Quiz
Chapter 11 Quiz
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (33)
1Which of the following does not demonstrate the need for policies?
- AThe most secure password is not at all secure if posted on a note by the computer
- BAntivirus software cannot prevent a user from downloading infected files.
- CTechnological security measures are dependent upon the employees’ implementation.
- DEnd users are generally not particularly bright and must be told everything.
2What should an employee do if she believes her password has been revealed to another party?
- AIf it is a trusted employee or friend, just ignore it.
- BNotify the IT department
- CChange her password immediately
- DIgnore it.
3After dealing on a technical level with any security breach, what is the lst thing to be done for any security breach?
- AStudy the breach to learn how to prevent a re-occurrence
- BNotify management.
- CQuarantine infected machines.
- DLog the incident
4Which of the following is the appropriate sequence for a change request?
- ABusiness unit manager requests change. > IT unit verifies request. > Request is scheduled with rollback plan. > Request is implemented.
- BBusiness unit manager requests change. > IT unit verifies request. > Security unit verifies request. > Request is implemented.
- CBusiness unit manager requests change. > IT unit verifies request. > Request is implemented.
- DBusiness unit manager requests change. > IT unit verifies request. > Security unit verifies request. > Request is scheduled with rollback plan. > Request is implemented.
5Which of the following is the appropriate sequence of events for a departing employee?
- AIT is notified of the departure. > All logon accounts are shut down. > All access (Physical and Electronic) is disabled.
- BIT is notified of the departure. > All logon accounts are shut down. > All access (Physical and Electronic) is disabled. > The employee’s workstation is searched/scanned.
- CIT is notified of the departure. > All electronic access is shut down. > All physical access is shut down.
- DIT is notified of the departure. > All physical access is shut down. > All electronic access is shut down.
6Which of the following is a list of items that should be implemented in all secure code?
- AAll code checked for back doors or Trojans, all buffers have error handling to prevent buffer over runs, and all communication activity thoroughly documented.
- BAll code check for back doors or Trojans, all communications adheres to organizational guidelines, and all communication activity thoroughly documented.
- CAll code checked for back doors or Trojans, all buffers have error handling to prevent buffer over runs, all communications adheres to organizational guidelines, and all communication activity thoroughly documented.
- DAll code checked for back doors or Trojans, all buffers have error handling to prevent buffer over runs, and all communications adheres to organizational guidelines.
7Which is NOT an issue that should be covered by administrative policies?
- ASoftware installation and removal
- BE-mail attachments
- CDesktop configuration
- DAll should be covered by administrative policies.
8Which of the following is not a significant security risk posed by instant messaging?
- AAn instant messaging program could actually be a Trojan horse
- BEmployees might send out confidential information
- CA virus or worm might infect the workstation via instant messaging.
- DEmployees may send harassing messages
9Which of the following is not a significant security risk posed by instant messaging?
- AAn instant messaging program could actually be a Trojan horse
- BEmployees might send out confidential information
- CA virus or worm might infect the workstation via instant messaging.
- DEmployees may send harassing messages
10Which is NOT a criteria by which an employee should determine an e-mail attachment can be opened?
- AIt does not contain malicious programming.
- BIf it was not expected, it comes from a known source.
- CIt appears to be a legitimate business document.
- DIt was expected, such as a requested document.
11Which of the following is not an example of a user password policy?
- AUsers may not keep copies of passwords in their office
- BUsers may share passwords only with their assistants
- CPasswords may not be shared with any employee.
- DPasswords must be eight characters long
12Which of the following is the best reason users should be prohibited from installing software?
- AThey may install software that disables existing security programs on your machine.
- BThey may not install it correctly, which could cause security problems for the workstation.
- CSoftware installation is often complex and should be done by professionals.
- DIf a user’s account does not have privileges to install, then it is likely that a Trojan horse will not be inadvertently installed under their account.
13System administration policies should be in place for which of the following?
- AAdding and removing users.
- BAll of the above.
- CChanging any systems.
- DDealing with security issues.
14Which is NOT true about organizational use of instant messaging?
- AIt may be acceptable for business purposes.
- BIt is safe for distribution of private business information.
- CIt should not be used for personal communication.
- DIt poses a significant security risk.
15Which is true about user security policies?
- AThere must be penalties for every infraction.
- BPolicies must be clear and very specific.
- CEmployees must sign a statement of acknowledgement that they understand them for policies to be effective
- DSecurity policies can prevent misuse of computer systems.
16What is the most important characteristic all user policies must have in order to be effective?
- AThey must have consequences
- BThey must be notarized
- CThey must be reviewed by an attorney
- DThey must be properly filed and maintained.
17Which is an e-mail attachment that would be acceptable to open?
- AIt contains active code.
- BIt comes from an unknown source.
- CIt is an animation or movie.
- DIt contains an expected spreadsheet.
18Which of the following should not be recommended as acceptable email attachments?
