Ethical Hacking and Countermeasures
Question Bank
Course Introduction
This course explores the principles and practices of ethical hacking, providing students with hands-on experience in identifying, analyzing, and mitigating security vulnerabilities in computer systems and networks. Emphasizing the legal and ethical responsibilities of security professionals, the course covers key techniques such as penetration testing, vulnerability assessment, network reconnaissance, exploitation, and reporting. Students learn to employ industry-standard tools and methodologies to expose weaknesses and implement effective countermeasures, while understanding the frameworks for ethical behavior and compliance with security policies and laws. By the end of the course, participants are equipped with the skills to proactively defend systems, anticipate attacks, and contribute to the overall security posture of organizations.
Recommended Textbook
Principles of Information Security 4th Edition by Michael E. Whitman
Available Study Resources on Quizplus
12 Chapters
1111 Verified Questions
1111 Flashcards
Source URL: https://quizplus.com/study-set/2244
Page 2
Chapter 1: Introduction to Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44634
Sample Questions
Q1) A computer is the ____________________ of an attack when it is the target entity.
Answer: object
Q2) A data custodian works directly with data owners and is responsible for the storage,maintenance,and protection of the information.
A)True
B)False
Answer: True
Q3) The value of information comes from the characteristics it possesses.
A)True
B)False
Answer: True
Q4) The history of information security begins with the history of ____________________ security.
Answer: computer
Q5) Policies are written instructions for accomplishing a specific task._________________________
A)True
B)False
Answer: False
Page 3
To view all questions and flashcards with answers, click on the resource link above.
Chapter 2: The Need for Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44635
Sample Questions
Q1) A virus or worm can have a payload that installs a(n)____________________ door or trap door component in a system,which allows the attacker to access the system at will with special privileges.
Answer: back
Q2) Script ____________________ are hackers of limited skill who use expertly written software to attack a system.
Answer: kiddies
Q3) The macro virus infects the key operating system files located in a computer's boot sector._________________________
A)True
B)False
Answer: False
Q4) "4-1-9" fraud is an example of a ____ attack.
A)social engineering
B)virus
C)worm
D)spam
Answer: A
To view all questions and flashcards with answers, click on the resource link above.
Page 4
Chapter 3: Legal, Ethical, and Professional Issues in Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44636
Sample Questions
Q1) Established in January 2001,the National InfraGard Program began as a cooperative effort between the FBI's Cleveland Field Office and local technology professionals.
A)True
B)False
Answer: True
Q2) Which of the following countries reported generally intolerant attitudes toward personal use of organizational computing resources?
A)Australia
B)United States
C)Singapore
D)Sweden
Answer: C
Q3) Criminal or unethical ____ goes to the state of mind of the individual performing the act.
A)attitude
B)intent
C)accident
D)ignorance
Answer: B
Page 5
To view all questions and flashcards with answers, click on the resource link above.
Chapter 4: Risk Management
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44637
Sample Questions
Q1) You should adopt naming standards that do not convey information to potential system attackers.
A)True
B)False
Q2) The ____ security policy is a planning document that outlines the process of implementing security in the organization.
A)program
B)agency
C)issue-specific
D)system-specific
Q3) List Microsoft's "Ten Immutable Laws of Security" in any order
Q4) Risk ____ is the application of controls to reduce the risks to an organization's data and information systems.
A)management
B)control
C)identification
D)security
Q5) ____________________ is the probability that a specific vulnerability within an organization will be successfully attacked.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Planning for Security
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44638
Sample Questions
Q1) Standards may be published,scrutinized,and ratified by a group,as in formal or ____ standards.
A)de formale
B)de public
C)de jure
D)de facto
Q2) A(n)_________________________ plan ensures that critical business functions continue if a catastrophic incident or disaster occurs.
Q3) Each policy should contain procedures and a timetable for periodic review.
A)True
B)False
Q4) A(n)____________________ is a contract between two or more organizations that specifies how each will assist the other in the event of a disaster.
Q5) One of the basic tenets of security architectures is the layered implementation of security,which is called defense in layers._________________________
A)True
B)False
Q6) What is the purpose of security education,training,and awareness (SETA)?
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Security Technology: Firewalls and Vpns
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44639
Sample Questions
Q1) The presence of external requests for Telnet services can indicate a potential attack._________________________
A)True
B)False
Q2) A packet's structure is independent from the nature of the packet.
A)True
B)False
Q3) ____ inspection firewalls keep track of each network connection between internal and external systems.
A)Static
B)Dynamic
C)Stateful
D)Stateless
Q4) There are limits to the level of configurability and protection that software firewalls can provide.
A)True
B)False
Q5) SESAME uses ____________________ key encryption to distribute secret keys.
Q6) Content filters are often called ____________________ firewalls.
Q7) A trusted VPN is also known as a(n)____________________ VPN.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Security Technology: Intrusion Detection and
Prevention Systems, and Other Security Tools
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44640
Sample Questions
Q1) A signature-based IDPS is sometimes called a(n)____________________-based IDPS.
Q2) In the process of protocol application verification,the NIDPSs look for invalid data packets._________________________
A)True
B)False
Q3) A(n)server-based IDPS protects the server or host's information assets._________________________
A)True
B)False
Q4) A fully distributed IDPS control strategy is the opposite of the centralized strategy. A)True
B)False
Q5) ____________________ scanning will allow the Nmap user to bounce your scan across a firewall by using one of the idle DMZ hosts as the initiator of the scan.
Q6) List and describe the three advantages of NIDPSs.
Q7) Alarm ____________________ and compaction is a consolidation of almost identical alarms that happen at close to the same time into a single higher-level alarm.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Cryptography
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44641
Sample Questions
Q1) A(n)man-in-the-middle attack attempts to intercept a public key or even to insert a known key structure in place of the requested public key._________________________
A)True
B)False
Q2) The encapsulating security ____________________ protocol provides secrecy for the contents of network communications as well as system-to-system authentication and data integrity verification.
Q3) The CA periodically distributes a(n)____ to all users that identifies all revoked certificates.
A)CRL
B)RA
C)MAC
D)AES
Q4) The process of hiding messages within the digital encoding of a picture or graphic is called ____________________.
Q5) To use a(n)____________________ cipher,you substitute one value for another.
Q6) The ____________________ cipher simply rearranges the values within a block to create the ciphertext.
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Physical Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44642
Sample Questions
Q1) Water-based systems are low cost,nontoxic,and can often be created by using an existing sprinkler system that may have been present in earlier construction.
A)True
B)False
Q2) A(n)_________________________ is typically worn concealed.
Q3) True online UPS can deliver a constant,smooth,conditioned power stream to computing systems.
A)True
B)False
Q4) Class ____ fires are extinguished by agents that remove oxygen from the fire.
A)A
B)B
C)C
D)D
Q5) Some sprinkler systems,called ____________________ systems,keep open all of the individual sprinkler heads,and as soon as the system is activated,water is immediately applied to all areas.
Q6) The thermal detection systems contain a sophisticated heat
Q7) Describe different types of sensors to detect intrusions.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Implementing Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44643
Sample Questions
Q1) ERP stands for enterprise ____________________ planning.
Q2) The first step in the WBS approach encompasses activities,but not deliverables. A)True
B)False
Q3) Planners need to estimate the effort required to complete each task,subtask,or action step.
A)True
B)False
Q4) Management should coordinate the organization's information security vision and objectives with the communities of ____________________ involved in the execution of the plan.
Q5) Regardless of where in the budget information security items are located,monetary ____________________ determine what can (and cannot)be accomplished.
Q6) Some cases of ____ are simple,such as requiring employees to use a new password beginning on an announced date.
A)phased implementation
B)direct changeover
C)pilot implementation
D)wrap-up
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Security and Personnel
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44644
Sample Questions
Q1) Once a candidate has accepted a job offer,the ____________________ becomes an important security instrument.
Q2) A mandatory furlough provides the organization with the ability to audit the work of an individual._________________________
A)True
B)False
Q3) A study of information security positions,done by Schwartz,Erwin,Weafer,and Briney,found that positions can be classified into one of ____ areas.
A)two
B)three
C)four
D)five
Q4) GIAC stands for Global Information Architecture Certification._________________________
A)True B)False
Q5) The SSCP covers ten domains. A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Information Security Maintenance
Available Study Resources on Quizplus for this Chatper
103 Verified Questions
103 Flashcards
Source URL: https://quizplus.com/quiz/44645
Sample Questions
Q1) List the four steps to developing a CM plan.
Q2) Rehearsal adds value by exercising the procedures,identifying shortcomings,and providing security personnel the opportunity to improve the security plan before it is needed.
A)True
B)False
Q3) Often,US-CERT is viewed as the definitive authority for computer emergency response teams.
A)True
B)False
Q4) When possible,major plan elements should be rehearsed._________________________
A)True
B)False
Q5) The process of identifying and documenting specific and provable flaws in the organization's information asset environment is called VA._________________________
A)True
B)False
Q6) A performance ____________________ is an expected level of performance against which all subsequent levels of performance are compared.
To view all questions and flashcards with answers, click on the resource link above. Page 14