Chapter 02 The Need for Security

Chapter 02 The Need for Security TRUEFALSE 1. Information security's primary mission is to ensure that systems and their contents confidentiality at any cost. (A) True (B) False Answer : (B) 2. The information security function in an organization safeguards its technology asse (A) True (B) False Answer : (A) 3. As an organization grows, it must often use more robust technology to replace the technologies it may have outgrown. (A) True (B) False Answer : (A) 4. Suppose an act of theft performed by a hacker was accompanied by defacement ac discovery. The first act is obviously in the category of "theft" but the second act is an category-in this case it is a "force of nature." (A) True (B) False Answer : (B) 5. Two watchdog organizations that investigate allegations of software abuse are the Information Industry Association (SIIA) and National Security Agency (NSA). (A) True (B) False Answer : (B) 6. A number of technical mechanisms-digital watermarks and embedded code, copyri even the intentional placement of bad sectors on software media-have been used to d the theft of software intellectual property. (A) True (B) False Answer : (A) 7. Expert hackers are extremely talented individuals who usually devote lots of time a attempting to break into other people's information systems. (A) True (B) False Answer : (A) 8. Attacks conducted by scripts are usually unpredictable. (A) True (B) False Answer : (B) 9. With the removal of copyright protection mechanisms, software can be easily distr installed. (A) True (B) False Answer : (A) 10. Organizations can use dictionaries to regulate password selection during the rese thus guard against easy-to-guess passwords. (A) True (B) False Answer : (A) 11. Forces of nature, sometimes called acts of God, can present some of the most dan because they usually occur with very little warning and are beyond the control of peo (A) True (B) False Answer : (A) 12. Much human error or failure can be prevented with effective training and ongoin activities. (A) True (B) False Answer : (A) 13. An advance-fee fraud attack involves the interception of cryptographic elements t keys and encryption algorithms. (A) True (B) False Answer : (B) 14. Compared to Web site defacement, vandalism within a network is less malicious i more public. (A) True (B) False Answer : (B) 15. A worm may be able to deposit copies of itself onto all Web servers that the infect reach, so that users who subsequently visit those sites become infected. (A) True (B) False Answer : (A) 16. A worm requires that another program is running before it can begin functioning (A) True (B) False Answer : (B) 17. DoS attacks cannot be launched against routers. (A) True (B) False Answer : (B) 18. A mail bomb is a form of DoS attack. (A) True (B) False Answer : (A) 19. A sniffer program can reveal data transmitted on a network segment, including p embedded and attached files-such as word-processing documents-and sensitive data t or from applications. (A) True (B) False Answer : (A) 20. When electronic information is stolen, the crime is readily apparent. (A) True (B) False Answer : (B) 21. Media are items of fact collected by an organization and include raw numbers, fa (A) True (B) False Answer : (B) 22. Media as a subset of information assets are the systems and networks that store, and transmit information. (A) True (B) False Answer : (A) 23. Intellectual property is defined as "the creation, ownership, and control of ideas a representation of those ideas." _________________________ (A) True (B) False Answer : (A) 24. Hackers are "persons who access systems and information without authorization illegally." _________________________ (A) True (B) False Answer : (A) 25. When voltage levels lag (experience a momentary increase), the extra voltage can damage or destroy equipment. _________________________ (A) True (B) False Answer : (B) 26. "Shoulder spying" is used in public or semi-public settings when individuals gathe they are not authorized to have by looking over another individual's shoulder or viewi information from a distance. _________________________ (A) True (B) False Answer : (B) 27. Packet munchkins use automated exploits to engage in distributed denial-of-servi _________________________ (A) True (B) False Answer : (B) 28. The term phreaker is now commonly associated with an individual who cracks or software protection that is designed to prevent unauthorized duplication. ____________ (A) True (B) False Answer : (B) 29. The application of computing and network resources to try every possible combin of a password is called a dictionary attack. _________________________ (A) True (B) False Answer : (B) 30. Cyberterrorists hack systems to conduct terrorist activities via network or Interne _________________________ (A) True (B) False Answer : (A) 31. Software code known as a(n) cookie can allow an attacker to track a victim's activ sites. _________________________ (A) True (B) False Answer : (A) 32. A(n) polymorphic threat is one that over time changes the way it appears to antiv programs, making it undetectable by techniques that look for preconfigured signature _________________________ (A) True (B) False Answer : (A) 33. The malicious code attack includes the execution of viruses, worms, Trojan horse Web scripts with the intent to destroy or steal information. _________________________ (A) True (B) False Answer : (A) 34. The macro virus infects the key operating system files located in a computer's sta _________________________ (A) True (B) False Answer : (B) 35. Once a(n) back door has infected a computer, it can redistribute itself to all e-mai found on the infected system. _________________________ (A) True (B) False Answer : (B) 36. One form of e-mail attack that is also a DoS attack is called a mail spoof, in which overwhelms the receiver with excessive quantities of e-mail. _________________________ (A) True (B) False Answer : (B) 37. A device (or a software program on a computer) that can monitor data traveling o known as a socket sniffer. _________________________ (A) True (B) False Answer : (B) 38. Computer assets are the focus of information security and are the information tha theorganization, as well as the systems that store, process, and transmit the informat ____________ (A) True (B) False Answer : (B) MULTICHOICE 39. Which of the following functions does information security perform for an organiz (A) Protecting the organization's ability to function. (B) Enabling the safe operation of applications implemented on the organization's IT (C) Protecting the data the organization collects and uses. (D) All of the above. Answer : (D) 40. Web hosting services are usually arranged with an agreement defining minimum known as a(n) ____. (A) SSL (B) SLA (C) MSL (D) MIN Answer : (B) 41. A short-term interruption in electrical power availability is known as a ____. (A) 󰜌fault (B) 󰜌brownout (C) 󰜌blackout (D) 󰜌lag Answer : (A) 42. Hackers can be generalized into two skill groups: expert and ____________________ (A) novice (B) journeyman (C) packet monkey (D) professional Answer : (A) 43. Acts of ____________________ can lead to unauthorized real or virtual actions that e information gatherers to enter premises or systems they have not been authorized to (A) bypass (B) theft (C) trespass (D) security Answer : (C) 44. The ____________________ data file contains the hashed representation of the user's (A) SLA (B) SNMP (C) FBI (D) SAM Answer : (D) 45. Human error or failure often can be prevented with training, ongoing awareness ____________________. (A) threats (B) education (C) hugs (D) paperwork Answer : (B) 46. "4-1-9" fraud is an example of a ____________________ attack. (A) social engineering (B) virus (C) worm (D) spam Answer : (A) 47. One form of online vandalism is ____________________ operations, which interfere w systems to protest the operations, policies, or actions of an organization or governme (A) hacktivist (B) phreak (C) hackcyber (D) cyberhack Answer : (A) 48. ____________________ is the premeditated, politically motivated attacks against info computer systems, computer programs, and data that result in violence against nonco targets by subnational groups or clandestine agents. (A) infoterrorism (B) cyberterrorism (C) hacking (D) cracking Answer : (B) 49. ____ is any technology that aids in gathering information about a person or organ their knowledge. (A) A bot (B) Spyware (C) A Trojan (D) A worm Answer : (B) 50. ____________________ are malware programs that hide their true nature and reveal behavior only when activated. (A) Viruses (B) Worms (C) Spam (D) Trojan horses Answer : (D) 51. Which of the following is an example of a Trojan horse program? (A) Netsky (B) MyDoom (C) Klez (D) Happy99.exe Answer : (D) 52. As frustrating as viruses and worms are, perhaps more time and money is spent o virus ____________________. (A) false alarms (B) polymorphisms (C) hoaxes (D) urban legends Answer : (C) 53. In a ____________________ attack, the attacker sends a large number of connection requests to disrupt a target from a small number of sources. (A) denial-of-service (B) distributed denial-of-service (C) virus (D) spam Answer : (A) 54. A ____________________ is an attack in which a coordinated stream of requests is la a target from many locations at the same time. (A) denial-of-service (B) distributed denial-of-service (C) virus (D) spam Answer : (B) 55. ____________________ are compromised systems that are directed remotely (usually transmitted command) by the attacker to participate in an attack. (A) Drones (B) Helpers (C) Zombies (D) Servants Answer : (C) 56. In the ____________________ attack, an attacker monitors (or sniffs) packets from th modifies them, and inserts them back into the network. (A) zombie-in-the-middle (B) sniff-in-the-middle (C) server-in-the-middle (D) man-in-the-middle Answer : (D) 57. The ____________________ hijacking attack uses IP spoofing to enable an attacker to another entity on the network. (A) WWW (B) TCP (C) FTP (D) HTTP Answer : (B) 58. Microsoft acknowledged that if you type a res:// URL (a Microsoft-devised type of than ____________________ characters in Internet Explorer 4.0, the browser will crash. (A) 64 (B) 128 (C) 256 (D) 512 Answer : (C) 59. When information gatherers employ techniques that cross a legal or ethical thres conducting __________. (A) industrial espionage (B) competitive intelligence (C) opposition research (D) hostile investigation Answer : (A) 60. The process of maintaining the confidentiality, integrity, and availability of data m a DBMS is known as __________ security. (A) database (B) data (C) information (D) residual Answer : (A) 61. 󰜌A long-term interruption (outage) in electrical power availability is known as a(n) (A) 󰜌blackout (B) 󰜌sag (C) 󰜌brownout (D) 󰜌fault Answer : (A) 62. 