Info Sec

Front 1

____ are individuals who want to attack computers yet they lack the knowledge of computers and networks needed to do so.

Back 1

Hacker

Front 2

Grouping individuals and organizations into clusters or groups based on their likes and interests is called ____.

Back 2

social networking

Front 3

A ____ is a collection of requirements specific to the system or procedure that must be met by everyone.

Back 3

standard

Front 4

AV software on a computer must have its ____ files regularly updated by downloads from the Internet.

Back 4

signature

Front 5

As a means of simplifying turning on WPA2 Personal, many devices now support ____ as an optional means of configuring security.

Back 5

Wi-Fi Protected Setup (WPS)

Front 6

Cryptography can also be applied to entire disks. This is known as ____ encryption and protects all data on a hard drive.

Back 6

whole disk

Front 7

A ____ self-replicates between computers (from one computer to another).

Back 7

worm

Front 8

In a well-run information security program, attacks will never get through security perimeters and local defenses.

Back 8

False

Front 9

Financial cybercrime is often divided into two categories. The first category focuses on individuals and businesses.

Back 9

True

Front 10

____ is the process of setting a user’s account to expire.

Back 10

Account expiration

Front 11

An attacker must be highly skilled in technical knowledge and abilities in order to be successful in a Social Engineering attack.

Back 11

False

Front 12

____ is sending an e-mail or displaying a Web announcement that falsely claims to be from a legitimate enterprise, in an attempt to trick the user into surrendering private information.

Back 12

Phishing

Front 13

A(n) ____ infection injects portions of the code throughout the program’s executable code instead of only at the end of the file (any overwritten original code is transferred and stored inside the virus code for proper execution of the host program after the infection).

Back 13

Swiss cheese

Front 14

To address the vulnerabilities in operating systems that are uncovered after the software has been released, software vendors usually deploy a software “fix” to address the vulnerabilities.

Back 14

True

Front 15

The ____ in a Wi-Fi network serves as the network name identifier.

Back 15

SSID

Front 16

Social engineering ____ means to create a fictitious character and then play out the role of that person on a victim.

Back 16

impersonation

Front 17

The two types of malware that have the primary objective of infecting a computer system are ____.

Back 17

viruses and worms

Front 18

Spyware usually performs one of the following functions on a user’s computer: ____, collecting personal information, or changing computer configurations.

Back 18

advertising

Front 19

A(n) ____ is a written document that states how an organization plans to protect the company’s information technology assets.

Back 19

security policy

Front 20

What is curently the best option for Wi-Fi security?

Back 20

WPA2

Front 21

Bruce Shneier suggest which password generation method?

Back 21

Combine a personally memorable sentence with some memorable tricks to modify that sentence into a password

Front 22

There is a straightforward and easy solution to securing computers.

Back 22

False

Front 23

A(n) ____ is a person or element that has the power to carry out a threat.

Back 23

threat agent

Front 24

____ is a nontoxic petroleum gel-based paint that is thickly applied and does not harden, making any coated surface very difficult to climb.

Back 24

Anti-climb paint

Front 25

Unless remote management is essential, it is recommended that this feature be disabled with a wireless router.

Back 25

True

Front 26

You should always be truthful when answering "secret questions" so that you have a way to reset your passwords should you forget them.

Back 26

False

Front 27

____ identify individuals within the organization who are in positions of authority.

Back 27

Organizational charts

Front 28

Virtually anyone could type in a person’s username and pretend to be that person.

Back 28

True

Front 29

Under____, healthcare enterprises must guard protected health information and implement policies and procedures to safeguard it, whether it be in paper or electronic format.

Back 29

HIPAA

Front 30

IEEE ____ combines the best features of 802.11b and 802.11a and is still used today.

Back 30

802.11g

Front 31

A ____ is essentially a duplicate of the organization’s main production site and has all the equipment needed for it to continue running, including office space and furniture, telephone jacks, computer equipment, and a live telecommunications link.

Back 31

hot site

Front 32

____ may reveal the true level of security within the organization.

Back 32

Policy manuals

Front 33

____ is defined as the ability of an organization to maintain its operations and services in the face of a disruptive event.

Back 33

Business continuity

Front 34

____ ensures that information is correct and no unauthorized person or malicious software has altered that data.

Back 34

Integrity

Front 35

From January 2005 through July 2012, over ____ electronic data records in the United States were breached, exposing to attackers a range of personal electronic data, such as address, Social Security numbers, health records, and credit card numbers.

Back 35

562 million

Front 36

One of the first software security applications is ____ software.

Back 36

antivirus

Front 37

Whereas tablets are designed for performance, laptops are focused on ease of use.

Back 37

False

Front 38

Which of the following is NOT generally a good method to be successful in a Social Engineering attack?

Back 38

Quickly getting the information from the victim

Front 39

____ attacks are often the means by which an attacker will perform an arbitrary code execution.

Back 39

Buffer overflow

Front 40

The ____ team is contacted whenever digital evidence needs to be preserved and serve as first responders.

