Mid2 Chap4 M82 – Flashcards

Unlock all answers in this set

Unlock answers
question
Which of the ff. defines an acceptable use agreement?
answer
An agreement which identifies the employee's right to use company property such as Internet access and computer equipment for personal use.
question
Which of the ff. is a high-level, general statement about the role of security in the organization?
answer
Policy
question
What is the primary purpose of change control?
answer
Prevent unmanaged change
question
Which of the ff. is defined as a contract which prescribes the technical support or business parameters that a provider will bestow to its client?
answer
Service level agreement
question
HIPAA is a set of federal regulations that define security guidelines that enforce the protection of what?
answer
Privacy
question
Which of the ff. policies specifically protects PII?
answer
Privacy
question
You have recently discovered that a network attack has compromised your database server. In the process, customer credit card numbers might have been taken by an attacker. You have stopped the attack and put measures in place to prevent the same incident from occurring in the future. What else might you be legally required to do?
answer
Contact your customers to let them know of the security breach
question
You have a set of DVD-RW discs that have been used to archive files for your latest development project. You need to dispose of the discs. Which of the ff. methods should you use to best prevent extracting data from the discs?
answer
Shredding
question
What is the most effective means of improving or enforcing security in any environment?
answer
User awareness training
question
When informing an employee that they are being terminated, what is the most important activity?
answer
Disabling their network access
question
Which of the ff. is the best protection against security violations?
answer
Defense in depth
question
Which of the ff. is a recommendation to use when a specific standard or procedure does not exist?
answer
Guideline
question
What is the primary purpose of source code escrow?
answer
To obtain change rights over software after the vendor goes out of business
question
Which of the ff. best describes the concept of due care or due diligence?
answer
Reasonable precautions, based on industry best practices, are utilized and documented.
question
Who has the responsibility for the development of a security policy?
answer
Senior Management
question
When is a BCP or DRP design and development actually completed?
answer
Never
question
What is the primary goal of business continuity planning?
answer
Maintaining business operations with reduced or restricted infrastructure capabilities or resources
question
The company is implementing a Disaster Recovery Plan (DRP) and a Business Continuity Plan (BCP). It is time for the control tests and the company would like to perform compliance testing. Which of the ff. best describes compliance testing?
answer
The testing of control procedures to see if they are working as expected and are being implemented in accordance with management policies.
question
When recovery is being performed due to disaster, which services are to be stabilized first?
answer
Mission critical
question
In business continuity planning, what is the primary focus of the scope?
answer
Business processes
question
As a BCP or DRP plan evolves over time, what is the most important task to perform when rolling out a new version of the plan?
answer
Collect and destroy all old plan copies
question
Your company has developed and implemented countermeasures for the greatest risks to their assets. However, there is still some risk left. What is the remaining risk called?
answer
Residual risk
question
Which of the ff. is "not" an accepted countermeasure to strengthen a cryptosystem?
answer
Keep the cryptosystem a secret
question
Which of the ff. is "not" a valid response to a risk discovered during a risk analysis?
answer
Denial
question
What is the average number of times that a specific risk is likely to be realized?
answer
Annualized Rate of Occurrence
question
You have conducted a risk analysis to protect a key company asset. You identify ff. values: *Asset value = 400 *Exposure factor = 75 * Annualized Rate of Occurrence =.25 What is the Annualized Loss Expectancy (ALE)?
answer
75
question
To determine the value of the company assets, an anonymous survey was used to collect the opinions of all senior and mid-level managers. Which asset valuation method was used?
answer
Delphi method
question
If an organization shows sufficient due care, which burden is eliminated in the event of a security breach?
answer
Negligence
question
Purchasing insurance is what type of response to risk?
answer
Transference
question
You have conducted a risk analysis to protect a key company asset. You identify ff. values: *Asset value = 400 *Exposure factor = 75 * Annualized Rate of Occurrence =.25 What is the Single Loss Expectancy (SLE)?
answer
300
question
When analyzing assets, which analysis method assigns financial values to assets?
answer
Quantitative
question
When would choosing to do nothing about an identified risk be acceptable?
answer
When the cost of protecting the asset is greater than the potential loss
question
Which of the ff. statement is true regards to risk analysis? (Select two)
answer
Don't implement a countermeasure if the cost is greater than loss, Annualized Rate of Occurrence (ARO) identifies how often in a single year the successful threat attack will occur.
question
Which of the ff. best defines Single Loss Expectancy (SLE)?
answer
The total monetary loss associated with a single occurrence of a threat
question
When conducting a risk assessment, how is the Annualized Rate of Occurrence (ARO) calculated?
answer
Through historical data provided by insurance companies and crime statistics.
