Quiz
nsf_01
Fragen in diesem Quiz (30)
1The single most expensive malicious attack was the 2000 __, which cost an estimated $8.7 billion.
- Aa. Love Bug
- Bb. Nimda
- Cc. Slammer
- Dd. Code Red
2The __ Act requires banks and financial institutions to alert customers of their policies and practices in disclosing customer information.
- Aa. USA Patriot
- Bb. Gramm-Leach-Bliley
- Cc. California Database Security Breach
- Dd. Sarbanes-Oxley
3Under the __, health care enterprises must guard protected health information and implement policies and procedures to safeguard it, whether it be in paper or electronic format.
- Aa. HLPDA
- Bb. USHIPA
- Cc. HIPAA
- Dd. HCPA
4What is another name for unsolicited e-mail messages?
- Aa. trash
- Bb. scam
- Cc. spawn
- Dd. spam
5__ ensures that information is correct and that no unauthorized person or malicious software has altered that data
- Aa. Identity
- Bb. Confidentiality
- Cc. Integrity
- Dd. Availability
6__ ensures that the individual is who they claim to be (the authentic or genuine person) and not an imposter.
- Aa. Encryption
- Bb. Authentication
- Cc. Accounting
- Dd. Authorization
7A study by Foote Partners showed that security certifications earn employees ____ percent more pay than their uncertified counterparts.
- Aa. 10 to 14
- Bb. 14 to 16
- Cc. 12 to 15
- Dd. 13 to 14
8In information security, an example of a threat agent can be ____.
- Aa. a force of nature such as a tornado that could destroy computer equipment
- Bb. a virus that attacks a computer network
- Cc. Both a and d
- Dd. an unsecured computer network
9Weakness in software can be more quickly uncovered and exploited with new software tools and techniques.
- ARichtig
- BFalsch
10The demand for IT professionals who know how to secure networks and computers is at an all-time low.
- ARichtig
- BFalsch
11Which of the following is NOT a characteristic of Advanced Persistent Threat (APT)?
- Aa. can span several years
- Bb. targets sensitive propriety information
- Cc. uses advanced tools and techniques
- Dd. is only used by hactivists against foreign enemies
12Which of the following was used to describe attackers who would break into a computer system without the owner's permission and publicly disclose the vulnerability?
- Aa. white hat hackers
- Bb. black hat hackers
- Cc. blue hat hackers
- Dd. gray hat hackers
13Which of the following is NOT a reason why it is difficult to defend against today's attackers?
- Aa. increased speed of attacks
- Bb. simplicity of attack tools
- Cc. greater sophistication of defense tools
- Dd. delays in security updating
14Why can brokers command such a high price for what they sell?
- Aa. Brokers are licensed professionals.
- Bb. The attack targets are always wealthy corporations.
- Cc. The vulnerability was previously unknown and is unlikely to be patched quickly.
- Dd. Brokers work in teams and all the members must be compensated.
15Which phrase describes the term "security" in a general sense.
- Aa. protection from only direct actions
- Bb. using reverse attack vectors (RAV) for protection
- Cc. only available on hardened computers and systems
- Dd. the necessary steps to protect a person or property from harm
16____ ensures that only authorized parties can view the information.
- Aa. Confidentiality
- Bb. Availability
- Cc. Authorization
- Dd. Integrity
17Each of the following is a successive layer in which information security is achieved EXCEPT ____.
- Aa. products
- Bb. purposes
- Cc. procedures
- Dd. people
18What is a person or element that has the power to carry out a threat.
- Aa. threat agent
- Bb. exploiter
- Cc. risk agent
- Dd. vulnerability
19____ ensures that individuals are why they claim to be.
- Aa. Demonstration
- Bb. Accounting
- Cc. Authentication
- Dd. Certification
20What is the difference between a hactivist and a cyberterrorist?
- Aa. A hactivist is motivated by ideology while a cyberterrorist is not.
- Bb. Cyberterrorists always work in groups while hactivists work alone.
- Cc. The aim of a hactivist is not to incite panic like cyberterrorists.
- Dd. Cyberterrorists are better funded than hactivists.
21Each of the following is a goal of information security EXCEPT ____.
- Aa. avoid legal consequences
- Bb. foil cyberterrorism
- Cc. prevent data theft
- Dd. limit access control
22Which act requires enterprises to guard protected health information and implement policies and procedures to safeguard it?
- Aa. Hospital Protection and Insurance Association Agreement (HPIAA)
- Bb. Sarbanes-Oxley (Sarbox)
- Cc. Gramm-Leach-Bliley Act (GLBA)
- Dd. Health Insurance Portability and Accountability Act (HIPAA)
23Why do cyberterrorists target power plants, air traffic control centers, and water systems?
- Aa. These targets have notoriously weak security and are easy to penetrate.
- Bb. They can cause significant disruption by destroying only a few targets.
- Cc. These targets are government-regulated and any successful attack would be considered a major victory.
- Dd. The targets are privately owned and cannot afford high levels of security.
24What is the first step in the Cyber Kill Chain?
- Aa. weaponization
- Bb. exploitation
- Cc. actions on objectives
- Dd. reconnaissance
25An organization that purchased security products from different vendors is demonstrating which security principle?
- Aa. obscurity
- Bb. diversity
- Cc. limiting
- Dd. layering
26Each of the following can be classified an "insider" EXCEPT ____.
- Aa. business partners
- Bb. contractors
- Cc. stockholders
- Dd. employees
27What are attackers called who belong to a network of identity thieves and financial fraudsters?
- Aa. cybercriminals
- Bb. script kiddies
- Cc. hackers
- Dd. brokers
28What is an objective of state-sponsored attackers?
- Aa. to right a perceived wrong
- Bb. to spy on citizens
- Cc. to sell vulnerabilities to the highest bidder
- Dd. fortune instead of fame
29An example of ____ is not reveling they type of computer, operating system, software, and network connection a computer uses.
- Aa. layering
- Bb. diversity
- Cc. obscurity
- Dd. limiting
30The ____ is primarily responsible for accessing, managing, and implementing security.
- Aa. security administrator
- Bb. security manager
- Cc. security technician
- Dd. chief information security officer (CISO)
Informationen
- Beschreibung
- intro
- Autor
- 865 538
- Sprache
- English
- Aufrufe
- 72
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz