Quiz
final multiple choice priority
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (90)
1Which of the following is a useful feature in Avast! Antivirus not found in most other antivirus solutions?
- AIt starts with a tutorial for new users.
- BIts main screen has a security rating for your system
- CIt uses heuristic scanning.
- DIt does a pre-installation scan.
2Which antivirus software includes a virus infection map?
- AMcAfee
- BNorton
- CAvast!
- DPC-cillin
3Which is a worm that infects with a variant of the Rbot via various Microsoft messenger services?
- ABropia
- BZafi
- CSanty
- DMabutu
4Which antivirus software provides Private Data Protection and Home Network Control components for home users?
- APC-cillin
- BAvast!
- CPanda
- DNorton
5In the event a virus is isolated on an infected machine, which would likely NOT be a necessary step to remove the threat?
- AReformat the machine and restore from backup.
- BRun an antivirus program.
- CFind and follow virus removal instructions on the Internet.
- DIsolate the infected machine(s).
6What additional malicious activity did the Mabutu virus attempt?
- AIt sent out information about the infected computer.
- BIt tried to overwrite parts of virus scanners.
- CIt deleted the registry.
- DIt attempted to overwrite key system files.
7Which of the following is the primary reason that Microsoft Outlook is so often a target for virus attacks?
- AIt is easy to write programs that access Outlook’s inner mechanisms.
- BOutlook copies virus files faster
- COutlook is more common than other e-mail systems.
- DMany hackers dislike Microsoft
8Which antivirus software provides home and commercial versions which utilize known virus signatures and heuristics methods to identify new worms?
- ANorton
- BAvast!
- CPC-cillin
- DPanda
9Which of the following is a useful feature in Norton AntiVirus not found in most other antivirus solutions?
- AIt does a pre-installation scan.
- BIt uses heuristic scanning.
- CIt starts with a tutorial for new users
- DIts main screen has a security rating for your system.
10What is different about the Bropia infection?
- AIt carries two worms rather than one.
- BIt uses Perl script to attack a PHP vulnerability.
- CIt uses the Google search engine to find bulletin board systems to attack.
- DIt utilizes a holiday greeting card to encourage users to open it.
11In the context of viruses, what is a .dat file?
- AA file with virus definitions
- BA file with corrupt data
- CA file containing system information
- DA file that is infected
12What was the most dangerous aspect of the Zafi.d?
- AIt tried to overwrite parts of virus scanners.
- BIt sent out information about the infected computer.
- CIt deleted the registry.
- DIt attempted to overwrite key system files
13How does the Santy worm attack?
- AIt uses Perl script to attack a vulnerability in certain PHP bulletin board applications.
- BIt is transmitted as a holiday greeting card to encourage users to open it.
- CIt uses Microsoft messaging applications to attack machines.
- DIt uses two worms rather than one to increase the infection.
14Which remote administration tool only operates on port 20034?
- ANetBus
- BSpybot
- CBack Orifice
- DPortal of Doom
15Which of the following are the two most common things Trojan horse programs do?
- ALaunch DDoS attacks and open back doors
- BInstall spyware and launch Ping of Death attacks
- CHijack the home page and delete registry keys
- DDelete registry keys and alter system files
16What is RedSheriff?
- ASpyware that gathers information about you when you visit a web site
- BAdware that is downloaded automatically when you visit certain Web sites.
- CAdware that is often attached to free programs found on the Internet.
- DSpyware that gets banking information from your hard drive
17Which is probably the most frequent action of Trojan horse attacks?
- AInstalling back doors and executing DoS attacks.
- BSearching for personal information.
- CInstalling spyware and malware.
- DErasing files on a computer.
18Which of the following most accurately explains why minimum necessary privileges for a user help protect against Trojan horses?
- AIf the user cannot install programs, it is less likely that he will install a Trojan horse.
- BIf a user cannot remove programs, then he cannot remove anti-spyware and antivirus software accidentally.
- CIf the user cannot install programs, it is completely impossible that he will install a Trojan horse.
- DIf the user cannot remove programs, he cannot alter the security settings you have put on his machine.
19Which of the following is an advantage of Spy Sweeper over Spyware Doctor?
- ASpy Sweeper has more shield options than Spyware Doctor.
- BSpy Sweeper is simply more effective than Spyware Doctor.
- CSpy Sweeper is less expensive than Spyware Doctor.
- DOnly Spy Sweeper catches adware as well as spyware.
20Which is spyware loaded from a Web page via Java and purported to be a simple marketing tool?
- ARedSheriff
- BWebroot
- CSpybot
- DSpySweeper
21What was the worst aspect of the Internet Explorer Trojan horse of 2003?
- AThe path for it had security flaws.
- BIt deleted system files.
- CIt corrupted the registry.
- DThere was no patch for it.
22What is Gator?
