Information Security Study
Guide Questions
Course Introduction
Information Security explores the principles and practices essential to safeguarding information assets in an increasingly digital world. The course covers fundamental concepts such as confidentiality, integrity, and availability, along with risk assessment, threat management, and security policies. Students will examine methods for securing computer systems, networks, databases, and applications, while also considering ethical, legal, and regulatory dimensions. Through theoretical knowledge and practical exercises, the course prepares students to identify vulnerabilities, implement protective measures, and respond to security incidents in a variety of organizational settings.
Recommended Textbook Hands On Ethical Hacking and Network Defense 2nd Edition by Michael T. Simpson
Available Study Resources on Quizplus
13 Chapters
673 Verified Questions
673 Flashcards
Source URL: https://quizplus.com/study-set/2085
Page 2
Chapter 1: Ethical Hacking Overview
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41510
Sample Questions
Q1) A ____ can be created that welcomes new users joining a chat session, even though a person isn't actually present to welcome them.
A)byte
B)packet
C)switch
D)bot
Answer: D
Q2) The ____ Institute Top 20 list details the most common network exploits and suggests ways of correcting vulnerabilities.
A)SANS
B)CompTIA
C)CERT
D)ISECOM
Answer: A
Q3) In the context of penetration testing, what is the gray box model?
Answer: The gray box model is a hybrid of the white and black box models.In this model,the company gives a tester only partial information.For example,the tester might get information about which OSs are used,but not get any network diagrams.
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Tcpip Concepts Review
Available Study Resources on Quizplus for this Chatper
57 Verified Questions
57 Flashcards
Source URL: https://quizplus.com/quiz/41511
Sample Questions
Q1) enables multiple users to communicate over the Internet in discussion forums
A)FTP
B)SMTP
C)SNMP
D)SSH
E)HTTP
F)IRC
G)URG
H)SYN
I)PSH
Answer: F
Q2) The most widely used is protocol is ____.
A)IPX/SPX
B)ATM
C)TCP/IP
D)NetBIOS
Answer: C
Q3) The IP in TCP/IP stands for ____________________.
Answer: Internet Protocol
To view all questions and flashcards with answers, click on the resource link above.
Page 4
Chapter 3: Network and Computer Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41512
Sample Questions
Q1) hardware keylogger
A)shell
B)W32/Sobig.F
C)Luckysploit
D)Ping of Death
E)KeyGhost
F)Melissa
G)Back Orifice
H)Slammer
I)Mytob
Answer: E
Q2) ____ is concerned with the security of computers or devices that are part of a network infrastructure.
A)Attack security
B)Cybercrime
C)Computer security
D)Network security
Answer: D
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Footprinting and Social Engineering
Available Study Resources on Quizplus for this Chatper
51 Verified Questions
51 Flashcards
Source URL: https://quizplus.com/quiz/41513
Sample Questions
Q1) With commands such as ____, you can perform zone transfers of all DNS records.
A)Dig
B)Whois
C)DNS
D)Netcat
Q2) List the five techniques used by social engineers in their attempts to gain information from unsuspecting people.
Q3) What is the purpose of a Web bug? How do they relate to or differ from spyware?
Q4) ____ is a Web tool used to gather IP and domain information. It is available for both UNIX and Window OSs.
A)Samba
B)Bugnosis
C)SamSpade
D)FOCA
Q5) ____ means using a knowledge of human nature to get information from people.
A)Fingerprinting
B)Footprinting
C)Zone transferring
D)Social engineering
Q6) Why is ATM shoulder surfing much easier than computer shoulder surfing?
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Port Scanning
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41514
Sample Questions
Q1) Why is it important for you as a security tester to understand and be able to create scripts?
Q2) does not allow entry or access to a service
A)Nmap
B)pcAnywhere
C)XMAS scan
D)connect scan
E)closed port
F)ACK scan
G)filtered port
H)open port
I)NULL scan
Q3) ____ is currently the standard port-scanning tool for security professionals.
A)Unicornscan
B)Fping
C)Nessus
D)Nmap
Q4) What makes the OpenVAS tool unique?
Q5) Why is port scanning considered legal by most security testers and hackers?
Q6) What is a UDP scan?
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Enumeration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41515
Sample Questions
Q1) ____ is a system process that runs on Windows OSs to facilitate the exchange of network data.
A)NetBIOS
B)Active Directory
C)NetDDE
D)IIS
Q2) What can be accomplished by typing "finger root" in *nix systems?
Q3) NetWare's ____ is a graphical Java utility for centralized network administration.
A)ConsoleOne
B)Bindery
C)eDirectory
D)Client32
Q4) As a security professional, should you learn about the security issues in the NetWare OS? Why or why not?
Q5) The "NBT" part of "NBTscan" is an abbreviation for ____________________ over TCP/IP.
Q6) List at least eight variations of UNIX.
Q7) How does Windows 7 differ from its predecessors?
To view all questions and flashcards with answers, click on the resource link above. Page 8
Q8) Why is enumeration a more intrusive process than port scanning or footprinting?
