Question 1

When using mirror disks, if one of the two disks containing the same data fails, the other disk also fails.

Accepted Answer

Mirror disks, also known as RAID 1, are designed for redundancy. If one disk fails, the other continues to operate, preserving the data.

Question 2

Social engineering is an attack that takes advantage of the backdoors in security systems.

Accepted Answer

Social engineering is an attack strategy that manipulates individuals into divulging confidential or personal information that may be used for fraudulent purposes, rather than exploiting technical vulnerabilities.

Question 3

In contrast to pharming, phishing involves hijacking an official Web site address by hacking a Domain Name System server.

Accepted Answer

Phishing typically involves tricking individuals into revealing personal information through deceptive emails or websites, not by hijacking DNS servers. Pharming, on the other hand, involves redirecting a website's traffic to a fraudulent site, which can be achieved by manipulating DNS entries.

Question 4

An intrusion detection system (IDS)can protect networks against both external and internal access.

Accepted Answer

An intrusion detection system (IDS) is designed to monitor network traffic for suspicious activity and known threats, thereby providing protection against unauthorized access from both external sources (hackers, malware) and internal sources (malicious insiders).

Question 5

A hot site, an alternative site to use in case of disaster, does not have the necessary equipment to get up an running immediately.

Accepted Answer

A hot site is a fully equipped alternative location where an organization can quickly resume operations after a disaster, with all necessary equipment and resources already in place.

Question 6

Application-filtering firewalls are less expensive than packet-filtering firewalls.

Accepted Answer

Application-filtering firewalls, which inspect the data being transmitted at the application layer, are generally more complex and resource-intensive than packet-filtering firewalls that operate at a lower level (network or transport layer). This complexity often makes application-filtering firewalls more expensive.

Question 7

When a program containing a virus is used, the virus attaches itself to other files, and the cycle continues.

Accepted Answer

A virus is a type of malware that, when executed, replicates itself by modifying other computer programs and inserting its own code. When it infects a program, it can attach itself to other executable files, thus continuing the cycle of infection.

Question 8

Level 1 security protects back-end systems to ensure confidentiality, accuracy, and integrity of data.

Accepted Answer

Level 1 security typically refers to basic security measures, which may not be sufficient to fully protect back-end systems and ensure confidentiality, accuracy, and integrity of data.

Question 9

If a drive in a redundant array of independent disks (RAID)system fails, data stored on it can be reconstructed from data stored on the remaining drives.

Accepted Answer

In RAID systems designed for redundancy (such as RAID 1, RAID 5, RAID 6), if a drive fails, the data it contained can be reconstructed using the data and parity information stored on the remaining drives in the array.

Question 10

Terminal resource security is a software feature that erases the screen and signs a user off automatically after a specified length of inactivity.

Accepted Answer

Terminal resource security is designed to protect sensitive information from being viewed by unauthorized individuals by automatically clearing the screen and logging the user off after a period of inactivity.

Question 11

In the context of the CIA triangle, confidentiality means that computers and networks are operating and authorized users can access the information they need.

Accepted Answer

Confidentiality in the CIA (Confidentiality, Integrity, Availability) triangle refers to the protection of information from unauthorized access or disclosure, not to the operational status of computers and networks or the ability of users to access information.

Question 12

When an organization develops a comprehensive security plan, it should set up a security committee with representatives from all departments as well as upper management.

Accepted Answer

A comprehensive security plan benefits from the insights and expertise of representatives from all departments, including upper management, to ensure all aspects of the organization's operations are considered and protected.

Question 13

In some instances, after examining an incoming packet, a firewall can send a message to the packet's sender that the attempt to transmit the packet has failed.

Accepted Answer

Firewalls can generate and send Internet Control Message Protocol (ICMP) messages back to the sender, indicating that a packet was not delivered for reasons such as the packet being denied by the firewall's filtering rules.

Question 14

The three important aspects of computer and network security, confidentiality, integrity, and availability, are collectively referred to as the CIA triangle.

Accepted Answer

The CIA triangle stands for Confidentiality, Integrity, and Availability, which are indeed the three key principles of computer and network security.

Question 15

Auction fraud is sending fraudulent e-mails that seem to come from legitimate sources, such as a bank or university.

Accepted Answer

Auction fraud typically involves the misrepresentation of products on online auction sites or failure to deliver products purchased through an auction. Sending fraudulent emails from seemingly legitimate sources is known as phishing.

Question 16

In the event of disaster, organizations should document all actions taken to regain normality.

Accepted Answer

Documenting all actions taken during a disaster recovery process is crucial for evaluating the response, improving future disaster preparedness, and providing a clear record of decisions and actions for accountability and learning purposes.

Question 17

The cost of setting up a virtual private network (VPN)is usually high.

Accepted Answer

Setting up a VPN can be relatively inexpensive, especially with the availability of many affordable or even free VPN services designed for individual and small business use.

Question 18

The main drawback of an intrusion detection system (IDS)is its inability to prevent denial-of-service (DoS)attacks.

Accepted Answer

The main drawback of an Intrusion Detection System (IDS) is not its inability to prevent denial-of-service (DoS) attacks specifically, but rather its general inability to actively block or prevent any attacks on its own. An IDS is designed to detect and alert on potential security threats, not to take action against them.

Question 19

Viruses can be transmitted through a network or through e-mail attachments.

Accepted Answer

Viruses can be transmitted through various digital means, including through network connections by exploiting vulnerabilities or through malicious email attachments that, when opened, can infect a system.

Question 20

When disaster strikes, an organization should contact the insurance company to resume normal operations as soon as possible.

Accepted Answer

Contacting the insurance company is a critical step for an organization after a disaster to report damages, file claims, and receive guidance on recovery procedures, which aids in resuming normal operations.

Quiz 5: Protecting Information Resources