Information Systems Security Test Preparation
Course Introduction
Information Systems Security explores the principles, technologies, and practices essential for protecting information assets within organizations. The course covers foundational security concepts, including threat analysis, risk management, cryptography, authentication, access control, and network security. Students learn about security policies, incident response, legal and ethical issues, and emerging threats in cybersecurity. Through case studies and hands-on labs, the course emphasizes strategies for designing, implementing, and maintaining secure information systems in real-world environments.
Recommended Textbook
Principles of Information Security 6th Edition by Michael E. Whitman
Available Study Resources on Quizplus
12 Chapters
1148 Verified Questions
1148 Flashcards
Source URL: https://quizplus.com/study-set/2123 Page 2
Chapter 1: Introduction to Information Security
Available Study Resources on Quizplus for this Chatper
87 Verified Questions
87 Flashcards
Source URL: https://quizplus.com/quiz/42300
Sample Questions
Q1) Using a methodology will usually have no effect on the probability of success.
A)True
B)False
Answer: False
Q2) A computer is the __________ of an attack when it is used to conduct an attack against another computer.
A) subject
B) object
C) target
D) facilitator
Answer: A
Q3) A(n)<u> project </u>team should consist of a number of individuals who are experienced in one or multiple facets of the technical and nontechnical areas.
A)True
B)False
Answer: True
Q4) The history of information security begins with the concept of ____________________ security.
Answer: computer
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: The Need for Security
Available Study Resources on Quizplus for this Chatper
91 Verified Questions
91 Flashcards
Source URL: https://quizplus.com/quiz/42301
Sample Questions
Q1) The ____________________ hijacking attack uses IP spoofing to enable an attacker to impersonate another entity on the network.
A) WWW
B) TCP
C) FTP
D) HTTP
Answer: B
Q2) Describe viruses and worms.
Answer: A computer virus consists of segments of code that perform malicious actions. This code behaves very much like a virus pathogen attacking animals and plants, using the cell's own replication machinery to propagate and attack. The code attaches itself to the existing program and takes control of that program's access to the targeted computer. The virus-controlled target program then carries out the virus's plan by replicating itself into additional targeted systems. A worm is a malicious program that replicates itself constantly without requiring another program to provide a safe environment for replication. Worms can continue replicating themselves until they completely fill available resources, such as memory, hard drive space, and network bandwidth.
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Legal, Ethical, and Professional Issues in Information Security
Available Study Resources on Quizplus for this Chatper
83 Verified Questions
83 Flashcards
Source URL: https://quizplus.com/quiz/42302
Sample Questions
Q1) The __________ defines stiffer penalties for prosecution of terrorist crimes.
A) USA PATRIOT Act
B) Sarbanes-Oxley Act
C) Gramm-Leach-Bliley Act
D) Economic Espionage Act
Answer: A
Q2) In a study on software license infringement, licenses from the United States were significantly <u>more </u>permissive than those from the Netherlands and other countries. _________________________
A)True
B)False
Answer: False
Q3) The __________ of 1999 provides guidance on the use of encryption and provides protection from government intervention.
A) Prepper Act
B) Economic Espionage Act
C) USA PATRIOT Act
D) Security and Freedom through Encryption Act
Answer: D
Page 5
To view all questions and flashcards with answers, click on the resource link above.
Chapter 4: Planning for Security
Available Study Resources on Quizplus for this Chatper
109 Verified Questions
109 Flashcards
Source URL: https://quizplus.com/quiz/42303
Sample Questions
Q1) A standard is a written instruction provided by management that informs employees and others in the workplace about proper behavior.
A)True
B)False
Q2) According to NIST SP 800-14's security principles, security should ________.
A) support the mission of the organization
B) require a comprehensive and integrated approach
C) be cost-effective
D) All of the above
Q3) A policy should state that if employees violate a company policy or any law using company technologies, the company will protect them, and the company is liable for the employee's actions.
A)True B)False
Q4) To remain viable, security policies must have a responsible <u>manager</u>, a schedule of reviews, amethod for making recommendations for reviews, and a policy issuance and revision date. _________________________
A)True B)False
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Risk Management
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/42304
Sample Questions
Q1) To determine if the risk to an information asset is acceptable or not, you estimate the expected loss the organization will incur if the risk is exploited.
A)True
B)False
Q2) A(n) ____________________ is a performance value or metric used to compare changes in the object being measured.
Q3) Establishing a competitive business model, method, or technique enables an organization to provide a product or service that is superior and creates a(n) <u>competitive advantage</u>. _________________________
A)True
B)False
Q4) ____________________ feasibility analysis is an assessment of which controls can and cannot occur based on the consensus and relationships among communities of interest.
Q5) The <u>mitigation</u> control strategy attempts to reduce the impact of a successful attack through planning and preparation.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Security Technology: Access Controls, Firewalls, and VPNS
Available Study Resources on Quizplus for this Chatper
106 Verified Questions
106 Flashcards
Source URL: https://quizplus.com/quiz/42305
Sample Questions
Q1) Firewalls can be categorized by processing mode, development era, or structure.
A)True
B)False
Q2) An attacker who suspects that an organization has dial-up lines can use a device called a(n) <u>war</u> dialer to locate the connection points.
A)True
B)False
Q3) Syntax errors in firewall policies are usually difficult to identify.
