IT Security Management
Test Preparation
Course Introduction
IT Security Management explores the principles, practices, and tools used to protect organizational information systems against threats and vulnerabilities. The course covers key topics such as risk assessment, security policies and procedures, compliance, incident response, and the implementation of technical controls. Students will learn how to develop and manage comprehensive security strategies, align IT security objectives with business goals, and ensure adherence to legal and regulatory requirements. By the end of the course, participants will be equipped with the knowledge to manage security operations, effectively respond to security incidents, and contribute to the overall resilience of an organizations IT infrastructure.
Recommended Textbook
Corporate Computer Security 4th Edition by
Randy J. Boyle
Available Study Resources on Quizplus
11 Chapters
1198 Verified Questions
1198 Flashcards
Source URL: https://quizplus.com/study-set/1400 Page 2
Chapter 1: The Threat Environment
Available Study Resources on Quizplus for this Chatper
103 Verified Questions
103 Flashcards
Source URL: https://quizplus.com/quiz/27878
Sample Questions
Q1) Which of the following are ways that trade secret espionage occur?
A) Theft through interception
B) By bribing an employee
C) None of the above
D) All of the above
Answer: D
Q2) If an attacker breaks into a corporate database and deletes critical files, this is a attack against the ________ security goal.
A) integrity
B) confidentiality
C) Both A and B
D) Neither A nor B
Answer: A
Q3) To obtain IP addresses through reconnaissance, an attacker can use ________.
A) IP address spoofing
B) a chain of attack computers
C) Both A and B
D) Neither A nor B
Answer: B
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Planning and Policy
Available Study Resources on Quizplus for this Chatper
124 Verified Questions
124 Flashcards
Source URL: https://quizplus.com/quiz/27880
Sample Questions
Q1) Hotlines for reporting improper behavior are required by law to be non-anonymous.
A)True
B)False
Answer: False
Q2) A technical security architecture includes ________.
A) all of a firm's countermeasures
B) how countermeasures are organized
C) Both A and B
D) Neither A nor B
Answer: C
Q3) The steps required to issue a new employee a password should be specified in a ________.
A) procedure
B) process
C) Both A and B
D) Neither A nor B
Answer: A
To view all questions and flashcards with answers, click on the resource link above.
Page 4
Chapter 3: Cryptography
Available Study Resources on Quizplus for this Chatper
122 Verified Questions
122 Flashcards
Source URL: https://quizplus.com/quiz/27881
Sample Questions
Q1) In public key encryption for authentication, the verifier decrypts the ciphertext with the supplicant's public key.
A)True
B)False
Answer: False
Q2) Public key encryption is ________.
A) complex
B) slow
C) expensive
D) All of the above
Answer: D
Q3) What usually is the longest stage in a cryptographic system dialogue?
A) Ongoing communication
B) Negotiation of security methods and parameters
C) Keying
D) Mutual authentication
Answer: A
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Secure Networks
Available Study Resources on Quizplus for this Chatper
119 Verified Questions
119 Flashcards
Source URL: https://quizplus.com/quiz/27882
Sample Questions
Q1) The 802.1X protocol created for wired LANs can work in wireless LANs without significant modification.
A)True
B)False
Q2) PEAP is a popular extended EAP protocol.
A)True
B)False
Q3) In a man-in-the-middle attack, an evil twin sends own attacks, impersonating the victim.
A)True
B)False
Q4) SYN-ACK can be best described as the second part of a three-way TCP handshake sent in response to a SYN.
A)True
B)False
Q5) RTS frames tell other wireless clients that you want to transmit for a given amount of time.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Access Control
Available Study Resources on Quizplus for this Chatper
124 Verified Questions
124 Flashcards
Source URL: https://quizplus.com/quiz/27883
Sample Questions
Q1) When an attacker deliberately attempts to fool the system, this is called ________.
A) deception
B) a false acceptance
C) a false rejection
D) All of the above.
Q2) ________ is a form of identification that identifies a person as being a member of a group.