󰜌A short-term decrease in electrical power availability is known as a(n) ___________ (A) 󰜌blackout (B) 󰜌sag (C) 󰜌brownout (D) 󰜌fault Answer : (C) 63. A table of hash values and their corresponding plaintext values that can be used t password values if an attacker is able to steal a system's encrypted password file is kn __________. (A) rainbow table (B) dictionary (C) crib (D) crack file Answer : (A) 64. The redirection of legitimate user Web traffic to illegitimate Web sites with the in personal information is known as __________. (A) pharming (B) phishing (C) sniffing (D) pharming Answer : (A) 65. The average amount of time between hardware failures, calculated as the total am operation time for a specified number of units divided by the total number of failures, __________. (A) mean time between failure (MTBF) (B) mean time to diagnose (MTTD) (C) mean time to failure (MTTF) (D) mean time to repair (MTTR) Answer : (A) 66. The average amount of time until the next hardware failure is known as _________ (A) 󰜌mean time between failure (MTBF) (B) 󰜌mean time to diagnose (MTTD) (C) 󰜌mean time to failure (MTTF) (D) 󰜌mean time to repair (MTTR) Answer : (C) SHORTANSWER 67. A(n) ____________________ is a potential risk to an information asset.Answer : threa 68. A(n) ____________________ is a potential weakness in an asset or its defensive contr vulnerability 69. A(n) ____________________ is an act against an asset that could result in a loss.Answ 70. Duplication of software-based intellectual property is more commonly known as s ____________________.Answer : piracy 71. A momentary low voltage is called a(n) ____________________.Answer : fault 72. Some information gathering techniques are quite legal-for example, using a Web perform market research. These legal techniques are called, collectively, competitive ____________________.Answer : intelligence 73. When information gatherers employ techniques in a commercial setting that cros of what is legal or ethical, they are conducting industrial ____________________.Answer 74. The expert hacker sometimes is called a(n) ____________________ hacker.Answer : 75. Script ____________________ are hackers of limited skill who use expertly written so attack a system.Answer : kiddies 76. A(n) ____________________ hacks the public telephone network to make free calls or services.Answer : phreaker 77. Attempting to reverse-calculate a password is called ____________________.Answer 78. ESD is the acronym for ____________________ discharge.Answer : electrostatic 79. In the context of information security, ____________________ is the process of using convince people to reveal access credentials or other valuable information to the atta social engineering 80. The ____________________ fraud is a social engineering attack that involves convinc to participate in a seeming money-making venture while getting the victim to pay fee refund uncleared international payments.Answer : advance-fee Answer : advance fee 81. A computer virus consists of segments of code that perform ____________________ a : malicious 82. A(n) ____________________ is a malicious program that replicates itself constantly w requiring another program environment.Answer : worm 83. A virus or worm can have a payload that installs a(n) ____________________ door or component in a system, which allows the attacker to access the system at will with sp privileges.Answer : back 84. ____________________ is unsolicited commercial e-mail.Answer : Spam 85. ____________________ is a technique used to gain unauthorized access to computers intruder sends messages with a source IP address that has been forged to indicate th messages are coming from a trusted host.Answer : Spoofing 86. A(n) ____________________ is an application error that occurs when more data is sen than it is designed to handle.Answer : buffer overrun Answer : buffer overflow 87. _________ is the percentage of time a particular service is available.Answer : uptim Answer : up-time Answer : up time 88. __________ occurs when an application running on a Web server inserts commands browser session and causes information to be sent to a hostile server.Answer : cross(XSS) Answer : cross-site scripting Answer : XSS Answer : cross site scripting (XSS) Answer : cross site scripting ESSAY 89. There are 12 general categories of threat to an organization's people, information List at least six of the general categories of threat and identify at least one example o Graders Info : Compromises to intellectual propertySoftware attacks Deviations in quality of service Espionage or trespass Forces of nature Human error or failure Information extortion Sabotage or vandalism Theft Technical hardware failures or errors Technical software failures or errors Technological obsolescence 90. Describe viruses and worms. Graders Info : A computer virus consists of segments of code that perform malicious actions. This co very much like a virus pathogen attacking animals and plants, using the cell's own rep machinery to propagate and attack. The code attaches itself to the existing program a control of that program's access to the targeted computer. The virus-controlled targe carries out the virus's plan by replicating itself into additional targeted systems.󰜌 A worm is a malicious program that replicates itself constantly without requiring ano provide a safe environment for replication. Worms can continue replicating themselve completely fill available resources, such as memory, hard drive space, and network ba 91. Describe the capabilities of a sniffer. Graders Info : A sniffer is a program or device that can monitor data traveling over a network. Sniffe both for legitimate network management functions and for stealing information from Unauthorized sniffers can be extremely dangerous to a network's security because th impossible to detect and can be inserted almost anywhere. This makes them a favorit hacker's arsenal. Sniffers often work on TCP/IP networks, where they're sometimes c sniffers. Sniffers add risk to the network because many systems and users send inform networks in clear text. A sniffer program shows all the data going by, including passw inside files, and screens full of sensitive data from applications.