Question 1

In contrast to pharming,phishing involves hijacking an official Web site address by hacking a Domain Name System server.

Accepted Answer

Phishing involves creating a fake website or email that mimics an official one to trick individuals into sharing sensitive information such as usernames or passwords. Pharming, on the other hand, redirects users to a fake website without their knowledge by hacking into the DNS server.

Question 2

_____ can interfere with users' control of their computers,through such methods as installing additional software and redirecting Web browsers.
A)Keystroke loggers
B)Spyware
C)Firmware
D)Script loggers

Accepted Answer

Spyware can interfere with users' control of their computers by installing additional software and redirecting web browsers. Keystroke loggers and script loggers only record user activity, while firmware refers to the software that controls hardware devices.

Question 3

Terminal resource security is a software feature that erases the screen and signs a user off automatically after a specified length of inactivity.

Accepted Answer

This feature ensures that if a user leaves their terminal unattended, no one can access their account or information. It is a security measure to protect against unauthorized access.

Question 4

Auction fraud is sending fraudulent e-mails that seem to come from legitimate sources,such as a bank or university.

Accepted Answer

Auction fraud is not related to sending fraudulent e-mails from legitimate sources like a bank or university. It is a type of online fraud where a seller posts items for sale but does not deliver the promised goods after receiving payment from the buyer.

Question 5

The cost of setting up a virtual private network (VPN)is usually high.

Accepted Answer

The cost of setting up a VPN can vary depending on the requirements and the vendor chosen. While it can be a significant investment for some organizations, there are also affordable options available for individuals and small businesses.

Question 6

The main drawback of an intrusion detection system (IDS)is its inability to prevent denial-of-service (DoS)attacks.

Accepted Answer

The main drawback of an Intrusion Detection System (IDS) is not its inability to prevent denial-of-service (DoS) attacks specifically, but rather its general inability to actively block or prevent any attacks on its own. An IDS is designed to detect and alert on potential security threats, not to take action against them.

Question 7

When a program containing a virus is used,the virus attaches itself to other files,and the cycle continues.

Accepted Answer

This is how viruses spread and infect other files.

Question 8

When using mirror disks,if one of the two disks containing the same data fails,the other disk also fails.

Accepted Answer

This statement is false. When one disk in a mirror set fails, the other disk can still function and provide the data, allowing for data recovery and continued operation.

Question 9

Viruses can be transmitted through a network or through e-mail attachments.

Accepted Answer

It is true that viruses can spread through a network or through e-mail attachments.

Question 10

The three important aspects of computer and network security,confidentiality,integrity,and availability,are collectively referred to as the CIA triangle.

Accepted Answer

The three important aspects of computer and network security are indeed confidentiality, integrity, and availability, and they are collectively referred to as the CIA triangle.

Question 11

When disaster strikes,an organization should contact the insurance company to resume normal operations as soon as possible.

Accepted Answer

Contacting the insurance company is important to resume normal operations and assess damages or losses that may be covered under the insurance policy.

Question 12

An intrusion detection system (IDS)can protect networks against both external and internal access.

Accepted Answer

IDS can monitor and detect any unauthorized access or malicious activity, both from external attackers and internal threats within the network.

Question 13

When an organization develops a comprehensive security plan,it should set up a security committee with representatives from all departments as well as upper management.

Accepted Answer

By establishing a security committee with representatives from all departments, the organization can ensure that all areas of the business are considered in the security plan and that there is buy-in from upper management.

Question 14

In the context of intentional computer and network threats,social engineers protects the integrity of information resources.

Accepted Answer

Social engineers are individuals who use social manipulation techniques to gain access to sensitive information. They do not protect the integrity of information resources, but rather threaten it.

Question 15

In some instances,after examining an incoming packet,a firewall can send a message to the packet's sender that the attempt to transmit the packet has failed.

Accepted Answer

This is known as a "rejection message", which informs the sender that their packet has been dropped by the firewall for violating certain rules or policies.

Question 16

Level 1 security protects back-end systems to ensure confidentiality,accuracy,and integrity of data.

Accepted Answer

The answer of Level 1 security protects back-end systems to...

Question 17

Application-filtering firewalls are less expensive than packet-filtering firewalls.

Accepted Answer

Application-filtering firewalls are generally more expensive than packet-filtering firewalls because they offer additional security features and require more processing power to analyze application-layer traffic.

Question 18

If a drive in a redundant array of independent disks (RAID)system fails,data stored on it can be reconstructed from data stored on the remaining drives.

Accepted Answer

This is the basic principle of RAID systems - to provide fault tolerance through data redundancy. When one drive fails, the data can still be accessed and reconstructed from the remaining drives.

Question 19

In the context of the CIA triangle,confidentiality means that computers and networks are operating and authorized users can access the information they need.

Accepted Answer

Confidentiality in the CIA (Confidentiality, Integrity, Availability) triangle refers to the protection of information from unauthorized access or disclosure, not to the operational status of computers and networks or the ability of users to access information.

Question 20

Social engineering is an attack that takes advantage of the backdoors in security systems.

Accepted Answer

Social engineering is an attack strategy that manipulates individuals into divulging confidential or personal information that may be used for fraudulent purposes, rather than exploiting technical vulnerabilities.

Quiz 5: Protecting Information Resources