Question 1

(p.D)Recommendations as it relates to a policy is a function of
A)Standards
B)Guidelines
C)Laws and regulations
D)CIRT emails

Accepted Answer

B

Question 2

A fire suppression system that is safe for humans,but will destroy equipment is
A)Halon
B)Sprinkler-based systems
C)Argon
D)Carbon dioxide

Accepted Answer

Sprinkler-based systems use water to suppress fires, which is safe for humans but can damage electronic equipment.

Question 3

Your boss needs instructions explaining the steps of how to send encrypted email properly for all employees.You will need to create the _________.
A)policy
B)procedure
C)standard
D)guideline

Accepted Answer

A procedure provides specific instructions on how to carry out a task. In this case, the task is sending an encrypted email, which requires a step-by-step process to ensure it is done properly. A policy defines the rules and guidelines around a specific topic, a standard outlines the specifications or requirements for a particular process or product, and a guideline provides general recommendations. A procedure is the best choice for instructing employees on how to send encrypted emails.

Question 4

802.11 wireless networks in relation to wired networks are
A)Difficult to set up and less secure
B)Easy to set up and easy to secure
C)Difficult to set up but more secure
D)Easy to set up but less secure

Accepted Answer

802.11 wireless networks are generally easy to set up and configure. However, they can be less secure than wired networks because the radio waves used for wireless communication can pass through walls and other physical boundaries, making them more vulnerable to interception and unauthorized access. Therefore, the best choice is D – easy to set up but less secure.

Question 5

Which of the following is NOT one of the three basic ways to protect electromagnetic emanations?
A)Put the equipment beyond the point that the emanations can be picked up.
B)Provide shielding for the equipment itself.
C)Create a reverse magnetic field around the equipment to cancel out waves emanating from or going to the equipment.
D)Provide a shielded enclosure (such as a room)to put the equipment in.

Accepted Answer

The three basic ways to protect electromagnetic emanations are to put the equipment beyond the point that the emanations can be picked up, provide shielding for the equipment itself, and provide a shielded enclosure (such as a room) to put the equipment in. Creating a reverse magnetic field around the equipment to cancel out waves emanating from or going to the equipment is not one of the basic ways to protect electromagnetic emanations.

Question 6

Locks,sign-in logs,and security guards are examples of
A)Access controls.
B)Intrusion detection mechanisms.
C)Authentication methods.
D)Auditing devices.

Accepted Answer

Access controls are security measures that limit who can access resources or information. Locks, sign-in logs, and security guards are all physical access controls that restrict access to a building or specific area. Intrusion detection mechanisms are used to monitor network traffic and detect unauthorized access attempts. Authentication methods verify a user's identity before granting access to resources. Auditing devices track and record access to systems and resources for accountability and compliance purposes. While all four options are related to security, access controls are the most appropriate category for locks, sign-in logs, and security guards.

Question 7

Bluetooth is a wireless technology that is used for
A)Underwater communications
B)Long-range communications
C)Short-range communications
D)Space communications

Accepted Answer

Bluetooth technology is primarily used for short-range communications between devices, typically within a range of 10 meters or less. While it is possible to use Bluetooth underwater or for long-range communications, its primary and most common use is for short-range wireless connectivity between devices such as smartphones, headphones, and speakers. Bluetooth is not used for space communications.

Question 8

Procedures are high-level,broad statements of what the organization wants to accomplish.

Accepted Answer

Procedures are actually detailed, step-by-step instructions on how to carry out specific tasks or activities within the organization. They are more specific than policies and are used to guide employees in their daily work.

Question 9

The company CIO wants you and your team to check the security of the network by simulating an attack by malicious individuals.He is asking you to
A)Do something illegal
B)Conduct a vulnerability assessment
C)Conduct a penetration test
D)Analyze the risk the network faces

Accepted Answer

Conducting a penetration test is the best choice as it involves simulating an attack on the network to identify vulnerabilities and assess the effectiveness of security controls. This is a legal and ethical approach to testing the security of a network. Options A and D are not appropriate as they involve illegal or unethical actions. Option B, conducting a vulnerability assessment, is also important but not as comprehensive as a penetration test as it focuses on identifying weaknesses in the network without actively trying to exploit them.

Question 10

A critical piece of equipment that provides power to systems even during a black out is called a(n)_______________.
A)power strip
B)surge protector
C)uninterruptible power supply
D)password generator

Accepted Answer

An uninterruptible power supply (UPS) provides backup power to devices during a power outage or disturbance. It can maintain power for a few minutes allowing for proper shutdown of devices or it can provide power for a longer period of time to allow for continuity of critical operations. Power strips and surge protectors do not provide backup power during a blackout. A password generator is not related to power supply.

Question 11

What is the problem described by the van Eck phenomenon and studied under TEMPEST?
A)Electromagnetic pulses destroying sensitive computer equipment
B)Magnetic fields that interfere with signals crossing Local Area Network (LAN)cables
C)Electromagnetic eavesdropping
D)Piggybacking on electromagnetic communications

Accepted Answer

The van Eck phenomenon refers to the unintentional emission of electromagnetic radiation from electronic devices, which can be intercepted and reconstructed to reveal sensitive information. TEMPEST is a set of technical standards and countermeasures developed by the US government to prevent this type of electromagnetic eavesdropping.

Question 12

Statements made by management that lays out the organization's position on an issue are called ________.
A)policies
B)procedures
C)standards
D)guidelines

Accepted Answer

Policies are statements made by management that lay out the organization's position on an issue. Procedures are step-by-step instructions for carrying out a specific task or activity. Standards are established criteria or principles that must be met or followed, and guidelines are recommendations or suggestions for best practices.