A)True
B)False
Q4) <u>Authentication</u> is a mechanism whereby unverified entities who seek access to a resource provide a label by which they are known to the system.
A)True
B)False
Q5) Internet connections via dial-up lines are regaining popularity due to recent technological developments.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Security Technology: Intrusion
Detection and Prevention Systems, and Other Security Tools
Available Study Resources on Quizplus for this Chatper
107 Verified Questions
107 Flashcards
Source URL: https://quizplus.com/quiz/42306
Sample Questions
Q1) All IDPS vendors target users with the same levels of technical and security expertise. A)True
B)False
Q2) For Linux or BSD systems, a tool called "<u>Snow White</u>" allows a remote individual to "mirror" entire Web sites. _________________________ A)True
B)False
Q3) A(n) <u>NIDPS </u>functions on the host system, where encrypted traffic will have been decrypted and is available for processing. _________________________ A)True B)False
Q4) When using trap-and-trace, the <u>trace</u> usually consists of a honeypot or padded cell and an alarm. _________________________ A)True B)False
Q5) ____________________ is a systematic survey of all of the target organization's Internet addresses.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Cryptography
Available Study Resources on Quizplus for this Chatper
109 Verified Questions
109 Flashcards
Source URL: https://quizplus.com/quiz/42307
Sample Questions
Q1) In 1953, Giovan Batista Bellaso introduced the idea of the passphrase (password) as a key for encryption.
A)True
B)False
Q2) The __________ algorithm, developed in 1977, was the first public-key encryption algorithm published for commercial use.
A) DES
B) RSA
C) MAC
D) AES
Q3) The<u> application header (AH)</u> protocol provides secrecy for the contents of network communications as well as system-to-system authentication and data integrity verification. _________________________
A)True
B)False
Q4) Describe symmetric and asymmetric encryption.
Q5) The encapsulating security ____________________ protocol provides secrecy for the contents of network communications as well as system-to-system authentication and data integrity verification.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Physical Security
Available Study Resources on Quizplus for this Chatper
77 Verified Questions
77 Flashcards
Source URL: https://quizplus.com/quiz/42308
Sample Questions
Q1) Standby power supply (SPS) UPSs provide power conditioning.
A)True
B)False
Q2) <u>Mechanical </u>locks can accept a variety of inputs as keys, including magnetic strips on ID cards, radio signals from badges, personal identification numbers (PINs) typed into a keypad, or some combination of these to activate an electrically powered locking mechanism._________________________
A)True
B)False
Q3) Physical security is just as important as <u>logical </u>security to an information security program. _________________________
A)True
B)False
Q4) Describe different types of sensors to detect intrusions.
Q5) <u>Grounding</u> ensures that the returning flow of current is properly discharged to the ground. _________________________
A)True
B)False
Q6) _________________________ is the amount of moisture in the air.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Implementing Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/42309
Sample Questions
Q1) In general, the design phase is accomplished by changing the configuration and operation of the organization's information systems to make them more secure.
A)True
B)False
Q2) One of the oldest models of change is the Lewin change model, which consists of three stages: unfreezing, ____________________, and refreezing.
Q3) The effective use of a DMZ is one of the primary methods of securing an organization's networks.
A)True
B)False
Q4) A __________ is usually the best approach to security project implementation.
A) direct changeover
B) phased implementation
C) pilot implementation
D) parallel operation
Q5) The networks layer of the bull's eye is the outermost ring of the bull's eye.
A)True
B)False
Q6) What minimum attributes for project tasks does the WBS document
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Security and Personnel
Available Study Resources on Quizplus for this Chatper
77 Verified Questions
77 Flashcards
Source URL: https://quizplus.com/quiz/42310
Sample Questions
Q1) To assess the effect that changes will have on the organization's personnel management practices, the organization should conduct a ____________________feasibility study before the program is implemented.
Q2) __________ are the technically qualified individuals tasked to configure firewalls, deploy IDSs, implement security software, diagnose and troubleshoot problems, and coordinate with systems and network administrators to ensure that an organization's security technology is properly implemented.
A) CSOs
B) CISOs
C) Security managers
D) Security technicians
Q3) The process of ensuring that no unnecessary access to data exists and that employees are able to perform only the minimum operations necessary on a set of data is referred to as the principle of ____________________.
Q4) "Builders" in the field of information security provide day-to-day systems monitoring and use to support an organization's goals and objectives.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above.
Page 13
Chapter 12: Information Security Maintenance
Available Study Resources on Quizplus for this Chatper
116 Verified Questions
116 Flashcards
Source URL: https://quizplus.com/quiz/42311
Sample Questions
Q1) The objective of the external ____________________ domain within the maintenance model is to provide early awareness of new and emerging threats, threat agents, vulnerabilities, and attacks that the organization needs in order to mount an effective and timely defense.
Q2) Inventory characteristics for hardware and software assets that record the manufacturer and versions are related to technical functionality, and should be highly accurate and updated each time there is a change.
A)True
B)False
Q3) Remediation of vulnerabilities can be accomplished by accepting or transferring the risk, removing the threat, or repairing the vulnerability.
A)True
B)False
Q4) An affidavit is sworn testimony that certain facts are in the possession of an investigating officer and that they warrant the examination of specific items located at a specific place.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 14