Question 1

__________ security addresses the issues necessary to protect the tangible items, objects, or areas of an organization from unauthorized access and misuse.

Accepted Answer

Physical security refers to the protection of physical objects or areas from unauthorized access or misuse. It includes measures such as locks, access control systems, surveillance cameras, and security guards to prevent theft, vandalism, or damage to physical assets such as buildings, equipment, and inventory. Personal and object security are not commonly used terms in the field of security, and standard security refers to the implementation of standardized security practices and procedures.

Question 2

MULTICS stands forMultiple Information and Computing Service. _________________________

Accepted Answer

Multiplexed

Question 3

Confidentiality ensures that only those with the rights and privileges to access information are able to do so. _________________________

Accepted Answer

Confidentiality is a key aspect of information security that is intended to ensure that sensitive information is only accessible by authorized individuals or systems. This helps to prevent unauthorized disclosure or misuse of information, which could cause harm to individuals or organizations. Confidentiality may be achieved through various means, such as encryption, access controls, and secure storage and transmission.

Question 4

A(n) project team should consist of a number of individuals who are experienced in one or multiple facets of the technical and nontechnical areas. _________________________

Accepted Answer

A project team should consist of individuals who have the necessary experience and expertise in the technical and non-technical aspects of the project to ensure success.

Question 5

__________ is a network project that preceded the Internet.

Accepted Answer

ARPANET was a network project funded by the U.S. Department of Defense's Advanced Research Projects Agency (ARPA) in the late 1960s and early 1970s. It was the precursor to the internet and was developed to share information between researchers and universities.

Question 6

A(n) hardwaresystem is the entire set of people, procedures, and technology that enable business to use information. _________________________

Accepted Answer

information

Question 7

Of the two approaches to information security implementation, the top-downapproach has a higher probability of success. _________________________

Accepted Answer

The top-down approach involves senior management taking a lead role in implementing information security policies, procedures, and controls throughout an organization. This approach is more likely to be successful because it ensures that information security policies are aligned with the organization's overall strategy and goals, and also promotes a culture of security awareness and compliance throughout the organization. The bottom-up approach, on the other hand, involves security professionals or individual business units within an organization driving the implementation of information security, which may not necessarily be aligned with the organization's overall strategy and goals.

Question 8

Key end users should be assigned to a developmental team, known as the united application development team. _________________________

Accepted Answer

joint

Question 9

Indirect attacks originate from a compromised system or resource that is malfunctioning or working under the control of a threat. _________________________

Accepted Answer

Indirect attacks, also known as indirect compromises, occur when a threat actor gains control over a legitimate or trusted system or resource, such as a server, cloud account or IoT device, and uses it to attack other systems, networks or data. The compromised resource may be functioning normally, but the threat actor manipulates or abuses its capabilities to carry out malicious activities, such as data theft, espionage, denial of service, malware propagation, or credential harvesting. Indirect attacks can be difficult to detect and stop because they often bypass perimeter defenses and appear as legitimate traffic or transactions.

Question 10

Information security can begin as a grassroots effort in which systems administrators attempt to improve the security of their systems, often referred to as the bottom-up approach. _________________________

Accepted Answer

This statement is true.

Question 11

The Security Development Life Cycle (SDLC) is a general methodology for the design and implementation of an information system. _________________________

Accepted Answer

Systems

Question 12

Information has redundancy when it is free from mistakes or errors and it has the value that the end user expects. _________________________

Accepted Answer

accuracy

Question 13

__________ was the first operating system to integrate security as one of its core functions.

Accepted Answer

MULTICS, developed in the 1960s, was the first operating system to consider security as a core function. It incorporated various security features, such as access control mechanisms and encryption, to protect the system from unauthorized access and data breaches. UNIX, which was developed later in the 1970s, inherited some of these security features from MULTICS. DOS and ARPANET were also developed in the 1970s but did not prioritize security as a core function.

Question 14

When unauthorized individuals or systems can view information, confidentiality is breached. _________________________

Accepted Answer

Confidentiality is breached when information can be viewed by those who are not authorized to access it.

Question 15

A server would experience a(n) __________ attack when a hacker compromises it to acquire information via a remote location using a network connection.

Accepted Answer

A direct attack involves the hacker attempting to gain access to a server or system through a network connection. In this scenario, the hacker is compromising the server remotely to acquire information, which falls under the definition of a direct attack.

Question 16

According to the CNSS, networking is "the protection of information and its critical elements." _________________________

Accepted Answer

information security

Question 17

The famous study entitled "Protection Analysis: Final Report" focused on a project undertaken by ARPA to understand and detect __________ in operating systems security.

Accepted Answer

The study specifically focuses on finding vulnerabilities in operating systems security, which are weaknesses that could be exploited by attackers. Bugs, malware, and maintenance hooks could all be factors in creating vulnerabilities, but they are not the primary focus of the study.

Question 18

The Analysis phase of the SDLC examines the event or plan that initiates the process and specifies the objectives, constraints, and scope of the project. _________________________

Accepted Answer

Investigation

Question 19

Hardware is the physical technology that houses and executes the software, stores and transports the data, and provides interfaces for the entry and removal of information from the system. _________________________

Accepted Answer

This statement is true. Hardware includes devices such as computers, smartphones, servers, printers, and other physical components that make up a computer system. It is responsible for executing software programs, storing data in memory or permanent storage, and providing input/output interfaces for the user to interact with the system.

Question 20

SecOps focuses on integrating the need for the development team to provide iterative and rapid improvements to system functionality and the need for the operations team to improve security and minimize the disruption from software release cycles. _________________________

Accepted Answer

DevOps

Quiz 1: Introduction to Information Security