Question 1

_________ is any danger to which a system may be exposed. A. Exposure B. Information security C. Threat D. Security

Accepted Answer

Threat

Question 2

_________ is the possibility that the system will be harmed by a threat. A. Exposure B. Threat C. Security D. Vulnerability

Accepted Answer

Vulnerability

Question 3

Wireless is a(n) inherently _________ network. A. trusted B. neutral C. untrusted D. useful

Accepted Answer

Untrusted

Question 4

*Which of the following is FALSE? A. It is easier to be a hacker nowadays. B. Mainframes make it easy to communicate freely and seamlessly with everyone. C. Management doesn\'t always support security efforts. D. Thumb drives make it easy to steal huge amounts of sensitive information.

Accepted Answer

Mainframes make it easy to communicate freely and seamlessly with everyone.

Question 5

Cybercriminals _________ A. are violent criminals. B. can be easily arrested, once they are found. C. don\'t make that much money; they do it for fun. D. target known software security weaknesses.

Accepted Answer

Target known software security weaknesses.

Question 6

Which of the following is NOT one of the most dangerous employees to information security? A. Accountants B. HR employees C. Janitors D. MIS employees

Accepted Answer

Accountants

Question 7

The airport\'s self check-in computers are a(n) __________ threat. A. outside B. employee C. hardware D. software

Accepted Answer

Hardware

Question 8

*Weak passwords are a(n) ___________ threat. A. outside B. employee C. hardware D. software

Accepted Answer

Employee

Question 9

*Which of the following is NOT an unintentional threat to information systems? A. Careless monitoring of environmental hazards B. Choosing a weak password C. Having an unlocked desk or filing cabinet after going home D. Viruses

Accepted Answer

Viruses

Question 10

_____________________ is an attack in which the perpetrator uses social skills to trick or manipulate legitimate employees into providing confidential company information such as passwords. A. Dumpster diving B. Shoulder surfing C. Social engineering D. Tailgating

Accepted Answer

Social engineering

Question 11

*Social engineering is a(n) ___________ threat on the part of the employee and a(n) _________ threat on the part of the social engineer. A. deliberate; unintentional B. deliberate; deliberate C. unintentional; deliberate D. unintentional; unintentional

Accepted Answer

Unintentional; deliberate

Question 12

OpenSSL is __________ software. A. Banking B. Encryption C. Hacking D. Free

Accepted Answer

Encryption

Question 13

The Heartbleed bug is an encryption security flaw in the ___________ software package that was an _____________ mistake by the software developer. A. Microsoft; intended B. Microsoft; unintended C. OpenSSL; intended D. OpenSSL; unintended

Accepted Answer

OpenSSL; unintended

Question 14

Google created a code fix for the Heartbleed bug. Which of the following is a TRUE statement? A. Home internet routers should be largely safe from this bug since they don\'t exchange enough sensitive data to be a target. B. Industrial control systems are highly vulnerable since they are updated infrequently. C. Organizations simply have to install the fix. D. Organizations need to install the fix and just create new private key-public key pairs.

Accepted Answer

Industrial control systems are highly vulnerable since they are updated infrequently.

Question 15

___________ is threatening to steal or actually stealing information from a company and then demanding payment to not use or release that information. A. Competitive intelligence B. Espionage C. Information extortion D. Intellectual property

Accepted Answer

Information extortion

Question 16

*Phishing is an example of __________. A. Copyright infringement B. Espionage C. Sabotage D. Software attack

Accepted Answer

Software attack

Question 17

You start browsing your favorite home improvement company\'s website and notice someone has changed all the logos to their main competitor\'s logos. This is an example of ___________. A. Espionage B. Identity theft C. Information extortion D. Sabotage

Accepted Answer

Sabotage

Question 18

__________ is an identity theft technique. A. Dumpster diving B. Espionage C. Sabotage D. Vandalism

Accepted Answer

Dumpster diving

Question 19

Coca-Cola\'s formula is an example of a ___________. A. Copyright B. Patent C. Trade secret D. All of the above