Chapter 7: Programming for Security Professionals
Available Study Resources on Quizplus for this Chatper
53 Verified Questions
53 Flashcards
Source URL: https://quizplus.com/quiz/41516
Sample Questions
Q1) You can use /* and */ instead of ____ symbol(s) for one-line comments in C.
A)#
B)#!
C)**
D)//
Q2) C programs must contain a(n) ____________________ function, but you can also add your own functions to a C program.
Q3) In Perl, the keyword "____" is used in front of function names.
A)func
B)declare
C)sub
D)proc
Q4) The ____ special character is used with the printf() function in C to indicate a tab. A)\t
B)\0
C)\n
D)\l
Q5) A loop usually completes after ____________________ is conducted on a variable and returns a value of true or false.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Desktop and Server Os Vulnerabilities
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41517
Sample Questions
Q1) ____ is a client/server technology designed to manage patching and updating systems software from the network.
A)Systems Management Server (SMS)
B)Software Update Services (SUS)
C)Automatic Update
D)Patch Manager
Q2) The MBSA can check for user account passwords that have dictionary words in them.
A)True
B)False
Q3) NetBIOS over TCP/IP is called ____ in Windows 2000 Server.
A)NBT
B)NetBEUI
C)NetBT
D)NetTCP/IP
Q4) What should a password policy include?
Q5) Why is NetBIOS still used sometimes?
Q6) In Windows Server 2003 and 2008, how does a domain controller locate resources in a domain?
Q7) RPC stands for ________________________.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Embedded Operating Systems: The Hidden Threat
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41518
Sample Questions
Q1) Why might attackers use social engineering techniques to masquerade as support technicians?
Q2) an operating system that runs in an embedded system
A)Windows Embedded Standard
B)Green Hill Software
C)RTLinux
D)VxWorks
E)RTEMS
F)embedded operating system
G)Quebec
H)QNX
I)SCADA
Q3) What types of systems use VxWorks?
Q4) An embedded OS certified to run multiple levels of classification (such as unclassified, secret, and top secret) on the same CPU without leakage between levels is called ____.
A)MILS
B)RTOS
C)GUI
D)DOS
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Hacking Web Servers
Available Study Resources on Quizplus for this Chatper
52 Verified Questions
52 Flashcards
Source URL: https://quizplus.com/quiz/41519
Sample Questions
Q1) What is OWASP?
Q2) SQL ____ involves the attacker supplying SQL commands when prompted to fill in a Web application field.
A)redirection
B)spoofing
C)injection
D)insertion
Q3) ____ represent(s) a comment in SQL.
A)Double slashes (//)
B)An exclamation point (!)
C)An asterisk (*)
D)Double hyphens (--)
Q4) ____________________ Web pages display the same information regardless of the time of day or the user who activates the page.
Q5) The column tag in CFML is ____.
A)<CFCOL> B)<?COL> C)<%COL> D)<CFCOLUMN>
Q6) What is VBScript?
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Hacking Wireless Networks
Available Study Resources on Quizplus for this Chatper
52 Verified Questions
52 Flashcards
Source URL: https://quizplus.com/quiz/41520
Sample Questions
Q1) data is spread across a large-frequency bandwidth instead of traveling across just one frequency band
A)802.16
B)spread spectrum
C)802.11b
D)narrowband
E)802.20
F)infrared (IR)
G)802.1X
H)Bluetooth
I)HiperLAN2
Q2) What is wardriving?
Q3) What is a basic service set (BSS)?
Q4) What is PPP?
Q5) One of the default SSIDs used by D-Link is ____.
A)Tsunami
B)Wireless
C)default
D)linksys
Q6) What is frequency-hopping spread spectrum (FHSS)?
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Cryptography
Available Study Resources on Quizplus for this Chatper
58 Verified Questions
58 Flashcards
Source URL: https://quizplus.com/quiz/41521
Sample Questions
Q1) After DES was in service for many years, NIST decided that a new standard was in order: ____.
A)Advanced Encryption Standard (AES)
B)RC5
C)International Data Encryption Algorithm (IDEA)
D)Blowfish
Q2) In a(n) ____________________ attack, the attacker captures data and attempts to resubmit the captured data so that the device, which can be a computer or router, thinks a legitimate connection is in effect.
Q3) In a ____ attack, an attacker uses a password-cracking program to guess passwords by attempting every possible combination of letters.
A)brute force
B)replay
C)ciphertext-only
D)dictionary
Q4) What is a digital signature?
Q5) What is a one-way function? Provide an example or an analogy to help explain the concept.
Q6) What is a certificate?
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Network Protection Systems
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41522
Sample Questions
Q1) small network containing resources that a company wants to make available to Internet users
A)stateful packet filter
B)firewall
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)enable mode
H)ASA
I)privileged mode
Q2) What is a distance-vector routing protocol?
Q3) What is the purpose of the read-only memory in a Cisco router?
Q4) ____ runs hacker-enticing services and written and documented in Portuguese, but the easy-to-use graphical interface makes up for any time spent translating.
A)Valhala
B)Honeyd
C)Nepenthes
D)SANS Internet Storm Center
To view all questions and flashcards with answers, click on the resource link above. Page 15