Question 1

Compatibility tests utilize a(n)________,which is a list of authorized users,programs,and data files the users are authorized to access or manipulate.

Accepted Answer

A)  validity test 
B)  biometric matrix 
C)  logical control matrix 
D)  access control matrix

Question 2

Multi-factor authentication

Accepted Answer

A)  involves the use of two or more basic authentication methods. 
B)  is a table specifying which portions of the systems users are permitted to access. 
C)  provides weaker authentication than the use of effective passwords. 
D)  requires the use of more than one effective password.

Question 3

On February 14,2008,students enrolled in an economics course at Swingline College received an email stating that class would be cancelled.The email claimed to be from the professor,but it wasn't.Computer forensic experts determined that the email was sent from a computer in one of the campus labs at 9:14 A.M.They were then able to uniquely identify the computer that was used by means of its network interface card's ________ address.Security cameras revealed the identity of the student responsible for spoofing the class.

Accepted Answer

A)  TCP/IP 
B)  MAC 
C)  DMZ 
D)  IDS

Question 4

Which of the following preventive controls are necessary to provide adequate security for social engineering threats?

Accepted Answer

A)  Controlling remote access 
B)  Encryption 
C)  Host and application hardening 
D)  Awareness training

Question 5

Which of the following is not one of the essential criteria for successfully implementing each of the principles that contribute to systems reliability,as discussed in the Trust Services Framework?

Accepted Answer

A)  Developing and documenting policies 
B)  Effectively communicating policies to all outsiders 
C)  Designing and employing appropriate control procedures to implement policies 
D)  Monitoring the system and taking corrective action to maintain compliance with policies

Question 6

This is used to identify rogue modems (or by hackers to identify targets).

Accepted Answer

A)  War chalking 
B)  War dialing 
C)  War driving 
D)  none of the above

Question 7

The most common input-related vulnerability is

Accepted Answer

A)  buffer overflow attack. 
B)  hardening. 
C)  war dialing. 
D)  encryption.

Question 8

If the time an attacker takes to break through the organization's preventive controls is greater than the sum of the time required to detect the attack and the time required to respond to the attack,then security is

Accepted Answer

A)  effective. 
B)  ineffective. 
C)  overdone. 
D)  undermanaged.

Question 9

Which of the following is not a useful control procedure to control access to system outputs?

Accepted Answer

A)  Allowing visitors to move through the building without supervision 
B)  Coding reports to reflect their importance 
C)  Requiring employees to log out of applications when leaving their desk 
D)  Restricting access to rooms with printers

Question 10

This protocol specifies the structure of packets sent over the internet and the route to get them to the proper destination.

Accepted Answer

A)  Access control list 
B)  Internet protocol 
C)  Packet switching protocol 
D)  Transmission control protocol

Question 11

It was 9:08 A.M.when Jiao Jan,the Network Administrator for Folding Squid Technologies,was informed that the intrusion detection system had identified an ongoing attempt to breach network security.By the time that Jiao had identified and blocked the attack,the hacker had accessed and downloaded several files from the company's server.Using the notation for the time-based model of security,in this case

Accepted Answer

A)  P > D 
B)  D > P 
C)  C > P 
D)  P > C

Question 12

Meaningful Discussions is a social networking site that boasts over a million registered users and a quarterly membership growth rate in the double digits.As a consequence,the size of the information technology department has been growing very rapidly,with many new hires.Each employee is provided with a name badge with a photo and embedded computer chip that is used to gain entry to the facility.This is an example of a(an)

Accepted Answer

A)  authentication control. 
B)  biometric device. 
C)  remote access control. 
D)  authorization control.

Question 13

The process of turning off unnecessary features in the system is known as

Accepted Answer

A)  deep packet inspection. 
B)  hardening. 
C)  intrusion detection. 
D)  war dialing.

Exam 8: Information Systems Controls for System Reliability Part 1: Information Security

Compatibility tests utilize a(n) ________,which is a list of authorized users,programs,and data files the users are authorized to access or manipulate.