Accepted Answer

Trade secret

Question 20

A ___________ is a remote attack requiring user action. A. back door B. denial-of-service attack C. logic bomb D. phishing attack

Accepted Answer

phishing attack

Question 21

*A ___________ is a remote attack needing no user action. A. back door B. denial-of-service attack C. logic bomb D. phishing attack

Accepted Answer

denial-of-service attack

Question 22

A ___________ is an attack by a programmer developing a system. A. back door B. denial-of-service attack C. phishing attack D. virus

Accepted Answer

back door

Question 23

A ___________ is an attack by a programmer developing a system. A. denial-of-service attack B. logic bomb C. phishing attack D. worm

Accepted Answer

logic bomb

Question 24

*Which of the following is NOT an example of alien software? A. Adware B. Blockware C. Spamware D. Spyware

Accepted Answer

Blockware

Question 25

The goal of CAPTCHA is to ___________. A. ensure you aren\'t alien software B. hack into secure networks C. protect networks against hackers D. remove alien software from your computer

Accepted Answer

ensure you aren\'t alien software

Question 26

*SCADA attacks typically occur on ___________. A. Hacker networks B. Industrial control systems C. Personal computers D. Government networks

Accepted Answer

Industrial control systems

Question 27

Shodan\'s primary purpose is ___________. A. a hacker website B. a service that searches the internet for devices connected to the internet C. a website that shows which devices are vulnerable to hackers D. to help users search for other people who use similar devices

Accepted Answer

a service that searches the internet for devices connected to the internet

Question 28

Shodan is used for _________. A. creating a backdoor B. SCADA attacks C. spreading viruses D. phishing

Accepted Answer

SCADA attacks

Question 29

The Shodan case illustrates ___________. A. how vulnerable all devices are, even if they aren\'t connected to the internet B. strong passwords aren\'t necessary on home devices since most hackers don\'t care about such a small target C. that hackers and security researchers use the same sites to identify vulnerabilities D. the government is doing nothing to protect our privacy

Accepted Answer

that hackers and security researchers use the same sites to identify vulnerabilities

Question 30

_______________ is a process whereby the organization takes concrete actions against risks, such as implementing controls and developing a disaster recovery plan. A. Risk B. Risk analysis C. Risk management D. Risk mitigation

Accepted Answer

Risk mitigation

Question 31

You have a small business that has had problems with malware on your employees\' computers. You decide to hire a third-party company such as GFI Software to implement security controls and then monitor your company\'s systems. You are adopting a risk ________ strategy. A. acceptance B. analysis C. limitation D. transference

Accepted Answer

transference

Question 32

Risk _______________ means absorbing any damages that occur. A. acceptance B. analysis C. limitation D. transference

Accepted Answer

acceptance

Question 33

If you hire a cybersecurity company like FireEye to identify security weaknesses in your information systems, you are using a risk _________ strategy. A. acceptance B. analysis C. limitation D. transference

Accepted Answer

limitation

Question 34

You decide to use the password \"1234\" on your computer because you figure nobody cares enough about your information to steal it. This is a risk __________ strategy. A. acceptance B. analysis C. limitation D. transference

Accepted Answer

acceptance

Question 35

According to the \"Catching a Hacker\" case, ____________ is one of the most sophisticated and destructive malicious software programs ever developed. A. the Heartbleed bug B. FireEye C. Shodan D. SpyEye

Accepted Answer

SpyEye

Question 36

The purpose of SpyEye is to _____________. A. catch hackers in the act of hacking B. collect personal and financial information C. facilitate SCADA attacks by seeing which systems are vulnerable D. watch what you do on your computer

Accepted Answer

collect personal and financial information

Question 37

*A firewall is a _______ control. A. access B. communication C. physical D. virtual