question
You have conducted a risk analysis to protect a key company asset. You identify ff. values: *Asset value = 400 *Exposure factor = 75 * Annualized Rate of Occurrence =.25 Countermeasure A has a cost of 320 and will protect the asset for four years. Countermeasure B has an annual cost of 85. An insurance policy to protect the asset has an annual premium of 90. What should you do?
answer
Accept the risk or find another countermeasure.
question
How can a criminal investigator ensure the integrity of a removable media device found while collecting evidence?
answer
Create a checksum using a hashing algorithm
question
After an intrusion has occurred and the intruder has been removed from the system, which of the ff. is the best next step or action to take?
answer
Back up all logs and audits regarding the incident
question
During a recent site survey, you find a rogue wireless access point on your network. Which of the ff. actions should you take first to protect your network, while still preserving evidence?
answer
Disconnect the access point from the network
question
What is the best definition of a security incident?
answer
Violation of security policy
question
You manage the network for your company. You have recently discovered information on a computer hard drive that might indicate evidence of illegal activity. You want to perform forensic activities on the disk to see what kind of information it contains. What should you do first?
answer
Make a bit-level copy of the disk
question
Which of the ff. is an important aspect of evidence gathering?
answer
Back up all log files and audit trails
question
You have discovered a computer that is connected to your network that was used for an attack. You have disconnected the computer from the network to isolate it from the network and stop the attack. What should you do next?
answer
Perform a memory dump
question
When conducting a forensic investigation, and assuming that the attack has been stopped, which of the ff. actions should you perform first?
answer
Document what's on the screen
question
When conducting a forensic investigation, which of the ff. initial actions is appropriate for preserving evidence?
answer
Document what's on the screen
question
The immediate preservation of evidence is paramount when conducting a forensic analysis. Which of the ff. actions is most likely to destroy critical evidence?
answer
Rebooting the system
question
Which of the ff. social engineering attacks are use Voice over IP (VoIP) to gain sensitive information?
answer
Vishing
question
What is the primary difference between impersonation and masquerading?
answer
One is more active, the other is more passive
question
A senior executive reports that she received a suspicious email concerning a sensitive, internal project that is behind production. The email is sent from someone she doesn't know and he is asking for immediate clarification on several of the project's details so the project can get back on schedule. What type of an attack best describes the scenario?
answer
Whaling
question
Which of the ff. is a form of attack that tricks victims into providing confidential information, such as identity information or logon credentials, through e-mails or Web sites that impersonate an online entity that the victim trusts, such as a financial institution or well-known e-commerce site?
answer
Phishing
question
How can an organization help prevent social engineering attacks? (Select two.)
answer
Educate employees on the risks and countermeasures, Publish and enforce clearly-written security polices
question
You've got just received an e-mail messages that indicates a new serious malicious code threat is ravaging across the Internet. The message contains detailed information about the threat, its source code, and the damage it can inflict. The message states that you can easily detect whether or not you have already been a victim of this threat by the presence of three files in the WindowsSystem32 folder. As a countermeasure, the message suggests that you delete these three files from your system to prevent further spread of the threat. What should your first action based on the message be?
answer
Verify the information on well-known malicious code threat management Web sites.
question
The receptionist received a phone call from an individual claiming to be a partner in a high-level project and requesting sensitive information. The individual is engaging in which type of social engineering attack?
answer
Authority
question
You have just received a generic-looking e-mail that is addressed as coming from the administrator of your company. The e-mail says that as part of a system upgrade, you are to go to a Web site and enter your username and password at a new Web site so you can manage your e-mail and spam using the new service. What should you do?
answer
Verify that the e-mail was sent by the administrator and that this new service is legitimate.
question
By definition, which type of social engineering attack uses of a fictitious scenario to persuade someone to give information for which they are not authorized?
answer
Pretexting
question
Dumpster diving is a low-tech means of gathering information that may be useful in gaining unauthorized access, or as a starting point for more advanced attacks. How can a company reduce the risk associated with dumpster diving?
answer
Establish and enforce a document destruction policy
question
Which of the ff. is a common form of social engineering attack?
answer
Hoax virus information e-mails.
question
Dictionary attacks are often more successful when performed after what reconnaissance action?
answer
Social engineering
question
What is the primary countermeasure to social engineering?
answer
Awareness
question
Which of the ff. are examples of social engineering? (Select two.)
answer
Dumpster diving, Shoulder surfing
question
Which type of social engineering attack uses peer pressure to persuade someone to help an attacker?
answer
Social validation
question
Which of the ff. defines system high mode?
answer
All systems and peripherals within a system are classified and then protected according to the level of classification assigned to the most highly classified object which resides on the system.
