Network security 
C) Information assurance 
D) Communications security

Exam 2: General Security Concepts

The hacker was successful in breaching the firewall,the packet filtering router,and the internal firewall,but was quickly detected and unable to get past the workstation personal firewall.This is an example of what principle?

All applications,scripts,and batch files run in the same security context of the user who is logged in at the time.

The ability to manage whether a subject can interact with an object is called _______________.

During the day,it takes an employee twice as long to retrieve files from the server that is under attack.The attack has resulted in a degradation of availability. If the employee is able to get the files,but it takes twice as long,it means that the employee can only get half as many files in a day.

Backups,incident response teams,and computer forensics are response technologies.

Jane is in the finance department.Although she should not be able to open files or folders from the marketing department,she can and does.This a problem of ___________.

A newly purchased server with a defect catches fire and all data on the device is lost.A backup was never performed.This is a failure of which element of the operational model of computer security?

When files are modified by someone who is not authorized to do so,this is problem of confidentiality.

The network engineer suggests purchasing two firewalls from different companies so that a vulnerability affecting one type of firewall will not leave the entire network vulnerable.This is an example of which principle?

Your boss is concerned with information security issues concerning new employees and employees who leave the company and would like your recommendations.Describe what human resources policies should be in place.

During a job interview you are asked to explain in what ways you would secure the company's information if you were hired.Using any three security policies from the chapter,describe how you would secure their information.

Auditability refers to whether a control can be verified as functioning or not.

Describe the Bell-LaPadula and Biba security models and the policies they use to protect information.

_______________ is the condition that a control can be verified as functioning.

Three means of establishing auditability: something you know,something you have,or something you are.

Network security places the emphasis on controlling access to external resources from internal entities.

Ensuring that an individual is who they claim to be before allowing them to access information they are authorized to access is _______________.

Access controls,firewalls,and encryption are technologies used for prevention.

Background checks,drug testing,retirement,and termination are elements found in which type of policy?

___________ places the focus on the security processes and the actual data.