Question 1

A __________ takes place when one entity pretends to be a different entity.
A) replay
B) masquerade
C) service denial
D) passive attack

Accepted Answer

A masquerade attack involves one entity pretending to be a different entity, often to gain unauthorized access to information or systems.

Question 2

the emphasis in dealing with __________ attacks is on prevention rather than detection.

Accepted Answer

The answer of the emphasis in dealing with __________ attacks...

Question 3

Active attacks can be subdivided into four categories: replay, __________ , modification of messages, and denial of service.

Accepted Answer

The answer of Active attacks can be subdivided into four...

Question 4

__________ is the property of a system, or a system resource being accessible and usable upon demand by an authorized system entity, according to performance specifications for the system.

Accepted Answer

The answer of __________ is the property of a system,...

Question 5

A __________ is a hardware and/or software capability that limits access between a network and device attached to the network, in accordance with a specific security policy.
A) trust model
B) cryptographic algorithm
C) firewall
D) router

Accepted Answer

A firewall is specifically designed to limit access between a network and devices attached to it, based on a set security policy, effectively controlling incoming and outgoing network traffic.

Question 6

__________ prevents either sender or receiver from denying a transmitted message.

Accepted Answer

The answer of __________ prevents either sender or receiver from...

Question 7

A ______________ is a process (or a device incorporating such a process) that is designed to detect, prevent, or recover from a security attack.

Accepted Answer

The answer of A ______________ is a process (or a...

Question 8

__________ is the insertion of bits into gaps in a data stream to frustrate traffic analysis attempts.

Accepted Answer

The answer of __________ is the insertion of bits into...

Question 9

A __________ is any action that compromises the security of information owned by an organization.
A) security attack
B) security service
C) security alert
D) security mechanism

Accepted Answer

A security attack is any action that compromises the security of information owned by an organization, as it directly targets the confidentiality, integrity, or availability of information.

Question 10

Digital __________ is data appended to, or a cryptographic transformation of, a data unit that allows a recipient of the data unit to prove the source and integrity of the data unit and protect against forgery.

Accepted Answer

The answer of Digital __________ is data appended to, or...

Question 11

the general security objectives of cybersecurity comprise the following: availability; integrity, which may include data authenticity and nonrepudiation; and __________ .

Accepted Answer

The answer of the general security objectives of cybersecurity comprise...

Question 12

Data appended to, or a cryptographic transformation of, a data unit that allows a recipient of the data unit to prove the source and integrity of the data unit and protect against forgery is a(n) ___________ .
A) security audit trail
B) digital signature
C) encipherment
D) authentication exchange

Accepted Answer

A digital signature is a cryptographic technique that verifies the origin and integrity of digital data, ensuring that the data has not been altered and confirming the identity of the sender.

Question 13

__________ is the protection of transmitted data from passive attacks.
A) Access control
B) Data control
C) Nonrepudiation
D) Confidentiality

Accepted Answer

Confidentiality ensures that transmitted data is protected from passive attacks, where an unauthorized party might attempt to access the data. It involves measures to prevent unauthorized access to information.

Question 14

A __________ attack attempts to learn or make use of information from the system but does not affect system resources.

Accepted Answer

The answer of A __________ attack attempts to learn or...

Question 15

An ___________ is any kind of malicious activity that attempts to collect, disrupt, deny, degrade, or destroy information system resources or the information itself.

Accepted Answer

The answer of An ___________ is any kind of malicious...

Question 16

A(n) __________ service is one that protects a system to ensure its availability and addresses the security concerns raised by denial-of-service attacks.
A) replay
B) availability
C) masquerade
D) integrity

Accepted Answer

Availability services are designed to ensure that systems remain accessible to authorized users, especially in the face of denial-of-service attacks which aim to make a service unavailable.

Question 17

two types of __________ attacks are the release of message contents and traffic analysis.
A) information
B) eavesdropping
C) service
D) passive

Accepted Answer

Passive attacks include the release of message contents and traffic analysis, as they involve monitoring and analyzing communications without altering them.

Question 18

A(n) __________ is any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, or the Nation through an information system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service.
A) threat
B) attack
C) risk
D) attack vector

Accepted Answer

A threat is defined as any circumstance or event that has the potential to negatively affect an organization through its information systems by various means such as unauthorized access, destruction, disclosure, modification of information, or denial of service.

Question 19

A _________ is a value computed with a cryptographic algorithm and associated with a data object in such a way that any recipient of the data can use the signature to verify the data's origin and integrity.
A) key exchange
B) digital signature
C) message authentication code
D) notarization

Accepted Answer

A digital signature is a cryptographic value that is associated with data to verify its origin and integrity, ensuring that the data has not been altered and confirming the identity of the sender.

Question 20

Verifying that users are who they say they are and that each input arriving at the system came from a trusted source is _________ .
A) authenticity
B) credibility
C) accountability
D) integrity

Accepted Answer

Authenticity involves verifying the identity of users and ensuring that data originates from a trusted source.

Quiz 1: Computer and Network Security Concepts

A __________ takes place when one entity pretends to be a different entity.

the emphasis in dealing with __________ attacks is on prevention rather than detection.

Active attacks can be subdivided into four categories: replay, __________ , modification of messages, and denial of service.

__________ is the property of a system, or a system resource being accessible and usable upon demand by an authorized system entity, according to performance specifications for the system.

A __________ is a hardware and/or software capability that limits access between a network and device attached to the network, in accordance with a specific security policy.

__________ prevents either sender or receiver from denying a transmitted message.

A ______________ is a process (or a device incorporating such a process) that is designed to detect, prevent, or recover from a security attack.

__________ is the insertion of bits into gaps in a data stream to frustrate traffic analysis attempts.

A __________ is any action that compromises the security of information owned by an organization.

Digital __________ is data appended to, or a cryptographic transformation of, a data unit that allows a recipient of the data unit to prove the source and integrity of the data unit and protect against forgery.

the general security objectives of cybersecurity comprise the following: availability; integrity, which may include data authenticity and nonrepudiation; and __________ .

Data appended to, or a cryptographic transformation of, a data unit that allows a recipient of the data unit to prove the source and integrity of the data unit and protect against forgery is a(n) ___________ .

__________ is the protection of transmitted data from passive attacks.

A __________ attack attempts to learn or make use of information from the system but does not affect system resources.

An ___________ is any kind of malicious activity that attempts to collect, disrupt, deny, degrade, or destroy information system resources or the information itself.

A(n) __________ service is one that protects a system to ensure its availability and addresses the security concerns raised by denial-of-service attacks.

two types of __________ attacks are the release of message contents and traffic analysis.

A _________ is a value computed with a cryptographic algorithm and associated with a data object in such a way that any recipient of the data can use the signature to verify the data's origin and integrity.

Verifying that users are who they say they are and that each input arriving at the system came from a trusted source is _________ .