Question 1

Challenge questions offered by Web sites to automate password distribution and resets are formidable in protecting the privacy of email accounts.

Accepted Answer

A) True 
 B)False

Question 2

When using a public wireless network, using VPN software is not advisable as it can reveal your communications to any network eavesdroppers.

Accepted Answer

A) True 
 B)False

Question 3

Multiple administrators jointly controlling key systems are an unnecessary burden that adds to the complexity of managing security in an organization.

Accepted Answer

A) True 
 B)False

Question 4

In security circles the phrase "compliance" refers to:

Accepted Answer

A)  legal or professionally binding steps that an organization must take. 
B)  security audit practices used by the tech divisions of Big Four accounting firms. 
C)  a firm's installing software to fulfill government surveillance requirements. 
D)  the U.S. government legislation requiring organizations to share security breaches with law enforcement and industry trade organizations. 
E)  only deploying open source software that is downloaded from approved GitHub locations.

Question 5

Conforming to industry-standard guidelines and frameworks for organizational security ensures continued immunity from attacks on an organization's information.

Accepted Answer

A) True 
 B)False

Question 6

A(n) _____ is someone who uncovers computer weaknesses and reveals them to manufacturers or system owners, without exploiting these vulnerabilities.

Accepted Answer

A)  hacktivist 
B)  data harvester 
C)  corporate spy 
D)  white hat hacker 
E)  ethical cyber criminal

Question 7

What is the key takeaway from the Heartland breach?

Accepted Answer

A)  Even widely-used open source software is vulnerable. 
B)  Compliance does not equal security and firms that have passed multiple compliance audits may still remain vulnerable. 
C)  SSL public-key encrpytion can be hacked. 
D)  GitHub is a horrible place to store widely-used code. 
E)  Firms that fail to employ ISO 27000 will remain vulnerable.

Question 8

Web sites of reputed companies can also be sources of malware.

Accepted Answer

A) True 
 B)False

Question 9

_____________ refers to malware that encrypts a user's files (perhaps threatening to delete them), with demands that a user pay to regain control of their data and/or device.

Accepted Answer

The answer of _____________ refers to malware that encrypts a...

Question 10

Some of the most common guidelines issued by Web sites when designing a secure password include:

Accepted Answer

A)  The password should be at least eight characters long and include at least one number and other nonalphabet character. 
B)  The password should be short and straightforward. 
C)  The password should include names of family members or pets, so as to be easily remembered. 
D)  Choose a hard-to-guess password, then re-use this hardened password across websites. This minimize instances of calling systems professionals for a password reset, hence eliminating an additional potential vulnerability. 
E)  The password should be the same as your name so as to trick the hacker.

Question 11

Two-factor authentication is favored for most security situations since it's considered to be fast and conveient for customres.

Accepted Answer

A) True 
 B)False

Question 12

The term _____ originally referred to a particularly skilled programmer.

Accepted Answer

A)  data harvester 
B)  cracke 
C)  hacker 
D)  black hat 
E)  hacktivist

Question 13

The e-mail password of a senior employee in an organization was compromised by someone observing this user as the employee accessed his account. This is most likely a case of:

Accepted Answer

A)  keylogging. 
B)  shoulder surfing. 
C)  dumpster diving. 
D)  screen capture. 
E)  spyware.

Question 14

Fingerprint readers, retina scanners, voice and face recognition technologies are all part of _____.

Accepted Answer

The answer of Fingerprint readers, retina scanners, voice and face...

Question 15

What are the steps to be taken with respect to firm employees in order to ensure organizational security?

Accepted Answer

The answer of What are the steps to be taken...

Question 16

A system that monitors network use for potential hacking attempts and takes preventative action to block, isolate, or identify attempted infiltration, and raise further alarms to warn security personnel is known as a(n):

Accepted Answer

A)  firewall system. 
B)  whitelist. 
C)  intrusion detection system. 
D)  honeypot system. 
E)  patching system.

Question 17

Which of the following statements holds true for the term spoof?

Accepted Answer

A)  It refers to a con executed using technology, typically targeted at acquiring sensitive information or tricking someone into installing malicious software. 
B)  It refers to e-mail transmissions and packets that have been altered to seem as if they came from another source. 
C)  It refers to scrambling data using a code or formula, known as a cipher, such that it is hidden from those who do not have the unlocking key. 
D)  It refers to a seemingly tempting, but bogus target meant to draw hacking attempts. 
E)  It refers to highly restrictive programs that permit communication only with approved entities and/or in an approved manner.

Question 18

Information security policies would be ineffective without _____ and _____.

Accepted Answer

A)  audit; enforcement 
B)  accountability; flexibility 
C)  compliance; subjectivity 
D)  protocols; the backing of ISO 
E)  rigidity; adaptability

Question 19

Regularly updated software lowers a system's vulnerable attack surface.

Accepted Answer

A) True 
 B)False

Question 20

_____ are scrambled character images used to thwart things like automated account setup or ticket buying.

Accepted Answer

The answer of _____ are scrambled character images used to...

Exam 17: Information Security: Barbarians at the Gateway and Just About Everywhere Else

Challenge questions offered by Web sites to automate password distribution and resets are formidable in protecting the privacy of email accounts.

When using a public wireless network, using VPN software is not advisable as it can reveal your communications to any network eavesdroppers.

Multiple administrators jointly controlling key systems are an unnecessary burden that adds to the complexity of managing security in an organization.

In security circles the phrase "compliance" refers to:

Conforming to industry-standard guidelines and frameworks for organizational security ensures continued immunity from attacks on an organization's information.

A(n) _____ is someone who uncovers computer weaknesses and reveals them to manufacturers or system owners, without exploiting these vulnerabilities.

What is the key takeaway from the Heartland breach?

Web sites of reputed companies can also be sources of malware.

_____________ refers to malware that encrypts a user's files (perhaps threatening to delete them), with demands that a user pay to regain control of their data and/or device.

Some of the most common guidelines issued by Web sites when designing a secure password include:

Two-factor authentication is favored for most security situations since it's considered to be fast and conveient for customres.

The term _____ originally referred to a particularly skilled programmer.

The e-mail password of a senior employee in an organization was compromised by someone observing this user as the employee accessed his account. This is most likely a case of:

Fingerprint readers, retina scanners, voice and face recognition technologies are all part of _____.

What are the steps to be taken with respect to firm employees in order to ensure organizational security?

A system that monitors network use for potential hacking attempts and takes preventative action to block, isolate, or identify attempted infiltration, and raise further alarms to warn security personnel is known as a(n) :

Which of the following statements holds true for the term spoof?

Information security policies would be ineffective without _ and _.

Regularly updated software lowers a system's vulnerable attack surface.

_____ are scrambled character images used to thwart things like automated account setup or ticket buying.