Question 1

____ is the predecessor to the Internet.
A)NIST
B)ARPANET
C)FIPS
D)DES

Accepted Answer

ARPANET (Advanced Research Projects Agency Network) is widely regarded as the predecessor to the modern Internet. It was developed by the United States Department of Defense in the late 1960s and early 1970s to connect multiple computers and enable their communication. NIST (National Institute of Standards and Technology) is a government agency responsible for developing standards and guidelines for technology and cybersecurity, FIPS (Federal Information Processing Standards) are a set of standards developed by NIST for use in government agencies, and DES (Data Encryption Standard) is a cryptographic algorithm used to encrypt data. While these technologies have played a role in the development of the Internet, they are not considered its direct predecessor.

Question 2

The Security Development Life Cycle (SDLC)is a methodology for the design and implementation of an information system._________________________

Accepted Answer

Systems

Question 3

A(n)____ attack is a hacker using a personal computer to break into a system.
A)indirect
B)direct
C)software
D)hardware

Accepted Answer

A direct attack is when a hacker uses their personal computer to directly target and break into a system. Indirect attacks use a third party to gain access to the system, while software and hardware refer to the tools used in the attack rather than the type of attack itself.

Question 4

A famous study entitled "Protection Analysis: Final Report" was published in ____.
A)1868
B)1978
C)1988
D)1998

Accepted Answer

The "Protection Analysis: Final Report" was published in 1978, focusing on computer security and protection mechanisms.

Question 5

Hardware is the physical technology that houses and executes the software,stores and transports the data,and provides interfaces for the entry and removal of information from the system._________________________

Accepted Answer

This statement is true. Hardware refers to the physical components of a computer system, such as the processor, memory, storage devices, and input/output devices. It is responsible for executing software, storing and transporting data, and providing interfaces for user interaction.

Question 6

____ was the first operating system to integrate security as its core functions.
A)UNIX
B)DOS
C)MULTICS
D)ARPANET

Accepted Answer

MULTICS (Multiplexed Information and Computing System) was the first operating system that integrated security as its core functions. Developed in the 1960s, MULTICS featured access control mechanisms and cryptographic features, making it one of the most secure operating systems of its time. Its security architecture and concepts heavily influenced the development of modern operating systems like UNIX and later, Windows NT.

Question 7

Of the two approaches to information security implementation,the top-down approach has a higher probability of success._________________________

Accepted Answer

The top-down approach involves leadership support and commitment for information security implementation, which creates a culture of security and ensures that security measures are integrated into all aspects of the organization. This approach has a higher probability of success compared to the bottom-up approach, which relies on individual employees to take responsibility for security measures.

Question 8

Information has redundancy when it is free from mistakes or errors and it has the value that the end user expects._________________________

Accepted Answer

accuracy

Question 9

Confidentiality ensures that only those with the rights and privileges to access information are able to do so._________________________

Accepted Answer

Confidentiality is an important aspect of information security and ensures that sensitive information is protected and only accessible by authorized individuals or entities.

Question 10

Direct attacks originate from a compromised system or resource that is malfunctioning or working under the control of a threat._________________________

Accepted Answer

Indirect

Question 11

MULTICS stands for Multiple Information and Computing Service._________________________

Accepted Answer

Multiplexed

Question 12

____ security addresses the issues necessary to protect the tangible items,objects,or areas of an organization from unauthorized access and misuse.
A)Physical
B)Personal
C)Object
D)Standard

Accepted Answer

Physical security solely addresses the protection of tangible items and areas of an organization from unauthorized access or misuse. Personal security pertains to the protection of employees or individuals, object security pertains to the protection of specific items or assets, and standard security relates to adherence to established protocols or regulations.

Question 13

In information security,salami theft occurs when an employee steals a few pieces of information at a time,knowing that taking more would be noticed - but eventually the employee gets something complete or useable._________________________

Accepted Answer

Salami theft is a real concept in information security where an employee steals small pieces of information at a time, hoping that taking larger amounts would get noticed. The employee continues to do this until they have enough usable information or data to cause harm.

Question 14

Information security can begin as a grassroots effort in which systems administrators attempt to improve the security of their systems,which is often referred to as a bottom-up approach._________________________

Accepted Answer

The statement correctly describes the bottom-up approach to information security.

Question 15

In general,protection is "the quality or state of being secure-to be free from danger." _________________________

Accepted Answer

security

Question 16

The Analysis phase of the SecSDLC begins with a directive from upper management._________________________

Accepted Answer

Investigation

Question 17

Key end users should be assigned to a developmental team,known as the united application development team._________________________

Accepted Answer

joint

Question 18

Risk evaluation is the process of identifying,assessing,and evaluating the levels of risk facing the organization,specifically the threats to the organization's security and to the information stored and processed by the organization._________________________

Accepted Answer

management

Question 19

A(n)project team should consist of a number of individuals who are experienced in one or multiple facets of the technical and nontechnical areas._________________________

Accepted Answer

A project team should consist of individuals with diverse skills and expertise in both technical and non-technical areas to ensure the successful completion of the project.

Question 20

Policies are written instructions for accomplishing a specific task._________________________

Accepted Answer

Procedures

Quiz 1: Introduction to Information Security

____ is the predecessor to the Internet.