Quiz
Ch 1
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (40)
1To date, the single most expensive malicious attack occurred in 2000, which cost an estimated $8.7 billion. What was the name of this attack?
- ASlammer
- BCode Red
- CLove Bug
- DNimda
2Which term is used to describe individuals who want to attack computers yet lack the knowledge of computers and networks needed to do so?
- Acyberterrorist
- Bcybercriminal
- Cscript kiddies
- Dhacker
3What class of attacks use innovative attack tools and once a system is infected it silently extracts data over an extended period?
- AInside Attacks
- BEmbedded Attacks
- CAdvanced Persistent Threat
- DModified Threat
4Which position below is considered an entry-level position for a person who has the necessary technical skills?
- Asecurity administrator
- Bsecurity manager
- CCISO
- Dsecurity technician
5What term is used to describe state-sponsored attackers that are used for launching computer attacks against their foes?
- Anation state threats
- Bstate hackers
- Cnation state actors
- Dcyber military
6Which of the three protections ensures that only authorized parties can view information?
- Aconfidentiality
- Bintegrity
- Csecurity
- Davailability
7What term best describes any premeditated, politically motivated attack against information, computer systems, computer programs, and data which results in violence against noncombatant targets by subnational groups or clandestine agents?
- Ahacking
- Bcybercriminal
- Ccracking
- Dcyberterrorism
8The CompTIA Security+ certification is a vendor-neutral credential
- ATrue
- BFalse
9What type of diversity is being implemented if a company is using multiple security products from different manufacturers?
- Avendor-control security
- Bmanufacturer diversity
- Cvendor diversity
- Dmultiple-product security
10Which of the following is a common security framework? (Choose all that apply.)
- AISO
- BCOBIT
- CASA
- DRFC
11A vulnerability is a flaw or weakness that allows a threat to bypass security.
- ATrue
- BFalse
12Successful attacks are usually not from software that is poorly designed and has architecture/design weaknesses.
- ATrue
- BFalse
13The Sarbanes-Oxley Act restricts electronic and paper data containing personally identifiable financial information.
- ATrue
- BFalse
14Select the term that best describes automated attack software?
- Aopen-source utility
- Bintrusion application
- Copen-source intelligence
- Dinsider software
15What type of theft involves stealing another person's personal information, such as a Social Security number, and then using the information to impersonate the victim, generally for financial gain?
- Asocial scam
- Bcyberterrorism
- Cidentity theft
- Dphishing
16The Security Administrator reports directly to the CIO.
- ATrue
- BFalse
17Which of the following are considered threat actors? (Choose all that apply.)
- Acompetitors
- Bbrokers
- Cindividuals
- Dadministrators
18Under which laws are health care enterprises required to guard protected health information and implement policies and procedures whether it be in paper or electronic format?
- AUSHIPA
- BHIPAA
- CHLPDA
- DHCPA
19Smart phones give the owner of the device the ability to download security updates.
- ATrue
- BFalse
20What process describes using technology as a basis for controlling the access and usage of sensitive data?
- Acontrol diversity
- Bvendor diversity
- Ctechnical controls
- Dadministrative controls
21Which of the following describes various supporting structures for implementing security that provides a resource of how to create a secure IT environment? (Choose all that apply.)
- Areference architectures
- Bindustry-standard frameworks
- Creference frameworks
- Dregulatory frameworks
22To mitigate risk is the attempt to address risk by making the risk less serious
- ATrue
- BFalse
23What term describes a layered security approach that provides the most comprehensive protection?
- Adefense-in-depth
- Bdiverse-defense
- Climiting-defense
- Dcomprehensive-security
24In what kind of attack can attackers make use of millions of computers under their control in an attack against a single server or network?
- Aremote
- Bdistributed
- Ccentered
- Dlocal
25One of the challenges in combating cyberterrorism is that many of the prime targets are not owned and managed by the federal government.
- ATrue
- BFalse
26What information security position reports to the CISO and supervises technicians, administrators, and security staff?
- Asecurity auditor
- Bsecurity manager
- Csecurity administrator
- Dsecurity engineer
27In information security, what can constitute a loss?
- Athe loss of good will or reputation
- Ball of the above
- Ctheft of information
- Da delay in transmitting information that results in a financial penalty
28As security is increased, convenience is often increased.
- ATrue
- BFalse
29Which of the following ensures that data is accessible to authorized users?
- Aidentity
- Bintegrity
- Cconfidentiality
- Davailability
30What term refers to an action that provides an immediate solution to a problem by cutting through the complexity that surrounds it?
- Asecure solution
- Bsilver bullet
- Capproved action
- Dunicorn
31Which term below is frequently used to describe the tasks of securing information that is in a digital format?
- Alogical security
- Bphysical security
- Cinformation security
- Dnetwork security
32In information security, which of the following is an example of a threat actor?
- Aall of the above
- Ba force of nature such as a tornado that could destroy computer equipment
- Ca virus that attacks a computer network
- Da person attempting to break into a secure computer network
33Which law requires banks and financial institutions to alert customers of their policies and practices in disclosing customer information?
- ASarbanes-Oxley
- BCalifornia Database Security Breach
- CUSA Patriot
- DGramm-Leach-Bliley
34Select the information protection item that ensures that information is correct and that no unauthorized person or malicious software has altered that data.
- Aavailability
- Bidentity
- Cintegrity
- Dconfidentiality
35What term is used to describe a group that is strongly motivated by ideology, but is usually not considered to be well-defined and well-organized?
- Ahactivists
- Bhacker
- Cscript kiddies
- Dcyberterrorist
36Those who wrongfully disclose individually identifiable health information can be fined up to what amount per calendar year?
- A$500,000
- B$50,000
- C$1,500,000
- D$250,000
37What level of security access should a computer user have to do their job?
- Apassword protected
- Bauthorized access
- Climiting amount
- Dleast amount
38Which of the following is a valid fundamental security principle? (Choose all that apply.)
- Asimplicity
- Blayering
- Csignature
- Ddiversity
39Brokers steal new product research or a list of current customers to gain a competitive advantage.
- ATrue
- BFalse
40According to the U.S. Bureau of Labor Statistics, what percentage of growth for information security analysts is the available job outlook supposed to reach through 2024?
- A18
- B27
- C10
- D15
Information
- Description
- Ch. 1 midterm practice
- Author
- C Danvers
- Language
- English
- Views
- 248
- Tags
- Rating
- No ratings yet Rate this quiz