Question 1

Janitors are no threat to information security since they have no access to company systems.

Accepted Answer

A) True 
 B)False

Question 2

_________ is any danger to which a system may be exposed.

Accepted Answer

A)  Exposure
B)  Information security
C)  Threat
D)  Security

Question 3

_____________________ is an attack in which the perpetrator uses social skills to trick or manipulate legitimate employees into providing confidential company information such as passwords.

Accepted Answer

A)  Dumpster diving
B)  Shoulder surfing
C)  Social engineering
D)  Tailgating

Question 4

Social engineering is a(n) ___________ threat on the part of the employee and a(n) _________ threat on the part of the social engineer.

Accepted Answer

A)  deliberate; unintentional
B)  deliberate; deliberate
C)  unintentional; deliberate
D)  unintentional; unintentional

Question 5

A ___________ is an attack by a programmer developing a system.

Accepted Answer

A)  back door
B)  denial-of-service attack
C)  phishing attack
D)  virus A

Question 6

A ___________ is a remote attack requiring user action.

Accepted Answer

A)  back door
B)  denial-of-service attack
C)  logic bomb
D)  phishing attack

Question 7

Blacklisting is when everything can run except what is on the list.

Accepted Answer

A) True 
 B)False  True

Question 8

Wireless is an untrusted network.

Accepted Answer

A) True 
 B)False

Question 9

Biometrics is something the user _______.

Accepted Answer

A)  Does
B)  Has
C)  Is
D)  Knows

Question 10

________________ is software that causes pop-up advertisements to appear on your screen.

Accepted Answer

The answer of ________________ is software that causes pop-up advertisements...

Question 11

Tracking down cybercriminals is the most difficult and only real challenge authorities face.

Accepted Answer

A) True 
 B)False

Question 12

According to the "Catching a Hacker" case, ____________ is one of the most sophisticated and destructive malicious software programs ever developed.

Accepted Answer

A)  the Heartbleed bug
B)  FireEye
C)  Shodan
D)  SpyEye

Question 13

Biometrics is an authentication tool.

Accepted Answer

A) True 
 B)False

Question 14

The main problem with multifactor authentication is _____________.

Accepted Answer

A)  it's a single point of failure
B)  it's too hard to do
C)  it will invade our privacy
D)  there are no problems with multifactor authentication

Question 15

Shodan's primary purpose is ___________.

Accepted Answer

A)  a hacker website
B)  a service that searches the internet for devices connected to the internet
C)  a website that shows which devices are vulnerable to hackers
D)  to help users search for other people who use similar devices

Question 16

The Shodan case illustrates ___________.

Accepted Answer

A)  how vulnerable all devices are, even if they aren't connected to the internet
B)  strong passwords aren't necessary on home devices since most hackers don't care about such a small target
C)  that hackers and security researchers use the same sites to identify vulnerabilities
D)  the government is doing nothing to protect our privacy

Question 17

You decide to use the password "1234" on your computer because you figure nobody cares enough about your information to steal it. This is a risk __________ strategy.

Accepted Answer

A)  acceptance
B)  analysis
C)  limitation
D)  transference

Question 18

Whitelisting is when nothing can run unless it is on the list.

Accepted Answer

A) True 
 B)False

Question 19

Which country is currently in a dispute with the US over bilateral hacking?

Accepted Answer

A)  Australia
B)  China
C)  India
D)  United Kingdom

Question 20

___________ is threatening to steal or actually stealing information from a company and then demanding payment to not use or release that information.

Accepted Answer

A)  Competitive intelligence
B)  Espionage
C)  Information extortion
D)  Intellectual property C

Exam 4: Information Security

Janitors are no threat to information security since they have no access to company systems.

Correct AnswerverifiedShow Answer

_________ is any danger to which a system may be exposed.

Correct AnswerverifiedShow Answer

_____________________ is an attack in which the perpetrator uses social skills to trick or manipulate legitimate employees into providing confidential company information such as passwords.

Correct AnswerverifiedShow Answer

Social engineering is a(n) ___________ threat on the part of the employee and a(n) _________ threat on the part of the social engineer.

Correct AnswerverifiedShow Answer

A ___________ is an attack by a programmer developing a system.

Correct AnswerverifiedA

A ___________ is a remote attack requiring user action.

Correct AnswerverifiedShow Answer

Blacklisting is when everything can run except what is on the list.

Correct AnswerverifiedTrue

Wireless is an untrusted network.

Correct AnswerverifiedShow Answer

Biometrics is something the user _______.

Correct AnswerverifiedShow Answer

________________ is software that causes pop-up advertisements to appear on your screen.

Correct AnswerverifiedShow Answer

Tracking down cybercriminals is the most difficult and only real challenge authorities face.

Correct AnswerverifiedShow Answer

According to the "Catching a Hacker" case, ____________ is one of the most sophisticated and destructive malicious software programs ever developed.

Correct AnswerverifiedShow Answer

Biometrics is an authentication tool.

Correct AnswerverifiedShow Answer

The main problem with multifactor authentication is _____________.

Correct AnswerverifiedShow Answer

Shodan's primary purpose is ___________.

Correct AnswerverifiedShow Answer

The Shodan case illustrates ___________.

Correct AnswerverifiedShow Answer

You decide to use the password "1234" on your computer because you figure nobody cares enough about your information to steal it. This is a risk __________ strategy.

Correct AnswerverifiedShow Answer

Whitelisting is when nothing can run unless it is on the list.

Correct AnswerverifiedShow Answer

Which country is currently in a dispute with the US over bilateral hacking?

Correct AnswerverifiedShow Answer

___________ is threatening to steal or actually stealing information from a company and then demanding payment to not use or release that information.

Correct AnswerverifiedC

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Social engineering is a(n) ___ threat on the part of the employee and a(n) _ threat on the part of the social engineer.

Correct Answer
verified

Correct Answer
verified
A

Correct Answer
verified

Correct Answer
verified
True

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
C