Back 40

computer forensics response

Front 41

On tablets and smartphones, users should enable ____, which password-protects the device when it has not been used for a set period of time.

Back 41

auto-lock

Front 42

____ involves using someone’s personal information, such as a Social Security number, to establish bank or credit card accounts that are then left unpaid, leaving the victim with the debts and ruining their credit rating.

Back 42

Identity theft

Front 43

____ policy is a Microsoft Windows feature that provides centralized management and configuration of computers and remote users using the Microsoft directory service Active Directory (AD).

Back 43

Group

Front 44

Which of the following is NOT an example of an authorization technique or device?

Back 44

A survey on your political beliefs based on what you think

Front 45

Whereas phishing involves sending millions of generic e-mail messages to users, ____ targets only specific users.

Back 45

spear phishing

Front 46

____ ensures that data is accessible when needed to authorized users.

Back 46

Availability

Front 47

____ policy creates standards for using corporate e-mail.

Back 47

E-mail

Front 48

The best approach to establishing strong security with passwords is to use a ____.

Back 48

password management tool

Front 49

Most viruses can spread to other computers by themselves.

Back 49

False

Front 50

Which of the following is NOT a valid method of authentication?

Back 50

What you think

Front 51

In the field of computer networking and wireless communications, the most widely known and influential organization is the ____.

Back 51

IEEE

Front 52

Attackers today use common Internet ____ and applications to perform attacks, making it difficult to distinguish an attack from legitimate traffic.

Back 52

protocols

Front 53

A ____ silently captures and stores each keystroke that a user types on the computer’s keyboard.

Back 53

keylogger

Front 54

____ is software that displays a fictitious warning to the user in the attempt to “scare” the user into an action, such as purchasing additional software online to fix a problem that in fact does not exist.

Back 54

Scareware

Front 55

FACTA grants consumers free access to their credit score.

Back 55

False

Front 56

A ____ is a collection of suggestions that should be implemented.

Back 56

guideline

Front 57

One of the best defenses against attacks is to create ____ on a regular basis.

Back 57

data backups

Front 58

If a consumer finds a problem on her credit report, she must first send a letter to the credit-reporting agency. Under federal law, the agency has ____ days to investigate and respond to the alleged inaccuracy and issue a corrected report.

Back 58

30

Front 59

____ requires banks and financial institutions to alert customers of their policies and practices in disclosing customer information.

Back 59

GLBA

Front 60

Information (contained on the devices) is protected by three layers: products, ____, and policies and procedures.

Back 60

people

Front 61

A computer ____ is a person who has been hired to break into a computer and steal information.

Back 61

spy

Front 62

A(n) ____ address is a unique hardware number that is “burned in” to each wireless network interface card adapter.

Back 62

MAC

Front 63

The FBI defines ____ as any “premeditated, politically motivated attack against information, computer systems, computer programs, and data which results in violence against non-combatant targets by sub-national groups or clandestine agents.”

Back 63

cyberterrorism

Front 64

On tablets and smartphones, it is recommended to download and install a(n) ____ app that can erase the contents of the device if lost or stolen.

Back 64

remote wipe

Front 65

A(n) ____ is a type of action that has the potential to cause harm.

Back 65

threat

Front 66

The ____ of 2003 contains rules regarding consumer privacy.

Back 66

Fair and Accurate Credit Transactions Act

Front 67

A ____ is a program designed to take advantage of a vulnerability in an application or an operating system in order to enter a computer.

Back 67

worm

Front 68

The term ____ is frequently used to describe the tasks of securing information that is in a digital format.

Back 68

information security

Front 69

Attack tools can initiate new attacks without any human participation, thus increasing the speed at which systems are attacked.

Back 69

True

Front 70

“____” involves breaking into a car’s electronic system.

Back 70

Car hacking

Front 71

A(n) ____ is a flaw or weakness that allows a threat agent to bypass security.

Back 71

vulnerability

Front 72

A ____ is created when hundreds, thousands, or even tens of thousands of zombie computers are manipulated under remote control.

Back 72

botnet

Front 73

A ____ attack begins with the attacker creating digests of common dictionary words, and then comparing those in a stolen password file.

Back 73

dictionary

Front 74

The Web sites that facilitate linking individuals with common interests and function as an online community of users are called ____.

Back 74

social networking sites

Front 75

____ is the application of science to questions that are of interest to the legal profession.

Back 75

Forensics

Front 76

The weakness of passwords centers on human memory.

Back 76

True

Front 77

Instead of asking the user to visit a fraudulent Web site, ____ automatically redirects the user to the fake site.

Back 77

pharming

Front 78

Terrorists who turn their attacks to the network and computer infrastructure to cause panic among citizens are known as ____.

Back 78

cyberterrorists

Front 79

Because a wireless signal can only be transmitted for several hundred feet, multiple APs are used to provide “cells” or areas of coverage.

Back 79

True

Front 80

____ are independently rotating large cups (in diameter of 5 inches or 115 millimeters) affixed to the top of a fence to prevent the hands of intruders from gripping the top of a fence to climb over it.

Back 80

Roller barriers