question
Which of the ff. terms restricts the ability of a program to read and write to memory according to its permissions or access level?
answer
Confinement
question
Which of the ff. defines layering in regards to system access control?
answer
Various tasks are divided into a hierarchical manner to provide security.
question
Which of the ff. is "not" used by the reference monitor to determine levels of access?
answer
Ring architecture
question
Which of the ff. is a representative example of an assigned level of a system that was judged through Common Criteria?
answer
EAL5
question
Which of the ff. terms describes the product that is evaluated against the security requirements in the Common Criteria (CC) evaluation system?
answer
Target of Evaluation (TOE)
question
A process performed in a controlled environment by a third-party which verifies that an IS meets a specific set of security standards before being granted the approval to operate is known as?
answer
Accreditation
question
Which of the ff. is a term used to describe a level of confidence that the evaluation methods were thorough and complete so that the security designation can be trusted?
answer
Assurance
question
Which of the ff. components of the Common Criteria (CC) evaluation system is a document written by a user or community that identifies the security requirements for a specific purpose?
answer
Protection Profile (PP)
question
Who is assigned the task of judging the security of a system or network granting it an approval to operate?
answer
Designated Approving Authority
question
Which of the ff. best describes the Security Target (ST) in the Common Criteria (CC) evaluation system?
answer
The ST is a document that describes the security properties of a security product.
question
Which is the operating mode of a system that is deployed in such a way so that it operates at a single level of classification and all users who can access the system all have the same specific clearance level as well as all of the need to know over all the data on the system?
answer
Dedicated
question
Which of the ff. development modes is a method used by programmers while writing programs that allows for optimal control over coherence, security, accuracy, and comprehensibility?
answer
Structured programming
question
What is another name for a backdoor that was left in a product by the manufacturer by accident?
answer
Maintenance hook
question
How often should change control management be implemented?
answer
Any time a production system is altered.
question
Which of the ff. is an action which must take place during the release stage of the SDLC?
answer
Venders develop and release patches in response to exploited vulnerabilities that have been discovered.
question
What is the primary purpose of imposing software life cycle management concepts?
answer
Increase the quality of software.
question
In which phase of the system life cycle is security integrated into the product?
answer
Project initiation
question
In which phase of the system life cycle is software testing performed?
answer
System Development
question
Which of the ff. is "not" part of security awareness training?
answer
Employee agreement documents.
question
The best way to initiate solid administrative control over an organization's employee is to have what element in place?
answer
Distinct job descriptions
question
As you are helping a user with a computer problem you notice that she has written her password on a note stuck to her computer monitor. You check the password policy of your company and find that the ff. settings are currently required: Minimum password length = 10 Minimum password age = 4 Maximum password age = 30 Password history = 6 Require complex password that include numbers and symbols Account lockout clipping level = 3 Which of the ff. is the best action to take to make remembering passwords easier so that she no longer has to write the password down?
answer
Implement end-user training.
question
Which of the ff. is "not" a protection against collusion?
answer
Cross training
question
Which of the ff. is "not" an element of the termination process?
answer
Dissolution of the NDA
question
What is the primary purpose of forcing employees to take mandatory one-week minimum vacations every year?
answer
To check for evidence of fraud
question
What is the primary means by which supervisors can determine whether or not employees are complying with the organization's security policy?
answer
Auditing
question
Over the last month you have noticed a significant increase in the occurrence of inappropriate activities performed by employees. What is the best first response step to take in order to improve or maintain the security level of the environment?
answer
Improve and hold new awareness sessions
question
A code of ethics provides for all but which of the ff.?
answer
Clearly defines courses of action to take when complex issue is encountered
question
Your company security policy requires separation of duties for all network security matters. Which of the ff. scenarios best describes this concept?
answer
The system administrator configures remote access privileges and the security officer reviews and activates each account
question
You have installed anti-virus software on computers at your business. Within a few days, however, you notice that one computer has a virus. When you question the user, she says she did install some software a few days ago, but it was supposed to be a file compression utility. She admits she did not scan the file before running it. What should you add to your security measures to help prevent this from happening again?
answer
User awareness training
question
Which of the ff. is a legal contract between the organization and the employee that specifies the employee is not to disclose the organization's confidential information?
answer
Non-disclosure agreement
question
Which of the ff. defines two-man control?
answer
Certain tasks should be dual-custody in nature to prevent security breach.
question
When informing an employee that they are being terminated, what is the most important activity?
answer
Disabling their network access
question
Which of the ff. are typically associated with human resource security policies? (Select two.)
answer
Termination, Background checks
Get an explanation on any task
Get unstuck with the help of our AI assistant in seconds
New