Question 13

IEEE 802.11 is a set of standards suited for
A)Wide area networks
B)Local area networks
C)Personal area networks
D)Cellular networks.

Accepted Answer

IEEE 802.11 standards are designed specifically for Local Area Networks (LANs) which have a limited geographical range and are typically used within the same building or campus. Therefore, the best choice is B, Local area networks. The other options A, Wide area networks, C, Personal area networks, and D, Cellular networks, have their own unique set of standards and protocols that are suited for their specific purposes.

Question 14

The outermost layer of physical security should
A)Be where the most specific controls are
B)Have the strongest authentication controls
C)Contain the most private activities
D)Contain the most publicly visible activities

Accepted Answer

The outermost layer of physical security should contain the most publicly visible activities, such as checkpoints, guards, or surveillance cameras, to deter potential attackers and provide a sense of security to the people inside. The most specific controls, the strongest authentication controls, and the most private activities should be placed deeper inside the physical security zone, closer to the valuable assets or critical systems that need to be protected.

Question 15

What fire-suppression system is the best for areas with expensive computer equipment?
A)Water (sprinklers)
B)Handheld fire extinguishers
C)Halon-based
D)Sand buckets

Accepted Answer

Halon-based fire suppression systems are generally the best choice for areas with expensive computer equipment as they are clean and do not leave any residue that could damage the equipment. Halon-based systems work by reducing the oxygen levels in a room, which extinguishes the fire without damaging the equipment or causing any harm to occupants. Water sprinklers or handheld fire extinguishers are not recommended as they can cause significant damage to the equipment, while sand buckets may not be effective in extinguishing a fire in electronic equipment.

Question 16

The greatest danger to networks comes from
A)Foreign hackers
B)Attacks coming across the public switched telephone network
C)Natural disasters
D)Insiders

Accepted Answer

Insiders, such as disgruntled employees or contractors, pose a greater threat to networks because they have intimate knowledge of the system and may have access to sensitive information or systems. They can intentionally launch attacks or accidentally cause problems due to negligence. While foreign hackers and attacks from the public switched telephone network are significant threats, they can be prevented or mitigated through proper security measures such as firewalls and encryption. Natural disasters can also cause disruptions, but they are generally beyond human control and can be prepared for through contingency planning.

Question 17

The three types of authentication used for access control are
A)Passwords,tokens,and key cards
B)Something you have,something you know,something you are
C)Encryption,deception,retention
D)Encryption,hashes,signatures.

Accepted Answer

The three types of authentication used for access control are something you have (e.g. token or key card), something you know (e.g. password), and something you are (e.g. biometrics). This is commonly referred to as the "triad of authentication" and is considered the best choice for access control as it provides multiple layers of security. Option A is partially correct, but it only lists three specific examples of the "triad of authentication." Options C and D are incorrect as they list encryption, hashes, and signatures which are not authentication methods.

Question 18

A fire suppression system that is safe for equipment,but dangerous for humans is
A)Halon
B)Sprinkler-based systems
C)Class A fire extinguisher
D)Water-based systems.

Accepted Answer

Halon fire suppression systems are effective in extinguishing fires without damaging sensitive equipment, but they can be hazardous to humans if inhaled in significant quantities, as they remove oxygen from the air to extinguish the fire.

Question 19

The most sensitive equipment should be located
A)At the outer perimeter of the building
B)In a publicly accessible area
C)Deep inside the organization
D)Wherever it is easiest for employees to access it

Accepted Answer

The most sensitive equipment should be located deep inside the organization to limit access to only those who need it and to reduce the risk of theft or tampering. Placing it at the outer perimeter or in a publicly accessible area increases the risk of unauthorized access, theft or vandalism. Placing it where it is easiest for employees to access may not take into account the security implications of such access.

Question 20

The location where wireless access points are placed can
A)Interfere with other wired network communications
B)Make it easier or harder for and attacker to access the network
C)Cause electromagnetic interference
D)Cause illness from prolonged exposure

Accepted Answer

The location of wireless access points can impact the level of security and ease of access for attackers attempting to breach the network. Therefore, choosing a strategic location can enhance network security. The other options (A, C, D) are potential negative outcomes but are not the primary determining factor for where to place wireless access points.

Quiz 3: Operational-Organizational Security

(p.D) Recommendations as it relates to a policy is a function of

A fire suppression system that is safe for humans,but will destroy equipment is

Your boss needs instructions explaining the steps of how to send encrypted email properly for all employees.You will need to create the _________.

802.11 wireless networks in relation to wired networks are

Which of the following is NOT one of the three basic ways to protect electromagnetic emanations?

Locks,sign-in logs,and security guards are examples of

Bluetooth is a wireless technology that is used for

Procedures are high-level,broad statements of what the organization wants to accomplish.

The company CIO wants you and your team to check the security of the network by simulating an attack by malicious individuals.He is asking you to

A critical piece of equipment that provides power to systems even during a black out is called a(n) _______________.

What is the problem described by the van Eck phenomenon and studied under TEMPEST?

Statements made by management that lays out the organization's position on an issue are called ________.

IEEE 802.11 is a set of standards suited for

The outermost layer of physical security should

What fire-suppression system is the best for areas with expensive computer equipment?

The greatest danger to networks comes from

The three types of authentication used for access control are

A fire suppression system that is safe for equipment,but dangerous for humans is

The most sensitive equipment should be located

The location where wireless access points are placed can