- AAdware that is often attached to free programs found on the Internet.
- BSpyware that gathers information about you when you visit a web site
- CAdware that is downloaded automatically when you visit certain Web sites.
- DSpyware that gets banking information from your hard drive
23Which Trojan horse is a small, self-installing remote administration system that permits a user to control the infected system across a TCP/IP connection?
- ABack Orifice
- BSpybot
- CNetBus
- DDropper
24What effect did the util-linux Trojan horse of 1999 have?
- AIt sent out login information of users logging in
- BIt used IRC to open a back door to the machine
- CIt opened up port 1294 for a hacker to use
- DIt deleted or corrupted the registry
25Which adware product is involved in suing anti-spyware companies?
- AGator
- BSpySweeper
- CSpybot
- DRedSheriff
26What does adware do?
- AIt creates popup advertising directly on the user’s machine.
- BIt prevents users from blocking online popups while browsing the Internet.
- CIt monitors user’s activities to provide targeted advertising while surfing the Internet.
- DIt downloads popup advertising within the Web browser.
27Which is one of the most famous Trojan horses?
- ABack Orifice
- BDropper
- CNetBus
- DUtil-Linux
28Which of the following is an advantage of Spyware Doctor over Spy Sweeper?
- ASpy Sweeper is less expensive than Spyware Doctor.
- BSpy Sweeper is simply more effective than Spyware Doctor.
- COnly Spy Sweeper catches adware as well as spyware.
- DSpy Sweeper has more shield options than Spyware Doctor.
29Manually removing spyware usually requires all but which of the following actions?
- ARemoving keys from the registry
- BReinstalling Windows
- CReinstalling antivirus software
- DFormatting the hard drive
30NetBus, Back Orifice and most similar Trojan horses are removed from an infected computer system by:
- Aediting the registry.
- Bscanning the system with anti-spyware software.
- Cinstalling a personal firewall.
- Dscanning the system with an antivirus scanner.
31What does Back Orifice do to a system?
- AProvides a remote user complete administrative access to the machine
- BDeletes or corrupts Microsoft Office applications
- CLaunches a DDoS at Microsoft sites
- DInstalls a virus on the infected system
32What did the util-linux Trojan horse do in 1999?
- AIt captured log on information from infected computers to send to its creator.
- BIt prevented infected computers from accessing the Internet.
- CIt deleted essential operating system files from network computers.
- DIt gained access to infected computers by deleting log on restrictions.
33Which of the following is the most insidious aspect of Back Orifice?
- AIt does not show up in the talk list
- BIt is small
- CIt spreads via email
- DIt appears to be a legitimate program
34Which is true about system administration policies regarding leaving employees?
- AWorkstation drives should be examined for evidence of any inappropriate activities.
- BEmployees should be allowed access to their work areas for a few days to retrieve personal belongings.
- CAll logon accounts must be deleted.
- DInternet access accounts and e-mail accounts must be deleted immediately.
35An organizational policy requiring that all buffers have error handling to prevent buffer overruns is an example of:
- Aa developmental policy.
- Ba user policy.
- Ca security policy.
- Dan administrative policy.
36Which of the following does not demonstrate the need for policies?
- AEnd users are generally not particularly bright and must be told everything.
- BThe most secure password is not at all secure if posted on a note by the computer.
- CAntivirus software cannot prevent a user from downloading infected files.
- DTechnological security measures are dependent upon the employees’ implementation.
37Which is NOT a criteria by which an employee should determine an e-mail attachment can be opened?
- AIt does not contain malicious programming.
- BIf it was not expected, it comes from a known source.
- CIt appears to be a legitimate business document.
- DIt was expected, such as a requested document.
38After dealing on a technical level with any security breach, what is the lst thing to be done for any security breach?
- AStudy the breach to learn how to prevent a re-occurrence.
- BNotify management.
- CQuarantine infected machines.
- DLog the incident.
39Which of the following is the best reason users should be prohibited from installing software?
- AIf a user’s account does not have privileges to install, then it is likely that a Trojan horse will not be inadvertently installed under their account.
- BThey may install software that disables existing security programs on your machine.
- CThey may not install it correctly, which could cause security problems for the workstation.
- DSoftware installation is often complex and should be done by professionals.
40What should an employee do if she believes her password has been revealed to another party?
- ANotify the IT department
- BIf it is a trusted employee or friend, just ignore it.
- CChange her password immediately.
- DIgnore it.
41Which is true about user security policies?
- APolicies must be clear and very specific.
- BThere must be penalties for every infraction.
- CEmployees must sign a statement of acknowledgement that they understand them for policies to be effective.
- DSecurity policies can prevent misuse of computer systems.
42Which of the following is not a significant security risk posed by instant messaging?
- AAn instant messaging program could actually be a Trojan horse
- BEmployees might send out confidential information
- CA virus or worm might infect the workstation via instant messaging
- DEmployees may send harassing messages
43Which is NOT an example of a good password policy?