A) RBAC
B) Watch list matching
C) Group ID matching
D) Group acceptance
Q3) It is very important for testers to get permission before running a password cracking program on their company's computers to check for weak passwords even if such testing is in their job definitions.
A)True
B)False
Q4) PCs should require login screens with complex passwords.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Firewalls
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27884
Sample Questions
Q1) Stateful packet inspection firewalls are ________.
A) expensive
B) fairly safe in practice
C) Both A and B
D) Neither A nor B
Q2) Application proxy firewalls can always examine application layer content.
A)True
B)False
Q3) Zero-day attacks might be stopped by ________ detection.
A) signature
B) anomaly
C) Both A and B
D) Neither A nor B
Q4) Which IPS response to an attack can do the most damage?
A) Dropping packets
B) Limiting suspicious traffic to a certain percentage of the total bandwidth
C) Both A and B do equal amounts of damage
D) Neither A nor B
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Host Hardening
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27885
Sample Questions
Q1) The cost of ________ LINUX is definitely far less than the cost of commercial operating systems such as Windows.
A) purchasing
B) using
C) Both A and B
D) Neither A nor B
Q2) Password hashes are created when a password is passed from a user to a hashing function.
A)True
B)False
Q3) The super user account in UNIX is called ________.
A) root
B) administrator
C) MMC
D) kernel
Q4) Antivirus protections may be deliberately turned off by users.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above.
Page 9
Chapter 8: Application Security
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27886
Sample Questions
Q1) Scripts do not have the ability to permanently change your computer registry.
A)True
B)False
Q2) To take advantage of user typing errors, attackers register site names that are similar to those of legitimate domain names.
A)True
B)False
Q3) Companies are responsible for filtering sexually or racially harassing messages and can be sued for not doing so.
A)True
B)False
Q4) Like the public switched telephone network, VoIP technology is a closed system.
A)True
B)False
Q5) Cookies can used to track users at a website.
A)True
B)False
Q6) Experts advise firms to turn on most or all applications and then harden them. A)True
B)False
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Data Protection
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/27887
Sample Questions
Q1) Companies usually conduct full backups on a ________ basis.
A) hourly
B) daily
C) weekly
D) monthly
Q2) Incremental and full backups may be restored out of order in which they were created.
A)True
B)False
Q3) Full backups are ________.
A) performed on all files and directories
B) slow
C) typically done weekly
D) All of the above
Q4) Properly hardened hosts and securely coded applications can help protect data while it is transmitted.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above.
Page 11
Chapter 10: Incident and Disaster Response
Available Study Resources on Quizplus for this Chatper
107 Verified Questions
107 Flashcards
Source URL: https://quizplus.com/quiz/27879
Sample Questions
Q1) Only an expert witness is allowed to interpret facts for juries.
A)True
B)False
Q2) If an IDS cannot process all of the packets it receives, it will ________ packets it cannot process.
A) drop
B) pass
C) quarantine
D) None of the above
Q3) ________ is the act of passing an incident to the CSIRT or business continuity team.
A) Transference
B) Escalation
C) Delegation
D) Acceleration
Q4) Getting a firm's IT back into operation is ________.
A) IT disaster recovery
B) business continuity recovery
C) response
D) None of the above
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Module A: Networking Concepts
Available Study Resources on Quizplus for this Chatper
91 Verified Questions
91 Flashcards
Source URL: https://quizplus.com/quiz/27888
Sample Questions
Q1) A computer connects to the nearest switch via a ________.
A) physical link
B) data link
C) Both A and B
D) Neither A nor B
Q2) A normal TCP close takes ________ segments.
A) 2
B) 3
C) 4
D) None of the above.
Q3) In this book, when internet is spelled with a capital I, it means the global Internet.
A)True
B)False
Q4) ________ is a standards architecture.
A) ISO
B) OSI
C) Both A and B
D) Neither A nor B
To view all questions and flashcards with answers, click on the resource link above.
Page 13