Chapter 13 Quiz

Chapter 13 Quiz (100/100) Someone who violates computer or Internet security maliciously or for illegal personal gain is known as a(n) _______. eschoci w anserofG oupr black hat hacker hacktivist cyberterrorist industrial spy A hacktivist is someone who _______. eschoci w anserofG oupr attempts to destroy the infrastructure components of governments attempts to gain financially and/or disrupt a company’s information systems and business operations violates computer or Internet security maliciously or for illegal personal gain hacks computers or Web sites in an attempt to promote a political ideology These days, the biggest threats to IT security are from ________. eschoci w anserofG oupr “geeks” working on their own and motivated by the desire to gain some degree of notoriety terrorist organizations organized groups that have ample resources, including money and sophisticated tools, to support their efforts international drug cartels This harmful malware is triggered by a specific event, such as Friday the 13th. eschoci w anserofG oupr Virus Worm Trojan bomb Logic bomb Your business has a web server that has suddenly become unresponsive. When you study the server's logs there are a huge number of requests from what appear to be legitimate computers. The problem is likely because of _____. eschoci w anserofG oupr a CAPTCHA issue too many Spam emails a logic bomb a denial-of-service attack A botnet is a ____. eschoci w anserofG oupr network of computers that send out access requests to servers repeatedly network of robots that control an assembly line at a factory network of servers that exchange traffic data network of devices that are used for managing security Once a _____ is installed, the attacker can gain full access to the computer. eschoci w anserofG oupr zombie botnet rootkit worm The purpose of Advanced Persistent Threat (APT) usually is to ____. eschoci w anserofG oupr interrupt service annoy the users steal data steal money On the back of a credit card the three-digit number above the signature panel is used to _____. eschoci w anserofG oupr enter your account into a raffle verify the identity of the credit card holder verify the card is legitimate and not a stolen card number track your transactions for rewards program purposes The US-CERT incident reporting system is used to ____. eschoci w anserofG oupr alert the bank about stolen credit cards alert the government about missing computers alert the Border Patrol about undocumented workers alert the Department of Homeland Security about information security incidents The second phase of an Advanced Persistent Threat attack is _____. eschoci w anserofG oupr incursion discovery capture reconnaissance In a denial-of-service (DDoS) attack, the perpetrator ____. eschoci w anserofG oupr refuses to accept any email from any sender instructs the zombie computers to send simple access requests to target computers changes the configuration information of the infected computers sends out a huge number of spam emails to all of those in your contacts list You had used an online service to apply for a credit card. As part of the process, you submitted your personal information such as SSN, date of birth, employer information, etc. Soon after you started receiving bills for items you did not purchase. You have become a victim of ________. eschoci w anserofG oupr identity theft cyber espionage ransomware cyberterrorism A company's risk assessment process can include numerous threats to the computers and networks. Which of the following can be considered an adverse event? eschoci w anserofG oupr Harmful virus Email attachment with harmful worm All of the above Distributed denial-of-service attack Which of the following laws covers false claims regarding unauthorized use of credit cards? eschoci w anserofG oupr Stored Wire and Electronic Communications and Transactional Records Access Statutes Identity Theft and Assumption Deterrence Act Computer Fraud and Abuse Act Fraud and Related Activity in Connection with Access Devices Statute Which of the following subject areas does the USA Patriot Act cover? eschoci w anserofG oupr Cyberterrorism Identity theft Credit card fraud Transmitting virus programs Which of these organizations offers guidelines on developing security policies? eschoci w anserofG oupr SANS DHS IBM CISCO You have been hired as the new Information Security consultant at XYZ Inc. Which of these employee behaviors would be a top security concern? eschoci w anserofG oupr Leaving laptop computers unattended in public spaces Banging on the keyboard, when the computer is running slow Drinking water or coffee while working on computers Using office computers for personal e-mails Which of the following is the correct description of a firewall? eschoci w anserofG oupr It is a software and hardware combination that limits the incoming and outgoing Internet traffic. It is hardware that prevents unauthorized data to enter the private network. It is a software that deletes viruses from attachments. It is a concept used in developing security policies. Which of the following is NOT a popular vendor of firewall software? eschoci w anserofG oupr Total Defense Check Point Red Hat Kaspersky You work for a company that is growing. Originally, all the users in all departments had access to all the data in the database. It is considered a security risk. What is an appropriate action to reduce the risk? eschoci w anserofG oupr Assign roles and privileges to users so that only job-relevant data is accessible to the user. Tweak the firewall parameters so that outgoing traffic can be better controlled Install a two-step login procedure, where the user has to key in additional information for logging in Install and provide stronger anti-virus software on the users' computers Which of the following shortcoming may be revealed during an IT security audit? eschoci w anserofG oupr whether the users are satisfied with IT services or not whether the IT budget is adequate or not whether the firewall is tall enough whether only a limited number of people have access to critical data or not Assume your organization is experiencing an intruder attack. You have an intrusion detection system (IDS) set up. Which of the following events occurs first? eschoci w anserofG oupr The network router sends traffic to the firewall as well as to the IDS Network security team decides to block traffic from that IP address Messages from the IDS are routed to the network security team The IDS warns the firewall of suspicious traffic There has been a data breach at your business and the business has lost some customer data. It has led to angry customers who have filed charges. What is a recommended course of action to prepare for future events? eschoci w anserofG oupr activate the forensics analysis team and prepare documentation settle with the customers, however much it may cost meet with your lawyers to prepare to counter-sue the customers none of these answers You wish to use your personal laptop computer at work. However, the IT department folks are unwilling to allow you. The likely reason is ______. eschoci w anserofG oupr you will use your laptop for non-work related activity your productivity could not be measured correctly your non-work related use of the laptop could increase vulnerability your activities could not be monitored