- APasswords should not be shared with others unless IT is not available to provide one in a reasonable time.
- BPossible compromise of a password should be immediately reported to the IT department.
- CPasswords should be changed regularly.
- DIf passwords are written down, they should be kept secure.
44What is the minimum level of security, using the 1-10 scale, that any organizational network should have?
- A5
- B7
- C1
- D3
45Which automated patching system will actually monitor the network for “rogue” devices not using the automated patching system?
- AePolicy Orchestrator
- BPatchLink
- CZen Works
- DHFNNetChkPro
46Which is perhaps the most important reason to scan a network with NetStat or NetStat Live?
- ATo determine if a hacker is attempting to access the network.
- BTo track intruders as they access network resources.
- CTo identify the source and frequency of network intrusions.
- DTo identify normal network traffic and traffic patterns as a baseline.
47When should a security audit report be filed and maintained?
- AEvery time a security audit is performed.
- BOn a quarterly basis.
- CWhenever an audit identifies a problem.
- DOn a monthly basis.
48What is the best security threat score a system can achieve with the author’s system?
- A-8
- B10
- C1
- D-30
49What is the worst security threat score a system can achieve with the author’s system?
- A19
- B30
- C-30
- D0
50What must one consider in evaluating the value of the information on a system?
- AThe impact of such data being made public.
- BThe threats the system must withstand.
- CThe type of information stored on the system.
- DThe probability of such data being made public.
51What is the greatest threat to most networks?
- AVirus infection
- BHackers
- CDenial of service attack
- DSpyware
52What does the author consider the absolute minimum patching frequency for any organization?
- AQuarterly
- BMonthly
- CWeekly
- DBi-weekly
53Which of the following scanners provides information about the Windows Registry?
- ACerberus
- BNetCop
- CSATAN
- DSAINT
54Which is true about written policies regarding patching systems?
- AAudits should be performed to confirm that policies are actually being followed.
- BPatching should be done on a daily basis.
- CEstablishing written policies can ensure that patches are kept up-to-date.
- DAutomated systems have not proven efficient in maintaining patches.
55What is the best device, method, or technique to help you be aware of attacks in progress?
- AFirewall logs
- BIDS
- CWhat is the best device, method, or technique to help you be aware of attacks in progress?
- DServer logs
- ENAT
56VPNs should be used for what type of communications?
- AAll external connections to your network
- BAll internal communications
- CAll internal communications that might transmit sensitive data
- DAll external connections that might transmit sensitive data
57Which is a scanner that can provide reports on registry entries, shared drives, services running, and operating system flaws?
- ACerberus
- BNetStat
- CActive Ports
- DSATAN
58What level of protection is available in IBM OS/400, Windows XP, and Novell Netware?
- AC2 - Controlled Access Protection
- BC1 - Discretionary Security Protection
- CD - Minimal Protection
- DB1 - Labeled Security Protection
59What Canadian standard was used as one basis for the Common Criteria?
- ACTCPEC
- BOrange Book
- CCanSec
- DITSEC
60What is the purpose of the concept of “separation of duties” as used in some security models?
- ATo prevent authorized users from making improper modifications to data.
- BTo allow system administrators to have powers that regular users do not.
- CTo permit different user groups to have different levels of file access.
- DTo allow multiple users to access the same file at the same to perform different file updates.
61Operating systems such as HP-UX BLS, Cray Research Trusted Unicos 8.0, and Digital SEVMS all are within which security division?
- AB - Mandatory Protection
- BC - Discretionary Protection
- CA - Verified Protection
- DD - Minimal Protection
62If you wanted to study methods for verification of trusted systems, which book in the Rainbow series should you consult?
- APurple Book
- BRed Book
- CBlue Book
- DOrange Book
63What does the concept of “write up” mean?
- ASending data to an object at a higher security level
- BLogging transactions
- CWriting files to a secure location
- DDocumenting security flaws
64Which was NOT part of the origins of the Common Criteria?
- ASANS International Guidelines for Computer Security
- BCTCPEC (Canadian Trusted Computer Product Evaluation Criteria
- CITSEC (Information Technology Security Evaluation Criteria
- DThe Orange Book
65What division designation is given to a system with a classification so low it is not rated?
- AD - Minimal Protection
- BA - Unrated
- CD - Unrated
- DN - Not Rated
66The Orange Book is primarily used for what purpose?
- AEvaluating security of operating systems
- BAssessing the security of firewalls
- CEvaluating programs for security levels
- DEvaluating overall security of networks
67Which of the following models focuses on any transaction that changes the system’s state?
- ABell-LaPadula
- BBiba Integrity
- CITSEC
- DClark-Wilson
68Clark-Wilson
- AWindows 2000
- BNetworks with appropriate security
- CHoneywell Multics
- DMost firewalls
69To what does the term trusted computing base refer?
