Information Systems Security Final
Exam Questions
Course Introduction
Information Systems Security explores the principles and practices essential to protecting information assets in digital environments. The course covers foundational concepts such as risk assessment, security policies, access control models, encryption, network and application security, as well as detection and prevention of cyber threats. Students examine real-world security breaches, analyze vulnerabilities, and develop strategies to safeguard information systems against unauthorized access, data loss, and evolving cyber-attacks. Emphasis is placed on regulatory compliance, ethical considerations, and the implementation of effective organizational security frameworks.
Recommended Textbook
Corporate Computer Security 4th Edition by Randy J. Boyle
Available Study Resources on Quizplus
11 Chapters
1198 Verified Questions
1198 Flashcards
Source URL: https://quizplus.com/study-set/1400
Page 2
Chapter 1: The Threat Environment
Available Study Resources on Quizplus for this Chatper
103 Verified Questions
103 Flashcards
Source URL: https://quizplus.com/quiz/27878
Sample Questions
Q1) In response to a chain of attack, victims can often trace the attack back to the final attack computer.
A)True
B)False
Answer: True
Q2) Most countermeasure controls are preventative controls.
A)True
B)False
Answer: True
Q3) Compared to non-computer crime, computer crime is very small.
A)True
B)False
Answer: False
Q4) A Trojan horse is a program that hides itself by deleting a system file and taking on the system file's name.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Planning and Policy
Available Study Resources on Quizplus for this Chatper
124 Verified Questions
124 Flashcards
Source URL: https://quizplus.com/quiz/27880
Sample Questions
Q1) A planned series of actions in a corporation is a(n) ________.
A) strategy
B) sequence
C) process
D) anomaly
Answer: C
Q2) Before doing a vulnerability test, a security employee must ensure that ________.
A) doing a vulnerability test is in his or her job description
B) no damage will be done
C) he or she has a specific contract to do a specific test
D) the test is a surprise to everyone, including the tester's superior, who may be engaged in illicit activities
Answer: C
Q3) A company should consider list of possible remediation plans as an investment portfolio.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Cryptography
Available Study Resources on Quizplus for this Chatper
122 Verified Questions
122 Flashcards
Source URL: https://quizplus.com/quiz/27881
Sample Questions
Q1) Which of the following is transmitted across a network?
A) The plaintext
B) The ciphertext
C) Both A and B
D) Neither A nor B
Answer: B
Q2) Nearly all encryption for confidentiality uses ________ encryption ciphers.
A) public key
B) symmetric key
C) hashing
D) None of the above
Answer: B
Q3) Which encryption method does MS-CHAP use?
A) Symmetric key encryption
B) Public key encryption
C) Both A and B
D) Neither A nor B
Answer: D
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Secure Networks
Available Study Resources on Quizplus for this Chatper
119 Verified Questions
119 Flashcards
Source URL: https://quizplus.com/quiz/27882
Sample Questions
Q1) Ensuring network ________ means that authorized users have access to information, services, and network resources.
A) confidentiality
B) integrity
C) availability
D) authentication
Q2) A ________ attack is when a victim is flooded with SYN packets in an attempt to make many half-open TCP connections.
A) SYN flood
B) Ping flood
C) HTTP flood
D) None of the above
Q3) Similar to a direct attack, an indirect attack occurs when an attacker spoofs his/her IP address.
A)True
B)False
Q4) Traditionally, Ethernet LANs offered no access security.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Access Control
Available Study Resources on Quizplus for this Chatper
124 Verified Questions
124 Flashcards
Source URL: https://quizplus.com/quiz/27883
Sample Questions
Q1) Which of the following are benefits of using identity management?
A) Reduced costs
B) Centralized auditing of all an employee's access permission across a firm
C) Both A and B
D) Neither A nor B
Q2) ________ servers synchronize directory servers from different vendors.
A) Synchronization
B) LDAP
C) Metadirectory
D) Central authentication
Q3) It is illegal to go through a company's trash bins even if the trash bins are outside the corporation.
