Question 1

True or False: Cars that have Wi-Fi access and onboard computers require software patches and upgrades from the manufacturer.

Accepted Answer

True

Question 2

Which law governs the use of the IoT by healthcare providers, such as physicians and hospitals

Accepted Answer

HIPPA

Question 3

Jody would like to find a solution that allows realtime document sharing and editing between teams. Which technology would best suit her needs?

Accepted Answer

Collaboration

Question 4

What do organizations expect to occur with the growth of the IoT?

Accepted Answer

Higher Risks

Question 5

In Mobile IP, what term describes a device that would like to communicate with a mobile node(MN)?

Accepted Answer

Correspondent node (CN)

Question 6

Bob recently accepted a position as the information security and compliance manager for a medical practice. Which regulation is likely to most directly apply to Bob\'s employer?

Accepted Answer

HIPPA

Question 7

True or False: An IT security policy framework is like an outline that identifies where security controls should be used

Accepted Answer

True

Question 8

True or False: Authorization is the process of granting rights to use an organizations IT assets, systems, applications, and data to a specific user.

Accepted Answer

True

Question 9

Which organization pursues standards for the IoT devices and is widely recognized as the authority for creating standards of the Internet?

Accepted Answer

Internet Society

Question 10

True or False: Store-and-Forward communications should be used when you need to talk to someone immediately.

Accepted Answer

False

Question 11

True or False: IoT technology has a significant impact on developing economies, given that it can transform countries into e-commerce-ready nations

Accepted Answer

True

Question 12

True or False: Metadata of IoT devices can be sold to companies seeking demographic marketing data about users and their spending habits

Accepted Answer

True

Question 13

True or False: Bring your own device (BYOD) opens the door to considerable security risks

Accepted Answer

True

Question 14

Which IoT challenge involves the difficulty of developing and implementing protocols that allow devices to communicate in a standard fashion?

Accepted Answer

Interoperability

Question 15

Which tool can capture the packets transmitted between systems over a network?

Accepted Answer

Protocol analyzer

Question 16

True or False: Denial of service (DoS) attacks are larger in scope than Distributed Denial of Service (DDoS) attacks

Accepted Answer

False

Question 17

Which type of attack involves the creation of some deception in order to trick unsuspecting users?

Accepted Answer

Fabrication

Question 18

True or False: Rootkits are malicious software programs designed to be hidden from normal methods of detection

Accepted Answer

True

Question 19

True or False: When servers need operating system upgrades or patches, administrators take them offline intentionally so they can perform the necessary work without risking malicious attacks

Accepted Answer

True

Question 20

True or False: Cryptography is the process of transforming data from cleartext to ciphertext.

Accepted Answer

False (Encryption not Cryptography)

Question 21

True or False: The Director of IT security is generally in charge of ensuring that the Workstation Domain conforms to Policy

Accepted Answer

True

Question 22

True or False: The most critical aspect of a WAN services contract is how the service provider supplies troubleshooting, network management, and security management services

Accepted Answer

True

Question 23

?True or False: Networks, routers, and equipment require continuous monitoring and management to keep WAN service available

Accepted Answer

True

Question 24

Which element of the security policy framework requires approval from upper management and applies to the entire organization?

Accepted Answer

Policy

Question 25

Which element of the IT security policy framework provides detailed written definitions for hardware and software and how they are to be used?

Accepted Answer

Standard

Question 26

Rachel is investigating an information security incident that took place at the high school where she works. She suspects that students may have broken into the student records system and altered their grades. If correct, which one of the tenets of information security did this attack violate?

Accepted Answer

Integrity

Question 27

True or False: The system/application domain holds all the mission critical systems, applications, and data.

Accepted Answer

True

Question 28

True or False: Each 4g device has a unique Internet Protocol (IP) address and appears just like any other wired device on a network.

Accepted Answer

True

Question 29

True or False: One of the first industries to adopt and widely use mobile applications was the healthcare industry

Accepted Answer

True

Question 30

Which type of denial of service attack exploits the existence of software flaws to disrupt a service?

Accepted Answer

Logic attack

Question 31

? Bob is using a port scanner to identify open ports on a server in his environment. He is scanning a web server that uses Hypertext Transfer Protocol (HTTP). Which port should Bob expect to be open to support this service?

Accepted Answer

443

Question 32

Users throughout Alison\'s organization have been receiving unwanted commercial messages over the organization\'s instant messaging program. What type of attack is taking place?

Accepted Answer

Spim

Question 33

True or False: A rootkit uses a directed broadcast to create a flood of network traffic for the victim computer.

