Question 1

OCTAVE is a:

Accepted Answer

. risk-assessment process

Question 2

A security analyst is performing a security assessment. The analyst should not:

Accepted Answer

take actions to mitigate a serious risk

Question 3

A rational security decision, such as locking your vehicle when not in use, is an example of:

Accepted Answer

reasoned paranoia

Question 4

Supervisory control and data acquisition (SCADA) devices are most often associated with:

Accepted Answer

utilities

Question 5

An attempt by a threat agent to exploit assets without permission is referred to as:

Accepted Answer

an attack

Question 6

A person skilled in attacking computer systems, who uses those skills as a security expert to help protect systems, is a:

Accepted Answer

white-hat hacker

Question 7

When disclosing a security vulnerability in a system or software, the manufacturer should avoid

Accepted Answer

including enough detail to allow an attacker to exploit the vulnerability

Question 8

One of the vulnerabilities the Morris worm used was a networking service called finger. The purpose of the finger service is to

Accepted Answer

report the status of individual computer users

Question 9

A type of security control that takes measures to help restore a system is referred to as:

Accepted Answer

corrective

Question 10

The primary element on a computer motherboard that runs programs and makes the computer work is

Accepted Answer

the central processing unit (CPU)

Question 11

The directory access right that allows a user to search for a name in a file\'s path but not examine the directory as a whole is called

Accepted Answer

seek

Question 12

An interpreter is a program that interprets the text of a program one word at a time, and performs the actions specified in the text. The following are examples of interpreters except:

Accepted Answer

Java

Question 13

The type of computer-based access control that involves a process that uses secret or hidden information in order to retrieve particular data items is

Accepted Answer

puzzle

Question 14

A zero-day exploit

Accepted Answer

has no software patch

Question 15

The character that separates directories in a Windows directory path is

Accepted Answer

the back slash ( )

Question 16

The computer connection that allows you to attach several separate components is called

Accepted Answer

A Bus

Question 17

General security access controls refer to objects, rights, and:

Accepted Answer

subjects

Question 18

The product that creates financial-fraud botnets using Zbot malware and is offered for sale on the black market is:

Accepted Answer

ZeuS

Question 19

The main purpose of a software patch is to:

Accepted Answer

fix a bug in a program

Question 20

A type of security control in which you unplug a computer from the Internet to protect it from malware is

Accepted Answer

mechanical

Question 21

In a hierarchical file system directory, the topmost directory is called the:

Accepted Answer

root

Question 22

A typical hard drive has an arm, a read/write head, and

Accepted Answer

platters

Question 23

For data to be cryptographically random, it:

Accepted Answer

cannot be produced by a procedure

Question 24

A keystroke logger is often associated with

Accepted Answer

botnets

Question 25

The condition in which files automatically take on the same permissions as the folder in which they reside is called:

Accepted Answer

dynamic inheritance

Question 26

In Windows, when you copy a file from one folder to another and the folders have different access permissions, the file:

Accepted Answer

. takes on the access rights of the destination folder

Question 27

The law that establishes security measures that must be taken on health-related information

Accepted Answer

HIPAA

Question 28

When collecting digital evidence from a crime scene, often the best strategy for dealing with a computer that is powered on is to

Accepted Answer

unplug it

Question 29

The file system that organizes a volume\'s contents around five master files, such as the catalog file and the extents overflow file, is

Accepted Answer

HFS+

Question 30

The sector(s) at the beginning of a hard disk that identify the starting block of each partition is called the

Accepted Answer

master boot record

Question 31

A security database that contains entries for users and their access rights for files and folders is

Accepted Answer

an access control list (ACL)

Question 32

The Fourth Amendment prevents arbitrary searches of areas where users expect their privacy to be protected. This is referred to as:

Accepted Answer

reasonable expectation of privacy

Question 33

Hashing

Accepted Answer

transforms readable text into gibberish

Question 34

The inode is the data structure on a drive that describes each file and is used in

Accepted Answer

UFS

Question 35

An attack in which someone tries to trick a system administrator into divulging a password is called

Accepted Answer

social engineering

Question 36

The major file system used with Windows today is

Accepted Answer

NTFS

Question 37

An authentication system that requires the user to provide two different passwords and a fingerprint scan is an example of

Accepted Answer

two-factor authentication

Question 38

A primary use of event logs is to:

Accepted Answer

serve as an audit trail

Question 39

In a password system, the total number of possible passwords is called the

Accepted Answer

search space

Question 40

The file system that uses a master file table is:

Accepted Answer

NTFS

Question 41

In a Diffie-Hellman calculation using P=g^s mod N , s is

Accepted Answer

the private key value

Question 42

An Advanced Encryption Standard (AES) key may not be

Accepted Answer

16 bits in length

Question 43

The type of cipher that rearranges the text of a message is called

Accepted Answer

transposition

Question 44

To use symmetric cryptography, the sender and receiver must share:

Accepted Answer

a secret key

Question 45

Digital signatures are often used to provide

Accepted Answer

nonrepudiation

Question 46

Volume encryption protects data on a computer against:

Accepted Answer

theft

Question 47

The following are common ways to handle new encryption keys except

Accepted Answer

transfer them via instant messenger

Question 48

A self-encrypting drive locks data on the hard disk by

Accepted Answer

erasing the encryption key when the drive is unplugged or reset

Question 49

Hiding an object, such as a diary, to prevent others from finding it is an example of

Accepted Answer

Security through Obscurity

Question 50

A file encryption program

Accepted Answer

truncates a passphrase that is too long

Question 51

File encryption protects data on a computer against the following except:

Accepted Answer

Trojan crypto

Question 52

The following are properties of persistent key storage except:

Accepted Answer

it uses volatile storage

Question 53

1111 1111 - 1111 1111 - 1111 0000 - 0000 0000 is an example of:

Accepted Answer

a binary network mask

Question 54

A disadvantage of a mesh network is

Accepted Answer

congestion

Question 55

A disadvantage of a tree network is

Accepted Answer

address-based size limits

Question 56

Modern internet technology evolved from research on:

Accepted Answer

the ARPANET

Question 57

A disadvantage of a point-to-point network is

Accepted Answer

no broadcasting

Question 58

An advantage of packet switching is

Accepted Answer

parallel transmission

Question 59

To see a list of MAC addresses on a Windows-based network:

Accepted Answer

issue the ipconfig /all command

Question 60

An advantage of a bus network is

Accepted Answer

no routing

Question 61

192.168.1.1 is an example of:

Accepted Answer

an IPv4 address

Question 62

Primary forms of Ethernet media include the following except:

Accepted Answer

nano

Question 63

The well-known port number 80 is used for

Accepted Answer

the World Wide Web

Question 64

The whois database provides the following information except

Accepted Answer

the annual cost to rent the domain name

info sec – Flashcards

Unlock all answers in this set

Haven't found what you were looking for?

Search for samples, answers to your questions and flashcards