A)True
B)False
Q4) The ________ gives the verifier a symmetric session key.
A) ticket-granting ticket
B) service ticket
C) Both A and B
D) Neither A nor B
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Firewalls
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27884
Sample Questions
Q1) ________ drop packets.
A) IDSs
B) IPSs
C) Both A and B
D) Neither A nor B
Q2) NAT is able to stop ________.
A) scanning probes
B) sniffers from learning anything about the internal IP address of internal hosts
C) Both A and B
D) Neither A nor B
Q3) Ingress ACL rules typically permit a specific type of externally originated connection to network resources.
A)True
B)False
Q4) Attacks other than application level attacks usually fail to get through SPI firewalls.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Host Hardening
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27885
Sample Questions
Q1) A patch is a labor-intensive process of manual steps that a firm must do to address a vulnerability.
A)True
B)False
Q2) Different UNIX versions have different security methods.
A)True
B)False
Q3) ________ is necessary to protect the host against attacks.
A) Host hardening
B) Host bulwarking
C) Host shielding
D) None of the above
Q4) The cost of ________ LINUX is definitely far less than the cost of commercial operating systems such as Windows.
A) purchasing
B) using
C) Both A and B
D) Neither A nor B
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Application Security
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27886
Sample Questions
Q1) Baselines are used to go beyond default installation configurations for high-value targets.
A)True
B)False
Q2) Custom programs generally are safe because attackers do not know the code.
A)True
B)False
Q3) SIP Identity protocols ________.
A) ensure that traffic is authenticated between two companies holding public/private keys
B) are uncommon on IP telephones
C) Both A and B
D) Neither A nor B
Q4) Signaling does not consist of communication to manage the network.
A)True
B)False
Q5) When securing application configuration settings, default password settings should not be changed.
A)True
B)False
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Data Protection
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/27887
Sample Questions
Q1) Retaining data can create negative consequences.
A)True
B)False
Q2) Backup policies should be audited regularly and include tracing what happens in samples of data.
A)True
B)False
Q3) With RAID 5, the following is achieved ________.
A) Parity
B) Striping
C) Redundancy
D) All of the above
Q4) Image backup is attractive because ________.
A) it requires minimal additional work to restore a fully functioning PC
B) it is faster than file/directory backup
C) it takes up less storage space than file/directory backup
D) Both A and C
Q5) Typically, having enough shadow backup space for a few days is sufficient.
A)True
B)False
11
To view all questions and flashcards with answers, click on the resource link above.
Chapter 10: Incident and Disaster Response
Available Study Resources on Quizplus for this Chatper
107 Verified Questions
107 Flashcards
Source URL: https://quizplus.com/quiz/27879
Sample Questions
Q1) Communication between IDS ________ must be secure.
A) managers and agents
B) vendors and managers
C) Both A and B
D) Neither A nor B
Q2) ________ deals with the violation of criminal statutes.
A) Criminal law
B) Civil law
C) Both A and B
D) Neither A nor B
Q3) Integrated log files ________.
A) tend to have problems with format incompatibilities
B) tend to have time synchronization problems
C) Both A and B
D) Neither A nor B
Q4) The decision to let an attack continue should be made by ________.
A) IT
B) IT security
C) senior business executives
D) public relations
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Module A: Networking Concepts
Available Study Resources on Quizplus for this Chatper
91 Verified Questions
91 Flashcards
Source URL: https://quizplus.com/quiz/27888
Sample Questions
Q1) Servers get ________.
A) static IP addresses
B) ephemeral IP addresses
C) dynamic IP addresses
D) None of the above.
Q2) If two hosts are separated by five networks, how many frames will there be along the way when a host transmits a packet to another host?
A) 1
B) 2
C) 5
D) 10
Q3) An organization with a ________ domain name must maintain one or more DNS servers.
A) first-level
B) second-level
C) third-level
D) All of the above.
Q4) Attackers can read signals traveling over UTP without tapping the cord.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 13