Accepted Answer

False

Question 34

True or False: Cryptography is the process of transforming data from cleartext into ciphertext

Accepted Answer

False: Encryption

Question 35

Which risk is most effectively mitigated by an upstream Internet Service Provider (ISP)?

Accepted Answer

Distributed Denial of Service (DDoS)

Question 36

True or False: Organizations should start defining their IT security policy framework by defining as asset classification policy

Accepted Answer

True

Question 37

True or False: Encrypting the data within databases and storage devices gives an added layer of security

Accepted Answer

True

Question 38

True or False: Hypertext Transfer Protocol (HTTP) is the communications protocol between web browsers and websites with data in cleartext.

Accepted Answer

True

Question 39

? Which network device is capable of blocking network connections that are identified as potentially malicious?

Accepted Answer

Demilitarized Zone (DMZ)

Question 40

True or False: Authorization is the process of granting rights to use an organization\'s IT assets, systems, applications, and data to a specific user.

Accepted Answer

True

Question 41

True or False: In the Remote Access Domain, if private data or confidential data is compromised remotely, you should set automatic blocking for attempted logon retries.

Accepted Answer

False: Apply first level and second level tokens and biometrics

Question 42

Which element of the security policy framework offers suggestions rather than mandatory actions?

Accepted Answer

Guideline

Question 43

?True or False: A VPN router is a security appliance that is used to filter IP packets

Accepted Answer

False

Question 44

Which of the following is NOT an area of critical infrastructure where the Internet of Things (IOT) is likely to spur economic development in less developed countries? a) Water Supply management b) Agriculture c) Wastewater Treatment d) E-commerce

Accepted Answer

d) e-commerce

Question 45

True or False: Bricks-and-mortar stores are completely obsolete now.

Accepted Answer

False: They have global reach

Question 46

True or False: Devices that combine the capabilities of mobile phones and personal digital assistants (PDAs) are commonly called smartphones

Accepted Answer

True

Question 47

True or False: E-commerce systems and applications demand strict confidentiality, integrity, and availability (CIA) security controls.

Accepted Answer

True

Question 48

Jody would like to find a solution that allows real-time document sharing and editing between teams. Which technology would best suit her needs?

Accepted Answer

Collaboration

Question 49

In Mobile IP, what term describes a device that would like to communicate with a mobile node (MN)?

Accepted Answer

Correspondent node

Question 50

True or False: A bricks-and-mortar strategy includes marketing and selling goods and services on the Internet

Accepted Answer

false: e-commerce

Question 51

? True or False: IoT devices cannot share and communicate you IoT device data to other systems and applications without your authorization or knowledge

Accepted Answer

True

Question 52

Which act governs the use of Internet of Things (IoT) by healthcare providers, such as physicians and hospitals?

Accepted Answer

Health Insurance Portability and Accountability Act (HIPAA)

Question 53

Which term describes an action that can damage or compromise an asset?

Accepted Answer

Threat

Question 54

True or False: The anti-malware utility is one of the most popular backdoor tools in use today

Accepted Answer

False: Netcat

Question 55

Which password attack is typically used specifically against password files that contain cryptographic hashes?

Accepted Answer

Birthday attacks

Question 56

What type of malicious software masquerades as legitimate software to entice the user to run it?

Accepted Answer

Trojan Horse

Question 57

Maria\'s company recently experienced a major system outage due to the failure of a critical component. During that time period, the company did not register any sales through it\'s online site. Which type of loss did the company experience as a result of lost sales?

Accepted Answer

opportunity cost

Question 58

Bob is using a port scanner to identify open ports on a server in his environment. He is scanning a web server that uses Hypertext Transfer Protocol (HTTP). Which port should Bob expect to be open to support the service?

Accepted Answer

80

Question 59

True or False: A phishing attack \"poisons\" a domain name on a domain name server.

Accepted Answer

False: Pharming

Question 60

Florian recently purchased a set of domain names that are similar to those of legitimate websites and used the newly purchased sites to host malware. Which type of attack is Florian using?

Accepted Answer

Typosquatting

Question 61

True or False: Vishing is a type of wireless network attack

Accepted Answer

False: Social Engineering attacks

Question 62

True or False: A birthday attack is a type of cryptographic attack that is used to make brute-force attack of one-way hashes easier.

Accepted Answer

True

Question 63

True or False: A phishing email is a fake or bogus email intended to trick the recipient into clicking on an embedded URL link or opening an email attachment.

Accepted Answer

True

Question 64

True or False: Using a secure logon and authentication process is one of the six steps to prevent malware.

Accepted Answer

True

ISEC 5305 test 1 – Flashcards

Unlock all answers in this set

Haven't found what you were looking for?

Search for samples, answers to your questions and flashcards