- AAttachments the user expected
- BPlain text attachments from known sources
- CFlash animations
- DExcel spreadsheets from a colleague
19What should NOT be considered in creating a good password?
- ALength should be at least six to eight characters to limit brute force attacks.
- BPasswords should be easy to remember such as pets’ or children’s names to limit the need to write them down.
- CSpecial characters and numbers must be included to limit use of dictionaries and brute force.
- DPolicies should be in place to require minimum length and history of passwords.
20Which is true about system administration policies regarding leaving employees?
- AEmployees should be allowed access to their work areas for a few days to retrieve personal belongings
- BWorkstation drives should be examined for evidence of any inappropriate activities.
- CAll logon accounts must be deleted.
- DInternet access accounts and e-mail accounts must be deleted immediately.
21Which is true about access control policies?
- AUsers should be provided access to all resources they deem necessary for their work.
- BUsers’ needs should be assessed based on the group to which they belong, and they should be given the minimum access needed to perform their job duties.
- CAll resources should be locked down as much as possible to prevent security problems.
- DEach user’s needs should be assessed and they should be given the minimum access needed to perform their job duties.
22Which of the following is the appropriate sequence of events for a new employee?
- AIT is notified of the new employee and the requested resources. > Employee is granted access to these resources. > Employee is briefed on security/acceptable use policies. >Employee signs acknowledgement of receipt of company security rules.
- BIT is notified of the new employee and assigns default rights. > Employee signs acknowledgement of receipt of company security rules.
- CIT is notified of the new employee and the requested rights. > Employee is given access to these resources. > Employee signs acknowledgement of receipt of company security rules.
- DIT is notified of the new employee and assigns default rights. > Employee is briefed on security/acceptable use. > Employee signs acknowledgement of receipt of company security rules.
23Which is NOT an example of a good password policy?
- APossible compromise of a password should be immediately reported to the IT department.
- BPasswords should be changed regularly.
- CIf passwords are written down, they should be kept secure.
- DPasswords should not be shared with others unless IT is not available to provide one in a reasonable time.
24An organizational policy requiring that all buffers have error handling to prevent buffer overruns is an example of:
- Aa user policy.
- Ba security policy.
- Ca developmental policy.
- Dan administrative policy.
25Why does the author state that technology alone is not a panacea for network security problems?
- AAdvances in technology occur too rapidly for security experts to keep up with them.
- BThe author actually does say that technology solves network security problems.
- CTechnology cannot be effective if people do not follow appropriate procedures.
- DImprovements in technology actually create the most security problems.
26What is the primary reason a change control process is necessary?
- AIt verifies that proposed changes will work before they are implemented.
- BIt requires changes to be documented before they are made.
- CIt keeps track of changes so that problems can be documented.
- DIt allows IT security personnel to examine proposed changes for potential security problems before implementation.
27What is the best rule of thumb in access control?
- AStandardize access for all users.
- BStrictly limit access for most users.
- CAllow the least access job requirements allow
- DAllow the most access you can securely give.
28Which of the following is not an area user policies need to cover?
- AWhat to do when the user believes your password has been compromised.
- BA description of Web sites users may or may not visit
- CIf and when to share passwords
- DMinimum length of passwords
29Which is NOT a reason why users should have privileges restricted to prevent them from changing their desktop images?
- AManagement must always control what users see on their desktops.
- BDownloaded background images may contain malicious software.
- CHarassment issues might arise if inappropriate images are used.
- DUser privileges to change desktop images can also permit changes that compromise security.
30Which of the following should not be recommended as acceptable email attachments?
- AExcel spreadsheets from a colleague
- BFlash animations
- CAttachments the user expected
- DPlain text attachments from known sources
31What is the first step after discovering a machine or machines have been infected with a virus? 14
- AScan and clean infected machines
- BNotify appropriate management
- CQuarantine infected machines
- DLog the incident
32Which is NOT true about organizational use of instant messaging?
- AIt poses a significant security risk.
- BIt is safe for distribution of private business information.
- CIt should not be used for personal communication.
- DIt may be acceptable for business purposes.
33Which of the following is a list of items that should be implemented in all secure code?
- AAll code check for back doors or Trojans, all communications adheres to organizational guidelines, and all communication activity thoroughly documented.
- BAll code checked for back doors or Trojans, all buffers have error handling to prevent buffer over runs, and all communications adheres to organizational guidelines.
- CAll code checked for back doors or Trojans, all buffers have error handling to prevent buffer over runs, all communications adheres to organizational guidelines, and all communication activity thoroughly documented.
- DAll code checked for back doors or Trojans, all buffers have error handling to prevent buffer over runs, and all communication activity thoroughly documented.
Informações
- Descrição
- Information Technology Quiz sobre Chapter 11 Quiz, criado por Mary Sunseri em 03-04-2018.
- Autor
- Mary Sunseri
- Idioma
- English
- Visualizações
- 18
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz