Fundamentals of Information Security Exam
Materials
Course Introduction
Fundamentals of Information Security introduces students to the core principles, concepts, and practices of securing information systems in modern organizations. The course covers essential topics such as confidentiality, integrity, and availability; types of security threats; risk management strategies; cryptography; access control mechanisms; and network security basics. Students will also examine key legal, ethical, and policy issues related to information security, learning how to identify vulnerabilities and implement effective safeguards. Emphasis is placed on practical approaches for protecting information assets and responding to security incidents in real-world environments.
Recommended Textbook
Security+ Guide to Network Security Fundamentals 4th Edition by Mark Ciampa
Available Study Resources on Quizplus
14 Chapters
588 Verified Questions
588 Flashcards
Source URL: https://quizplus.com/study-set/1054 Page 2
Chapter 1: Introduction to Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20875
Sample Questions
Q1) Approximately ____ percent of households in the United States use the Internet for managing their finances.
A) 60
B) 70
C) 80
D) 90
Answer: C
Q2) What is another name for unsolicited e-mail messages?
A) spam
B) spawn
C) trash
D) scam
Answer: A
Q3) What is the maximum fine for those who wrongfully disclose individually identifiable health information with the intent to sell it?
A) $100,000
B) $250,000
C) $500,000
D) $1,000,000
Answer: B
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Malware and Social Engineering Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20876
Sample Questions
Q1) A ____ is a set of software tools used by an attacker to hide the actions or presence of other types of malicious software, such as Trojans, viruses, or worms.
A) rootkit
B) backdoor
C) wrapper
D) shield
Answer: A
Q2) Describe a macro virus.
Answer: A macro virus is written in a script known as a macro. A macro is a series of commands and instructions that can be grouped together as a single command. Macros often are used to automate a complex set of tasks or a repeated series of tasks. Macros can be written by using a macro language, such as Visual Basic for Applications (VBA), and are stored within the user document (such as in an Excel .XLSX worksheet). A macro virus takes advantage of the "trust" relationship between the application (Excel) and the operating system (Microsoft Windows). Once the user document is opened, the macro virus instructions execute and infect the computer.
To view all questions and flashcards with answers, click on the resource link above.
4
Chapter 3: Application and Network Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20877
Sample Questions
Q1) ____ substitutes DNS addresses so that the computer is automatically redirected to another device.
A) DNS poisoning
B) Phishing
C) DNS marking
D) DNS overloading
Answer: A
Q2) Users who access a Web server are usually restricted to the ____ directory.
A) top
B) base
C) root
D) tap
Answer: C
Q3) A(n) ____________________ is a method for adding annotations to the text so that the additions can be distinguished from the text itself.
Answer: markup language
Q4) Why would you want to limit access to the root directory of a Web server?
Answer: Limiting access to the root directory prevents unauthorized users from accessing sensitive files on the server.
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Vulnerability Assessment and Mitigating Attacks
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20878
Sample Questions
Q1) When a security hardware device fails or a program aborts, which state should it go into?
Q2) List and describe the elements that make up a security posture.
Q3) The first step in a vulnerability assessment is to determine the assets that need to be protected.
A)True
B)False
Q4) ____ is a means by which an organization can transfer the risk to a third party who can demonstrate a higher capability at managing or reducing risks.
A) Insourcing
B) Outsourcing
C) Outcasting
D) Inhousing
Q5) Most vulnerability scanners maintain a(n) ____________________ that categorizes and describes the vulnerabilities that it can detect.
Q6) Describe a penetration testing report.
Q7) Describe the purpose of a honeypot.
Q8) Discuss one type of asset that an organization might have.
Q9) List and describe two common uses for a protocol analyzer.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Host, Application, and Data Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20879
Sample Questions
Q1) Identify one of the capabilities of DLP agents.
Q2) In ____, a virtualized environment is created that simulates the central processing unit (CPU) and memory of the computer.
A) heuristic detection
B) pattern detection
C) hybrid detection
D) combination detection
Q3) ID badges that can be detected by a proximity reader are often fitted with tiny radio ____ tags.
A) wave
B) pulse
C) AFID
D) RFID
Q4) Describe how a DLP can be configured.
Q5) Explain how tailgate sensors work.
Q6) Explain remote wipe/sanitation.
Q7) ____________________ locks keep a record of when the door was opened and by which code.
Page 7
Q8) What are the three states of data that DLP typically examines?
Q9) Describe a mantrap.
To view all questions and flashcards with answers, click on the resource link above.
Page 8
Chapter 6: Network Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20880
Sample Questions
Q1) ____ provides remote users with the same access and functionality as local users through a VPN or dial-up connection.
A) Extranet
B) Remote access
C) Intranet
D) Virtual access
Q2) Workgroup switches must work faster than core switches.
A)True
B)False
Q3) Describe how NAC works.
Q4) The OSI model breaks networking steps down into a series of six layers.
A)True
B)False
Q5) A(n) ____ can block malicious content in "real time" as it appears without first knowing the URL of a dangerous site.
A) application gateway
B) security proxy
C) Web security gateway
D) firewall
Q6) The key to the OSI reference model is ____________________.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 7: Administering a Secure Network
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20881
Sample Questions
Q1) Describe one way to use FTP on a local host computer.
Q2) ____ can be used to determine whether new IP addresses are attempting to probe the network.
A) DNS logs
B) Firewall logs
C) DHCP logs
D) Proxy logs
Q3) ____________________ computing is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.
Q4) TCP port ____ is the FTP control port used for passing FTP commands.
A) 19
B) 20
C) 21
D) 22
Q5) Why is the Physical Layer omitted in the TCP/IP model?
Q6) List and describe three benefits offered by IP telephony.
Q7) List the steps of a DNS lookup.
Q8) List and describe the three service models of cloud computing.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 8: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20882
Sample Questions
Q1) ____________________ technology enables users to connect wirelessly to a wide range of computing and telecommunications devices.
Q2) EAP request packets are issued by the ____.
A) supplicant
B) authenticator
C) authentication server
D) proxy
Q3) A group of piconets in which connections exist between different piconets is called a ____.
A) broadnet
B) honeynet
C) boundnet
D) scatternet
Q4) ____ is the encryption protocol standard for WPA2.
A) AES-CCMP
B) AES-CTR
C) AES-TKIP
D) AES-SCMP
Q5) If the EAP authentication is successful, a success packet is sent to the
11
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Access Control Fundamentals
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20883
Sample Questions
Q1) A user or a process functioning on behalf of the user that attempts to access an object is known as the ____.
A) subject
B) reference monitor
C) entity
D) label
Q2) ____ is often used for managing user access to one or more systems.
A) Role Based Access Control
B) Mandatory Access Control
C) Rule Based Access Control
D) Discretionary Access Control
Q3) Discuss the two significant weaknesses of DAC.
Q4) A RADIUS ____________________ is a computer that forwards RADIUS messages among RADIUS clients and RADIUS servers.
Q5) The capability to look up information by name under the X.500 standard is known as a(n) ____________________-pages service.
Q6) List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.
Q7) Describe the MAC lattice model.
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 10: Authentication and Account Management
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20884
Sample Questions
Q1) A(n) ____________________ attack begins with the attacker creating encrypted versions of common dictionary words, and then comparing them against those in a stolen password file.
Q2) Using a rainbow table to crack a password requires three steps.
A)True
B)False
Q3) Discuss the weaknesses of OpenID.
Q4) ____ is using a single authentication credential that is shared across multiple networks.
A) Access management
B) Authorization management
C) Identity management
D) Risk management
Q5) ____________________ is a decentralized open source FIM that does not require specific software to be installed on the desktop.
Q6) The most common type of authentication today is a(n) ____________________.
Q7) Discuss the types of shortcuts that users take to help them recall their passwords.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Q8) In most systems, a user logging in would be asked to ____________________ herself.
Chapter 11: Basic Cryptography
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20885
Sample Questions
Q1) Describe the origins of cryptography.
Q2) Describe how a block cipher works.
Q3) The ____ is essentially a chip on the motherboard of the computer that provides cryptographic services.
A) TPM
B) SCM
C) reference monitor
D) ODS
Q4) Cryptography cannot be applied to entire disks.
A)True
B)False
Q5) The most basic type of cryptographic algorithm is a ____ algorithm.
A) hash
B) key
C) digest
D) block
Q6) A(n) ____________________ is a method used by operating systems to store, retrieve, and organize files.
Q7) List and describe the characteristics a hashing algorithm must have to be considered secure.
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 12: Advanced Cryptography
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20886
Sample Questions
Q1) List two requirements for verification of an EV SSL.
Q2) Key ____ removes all private and public keys along with the user's identification information in the CA.
A) renewal
B) escrow
C) generation
D) destruction
Q3) The ____ model is the basis for digital certificates issued to Internet users.
A) third-party trust
B) related trust
C) managed trust
D) distributed trust
Q4) Explain the difference between key revocation versus key suspension.
Q5) List three pieces of information a digital certificate typically contains.
Q6) Cryptography cannot protect data as it is being transported across a network.
A)True
B)False
Q7) A(n) ____________________ trust model can be used in an organization where one CA is responsible for only the digital certificates for that organization.
Page 15
To view all questions and flashcards with answers, click on the resource link above.
Chapter 13: Business Continuity
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20887
Sample Questions
Q1) Windows stores files on a hard drive in 512-byte blocks called
Q2) A subset of business continuity planning and testing is disaster recovery, also known as IT recovery planning.
A)True
B)False
Q3) Explain how to best capture volatile data.
Q4) A ____ is a component or entity in a system which, if it no longer functions, will disable the entire system.
A) recovery site
B) recovery point
C) single point of failure
D) cascade point of failure
Q5) A ____ is a snapshot of the current state of the computer that contains all current settings and data.
A) system standard
B) system view
C) system image
D) system baseline
To view all questions and flashcards with answers, click on the resource link above. Page 16
Chapter 14: Risk Mitigation
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/20888
Sample Questions
Q1) ____ are generally considered to be the most important information security policies.
A) Acceptable use policies
B) Encryption policies
C) Data loss policies
D) VPN policies
Q2) Education in an enterprise is limited to the average employee.
A)True
B)False
Q3) ____ can be defined as the "framework" and functions required to enable incident response and incident handling within an organization.
A) Incident reporting
B) Incident management
C) Incident handling
D) Incident planning
Q4) What is a general security tip for using a social networking site?
Q5) List two characteristics of a policy.
Q6) ____________________ seeks to approach changes systematically and provide the necessary documentation of the changes.
Page 17
To view all questions and flashcards with answers, click on the resource link above.