- AA completely unified structure of protection mechanisms within a computer system
- BA system of numerous domains participating in two-way trust arrangements
- CA server that maintains secure access
- DA base station facility for secure wireless computing
70Which of the following subject-object models introduced the element of programs?
- AClark-Wilson
- BBell-LaPadula
- CBiba Integrity
- DChinese Wall
71What is the common name given to one of a series of color-coded books that outlines criteria for rating various operating systems?
- AOrange Book
- BRed Book
- CBlue Book
- DBlack Book
72Who publishes a series of color-coded books on information security?
- ADepartment of Defense
- BSANS Institute
- CMicrosoft
- DTrusted Computer Systems
73To what does the “Discretionary Protection” category refer?
- ATCBs with some file and device protection
- BWindows 2000 and Windows XP systems
- CTCBs with secure login systems
- DAuditing systems
74What is the purpose of the Orange Book statement “All authorizations to the information contained within a storage object shall be revoked prior to initial assignment, allocation, or reallocation…” as used within level C?
- AIt prevents a user with lower security access from logging on after someone else and accessing materials for which they lack access rights.
- BIt permits a user with lower security access to log on after someone else and access materials for which they lack access rights.
- CIt permits security access to be revoked or stopped whenever the system identifies inappropriate attempts to access materials for which they lack access rights.
- DIt permits remote access limits to be implemented as needed.
75Mandatory access over all objects and devices is required at what level of security rating?
- AB1
- BA2
- CB2
- DC2
76Which book in the Rainbow series would you consult to look up a particular security term?
- AAqua Book
- BRed Book
- COrange Book
- DPink Book
77Which is a security model using the concepts of subjects, objects, and programs?
- AClark-Wilson Model
- BState Machine Model
- CBell-LaPadula Model
- DBiba Integrity Model
78Which is a security model originally designed in anticipation of United States military applications?
- ABell-LaPadula Model
- BBiba Integrity Model
- CState Machine Model
- DChinese Wall Model
79Which is LEAST likely to provide access to sensitive data to unauthorized people?
- AAdware
- BKey loggers
- CPacket sniffers
- DSpyware
80Which of the following best defines a packet sniffer?
- AA program that intercepts packets and copies their contents
- BA utility that finds packets of a specific protocol
- CA program that provides statistical analysis of packet traffic
- DA product that scans the Internet seeking out packets
81Which of the following is the most likely way in which cyber terrorism could lead to loss of life?
- ABy disrupting safeguards at a power or chemical plant
- BBy causing a missile launch
- CBy electrical discharge through a computer keyboard
- DBy causing a plane to crash
82Which is likely to be a more threatening type of computer attack?
- AA general and unfocused attack with no specific target
- BA focused attack against specific targets
- CAn attack against a low-security logistical military system
- DAn attack against a highly secure system such as the CIA, NSA, or DOD
83Without compromising highly secure systems, which of the following is not a likely way for a terrorist to disrupt military operations using hacking?
- ACausing (or stopping) the launch of a missile
- BGleaning information about troop morale from unsecured communications
- CHacking logistical systems and disrupting supplies
- DMonitoring information to derive information about troop and supply movement and locations
84Which of the following best defines espionage?
- AAny acquisition of any data via illicit means
- BThe use of spied to acquire military information
- CThe use of any technique to acquire any data of military or political value
- DThe use of any technique to acquire military information
85Which is NOT a way in which a cyber attack is likely to cause economic loss to a company?
- AMisdirecting military services
- BTheft of financial records
- CDestruction of records
- DVirus attacks
86If a group were using the Internet in information warfare, which of the following would be the least likely use?
- ATo directly recruit new members
- BTo spread disinformation about opponents
- CTo spread propaganda
- DTo plant slanted news stories
87Which is a multi-platform packet sniffer?
- AEthereal
- BCommView
- CEtherDetect
- DSafeHouse
88Which permits a user to read sensitive data without ever having physical access to the target system?
- APacket sniffers
- BSpyware
- CKey loggers
- DCookies
89What does the author say is the only reason that there have not been more damaging and more frequent terrorist attacks against computer systems?
- ATerrorist groups do not have the computer skills required.
- BExtensive measures to secure systems make it difficult to succeed.
- CLack of desire among terrorists to attack computer systems.
- DVictims simply are not reporting all the attacks.
90Breaking into computer systems for purposes that the perpetrator feels are ethically valid is called:
- AHacktivism
- BCracking
- CTerrorism
- DHacking
Information
- Description
- Information Technology Quiz on final multiple choice priority, created by Mary Sunseri on 02/05/2018.
- Author
- Mary Sunseri
- Language
- English
- Views
- 15
- Tags
- Rating
- No ratings yet Rate this quiz