Info Sec Quiz 1

Front 1

All digital data is represented by 1 and 0

Back 1

True

Front 2

You're the chief security contract for a company. Primary task is to document everything related to security and create a manual that can be used to manage the company in your absence. Which documents should be referenced in our manual as the ones that identify the methods used to accomplish a given task?

Back 2

Guidelines

Front 3

Which of the following strategies involves identifying a risk and making the decision to discontinue engaging in the action

Back 3

risk avoidance

Front 4

Which of the following policies are designed to reduce the risk of fraud and prevent other losses in an organization.

Back 4

separation of duties

Front 5

risk acceptance involves understanding something about the enemy and letting them know the harm that can come their way if they cause harm to you

Back 5

False - this is risk deterrence

Front 6

Least privilege grants users access to only the permissions they need to do their job

Back 6

True

Front 7

False negatives are events that aren't really incidents.

Back 7

False

Front 8

Which of the following policies describes how the employees in an organization can use company systems and resources, both software and hardware?

Back 8

Acceptable use

Front 9

risk calculations weight a potential vulnerability against the likelihood or probability of it occurring

Back 9

False

Front 10

one of the tools that can be used to assess risk is a tabletop exercise

Back 10

True

Front 11

Business impact analysis is the process of evaluating all of the critical systems in an organization to define impact and recovery plans

Back 11

True

Front 12

identification is finding out who someone is while authentication is the mechanism to verify that authentication.

Back 12

True

Front 13

A system that uses smart cards and passwords is referred to as two-factor authentication

Back 13

True

Front 14

an access control approach that uses security labels is known as a discretionary access control

Back 14

False

Front 15

what is the term that is used whenever two or more parties authenticate each other?

Back 15

mutual authentication

Front 16

your office admin is bring trained to perform server backups. Which authentication method would be ideal for this situation?

Back 16

RBAC - role based

Front 17

upper management has suddenly become concerned about security. As the senior network admin, you are asked to suggest changes that should be implemented. Which of the access methods should you recommend if the technique to be used is one that is primarily based on pre-established access and can't be changed by users?

Back 17

MAC - mandatory access control

Front 18

Which technology allows a connection to be made between two networks using a secure protocol?

Back 18

Tunneling

Front 19

Your company provides medical data to doctors from a worldwide database. Because of the sensitive nature of the data, it's imperative that authentication be established on each session and be valid only for that session. Which of the following authentication methods provides credentials that are valid only during a single session?

Back 19

Tokens

Front 20

To keep users from changing their password to the same value as the old one, or to one they used the last time around, you should enable

Back 20

password history

Front 21

What is invoked when a person claims that they are the user but cannot be authenticated

Back 21

identity proofing

Front 22

confidentiality

Back 22

a set of rules that limits access to information

Front 23

Integrity

Back 23

the assurance that the information is trustworthy and accurate

Front 24

availability

Back 24

guarantee of reliable access to the information by authorized people.

Front 25

what is defense in depth?

Back 25

use of multiple security countermeasures to protect integrity of information.

Front 26

based on what military principle?

Back 26

That it is much more difficult to defeat a complex defense system that has many layers than to penetrate a single barrier.

Front 27

components of defense in depth?

Back 27

antivirus, firewalls, anti-spyware programs, biometric verification, also physical protection such as armed guards, doors, safes.