Accepted Answer

communication

Question 38

Biometrics is something the user _______. A. Does B. Has C. Is D. Knows

Accepted Answer

Is

Question 39

A smart ID card is something the user _______. A. Does B. Has C. Is D. Knows

Accepted Answer

Has

Question 40

_________ is one common example of SSL. A. http B. https C. www D. wwws

Accepted Answer

https

Question 41

If you have an empty building you can move into if your primary location is destroyed, you\'ve implemented a _________ site. A. Cold B. Hot C. Neutral D. Warm

Accepted Answer

Cold

Question 42

Auditing __________ the computer means inputs, outputs, and processing are checked. A. Around B. Into C. Through D. With

Accepted Answer

Through

Question 43

___ percent of organizational breaches exploit weak or stolen user credentials. A. 26 B. 51 C. 76 D. 99

Accepted Answer

76

Question 44

Security must be balanced with _________ for people to use systems. A. Convenience B. Cost C. Time D. Trust

Accepted Answer

Convenience

Question 45

The main problem with multifactor authentication is _____________. A. it\'s a single point of failure B. it\'s too hard to do C. it will invade our privacy D. there are no problems with multifactor authentication

Accepted Answer

it will invade our privacy

Question 46

Wireless is an untrusted network.

Accepted Answer

True

Question 47

Janitors are no threat to information security since they have no access to company systems.

Accepted Answer

False

Question 48

A patent lasts for the life of the creator plus 70 years.

Accepted Answer

False

Question 49

A copyright lasts 20 years.

Accepted Answer

False

Question 50

Competitive intelligence is industrial espionage.

Accepted Answer

False

Question 51

The goal of risk management is to reduce risk to acceptable levels.

Accepted Answer

True

Question 52

Tracking down cybercriminals is the most difficult and only real challenge authorities face.

Accepted Answer

False

Question 53

Biometrics is an authentication tool.

Accepted Answer

True

Question 54

Blacklisting is when everything can run except what is on the list.

Accepted Answer

True

Question 55

Whitelisting is when nothing can run unless it is on the list.

Accepted Answer

True

Question 56

The emergence of the Internet has decreased the threats to information security.

Accepted Answer

False

Question 57

If you have copied a software package (computer program) from a friend without paying for it, you are guilty of software piracy.

Accepted Answer

True

Question 58

Backup and recovery procedures are recommended only to safeguard against hardware/software failures.

Accepted Answer

False

Question 59

An information system\'s ____ is the likelihood that the system or resource will be compromised by a ____ that will result in its ____ to further attacks. a) vulnerability; threat; exposure b) vulnerability; security; threat c) threat; vulnerability; liability d) threat; vulnerability; exposure

Accepted Answer

vulnerability; threat; exposure

Question 60

Low level employees pose the greatest threat to information security.

Accepted Answer

False

Question 61

Which of the following is not a social engineering technique? a) Tailgating b) Shoulder surfing c) Careless internet surfing d) All of the choices are social engineering techniques. e) None of the choices are social engineering techniques

Accepted Answer

Careless internet surfing

Question 62

You should regularly delete any spyware that might be residing on your computer, because it may be dangerous.

Accepted Answer

True

Question 63

Which type of alien software uses your computer to send emails that look like they came from you to all the people in your address book? a) adware b) spyware c) spamware d) cookies

Accepted Answer

spamware

Question 64

Which of the following would be an example of a SCADA attack? a) Bank accounts are hacked into after Internet purchases b) Social Security numbers are deleted from a company\'s database. c) Computer viruses are introduced into the electrical company\'s systems resulting in a shutdown of the power plant. d) Email accounts are hacked and kinky messages are sent to all of the user\'s contacts

Accepted Answer

Computer viruses are introduced into the electrical company\'s systems resulting in a shutdown of the power plant.

BTE 210 Chapter 4 Questions

Unlock all answers in this set

Haven't found what you were looking for?

Search for samples, answers to your questions and flashcards