Security Architecture and Design Practice Questions
Course Introduction
Security Architecture and Design explores the principles, models, and frameworks essential for constructing secure information systems. The course covers the foundational concepts of security engineering, including security models, system architecture, hardware and software security, and secure design principles. Students learn to analyze security requirements, evaluate architectural risks, and implement controls that assure confidentiality, integrity, and availability. Emphasis is placed on applying security by design, threat modeling, and aligning security strategies with organizational goals, preparing students to create robust, resilient, and scalable security architectures in both enterprise and cloud environments.
Recommended Textbook Principles of Information Security 4th Edition by Michael
Available Study Resources on Quizplus
12 Chapters
1111 Verified Questions
1111 Flashcards
Source URL: https://quizplus.com/study-set/2244
Page 2
E. Whitman
Chapter 1: Introduction to Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44634
Sample Questions
Q1) The history of information security begins with the history of ____________________ security.
Answer: computer
Q2) Key end users should be assigned to a developmental team,known as the united application development team._________________________
A)True
B)False
Answer: False
Q3) ____ is the predecessor to the Internet.
A)NIST
B)ARPANET
C)FIPS
D)DES
Answer: B
Q4) During the early years,information security was a straightforward process composed predominantly of ____________________ security and simple document classification schemes.
Answer: physical
Q5) Information has ____________________ when it is whole,complete,and uncorrupted.
Answer: integrity
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: The Need for Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44635
Sample Questions
Q1) A timing attack involves the interception of cryptographic elements to determine keys and encryption algorithms.
A)True
B)False
Answer: True
Q2) Describe viruses and worms.
Answer: A computer virus consists of segments of code that perform malicious actions.This code behaves very much like a virus pathogen attacking animals and plants,using the cell's own replication machinery to propagate and attack.The code attaches itself to the existing program and takes control of that program's access to the targeted computer.The virus-controlled target program then carries out the virus's plan,by replicating itself into additional targeted systems.
A worm is a malicious program that replicates itself constantly,without requiring another program to provide a safe environment for replication.Worms can continue replicating themselves until they completely fill available resources,such as memory,hard drive space,and network bandwidth.
Q3) ____________________ is unsolicited commercial e-mail.
Answer: Spam
To view all questions and flashcards with answers, click on the resource link above.
4
Chapter 3: Legal, Ethical, and Professional Issues in Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44636
Sample Questions
Q1) The ____ of 1999 provides guidance on the use of encryption and provides protection from government intervention.
A)Sarbanes-Oxley Act
B)Gramm-Leach-Bliley Act
C)U.S.A.Patriot Act
D)Security and Freedom through Encryption Act
Answer: D
Q2) Individuals with authorization and privileges to manage information within the organization are most likely to cause harm or damage by accident.
A)True
B)False Answer: True
Q3) What is the subject of the Computer Security Act?
A)Federal Agency Information Security
B)Telecommunications Common Carriers
C)Cryptography Software Vendors
D)Banking Industry
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Risk Management
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44637
Sample Questions
Q1) After identifying and performing the preliminary classification of an organization's information assets,the analysis phase moves on to an examination of the ____________________ facing the organization.
Q2) ____ plans usually include all preparations for the recovery process,strategies to limit losses during the disaster,and detailed steps to follow when the smoke clears,the dust settles,or the floodwaters recede.
A)IR
B)DR
C)BC
D)BR
Q3) Mutually exclusive means that all information assets must fit in the list somewhere._________________________
A)True
B)False
Q4) The first phase of risk management is ____.
A)risk identification
B)design
C)risk control
D)risk evaluation
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Planning for Security
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44638
Sample Questions
Q1) The ____________________ of an organization is a written statement about the organization's goals answering the question of where the organization will be in five years.
Q2) Incident ____________________ is the set of activities taken to plan for,detect,and correct the impact of an incident on information assets.
Q3) Some policies may need a(n)____________________ indicating their expiration date.
Q4) The gateway router can be used as the front-line defense against attacks,as it can be configured to allow only set types of protocols to enter.
A)True
B)False
Q5) Effective management includes planning and ____.
A)organizing
B)leading
C)controlling
D)All of the above
Q6) A(n)____________________ is a detailed examination of the events that occurred from first detection to final recovery.
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Security Technology: Firewalls and Vpns
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44639
Sample Questions
Q1) Telnet protocol packets usually go to TCP port ____.
A)7
B)8
C)14
D)23
Q2) What must a VPN that proposes to offer a secure and reliable capability while relying on public networks accomplish?
Q3) The ____________________ packet-filtering firewall allows only a particular packet with a particular source,destination,and port address to enter through the firewall.
Q4) The static packet filtering firewall allows only a particular packet with a particular source,destination,and port address to enter through the firewall._________________________
A)True
B)False
Q5) Most firewalls use packet header information to determine whether a specific packet should be allowed to pass through or should be dropped._________________________
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Security Technology: Intrusion
Detection and Prevention Systems, and Other Security Tools
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44640
Sample Questions
Q1) A(n)____ IDPS is focused on protecting network information assets.
A)network-based
B)host-based
C)application-based
D)server-based
Q2) A padded cell is a hardened honeynet._________________________
A)True
B)False
Q3) HIDPSs are also known as system integrity verifiers.
A)True
B)False
Q4) Intrusion ____ activities finalize the restoration of operations to a normal state and seek to identify the source and method of the intrusion in order to ensure that the same type of attack cannot occur again.
A)prevention
B)reaction
C)detection
D)correction
Q6) List and describe the four advantages of HIDPSs. Page 9
Q5) A signature-based IDPS is sometimes called a(n)____________________-based IDPS.
To view all questions and flashcards with answers, click on the resource link above.
Page 10
Chapter 8: Cryptography
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44641
Sample Questions
Q1) When an asymmetric cryptographic process uses the sender's private key to encrypt a message,the sender's public key must be used to decrypt the message.
A)True
B)False
Q2) Dictionary attacks are a collection of brute-force methods that attempt to deduce statistical relationships between the structure of the unknown key and the ciphertext generated by the cryptosystem.
A)True
B)False
Q3) ____ is an integrated system of software,encryption methodologies,protocols,legal agreements,and third-party services that enables users to communicate securely.
A)MAC
B)PKI
C)DES
D)AES
Q4) Encryption is a process of hiding the true meaning of information.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above.
11
Chapter 9: Physical Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44642
Sample Questions
Q1) Class ____ fires are extinguished by agents that remove oxygen from the fire.
A)A
B)B
C)C
D)D
Q2) A name badge is typically worn concealed.
A)True
B)False
Q3) A(n)_________________________ is typically worn concealed.
Q4) Manual fire detection,include human responses,such as calling the fire department,as well as manually activated alarms,such as sprinklers and gaseous systems._________________________
A)True
B)False
Q5) Identify the "Seven Major Sources of Physical Loss"?
Q6) The ____________________ lock may rely on a key that is a carefully shaped piece of metal,which is rotated to turn tumblers that release secured loops of steel,aluminum,or brass.
Q7) The U.S.government has developed a program,named ____________________ to reduce the risk of EMR monitoring.
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 10: Implementing Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44643
Sample Questions
Q1) When an estimate is flawed,as when the number of effort-hours required is underestimated,the plan should be corrected and downstream tasks updated to reflect the change.
A)True
B)False
Q2) The goal of the ____ is to resolve any pending issues,critique the overall effort of the project,and draw conclusions about how to improve the process for the future.
A)direct changeover
B)wrap-up
C)phased implementation
D)pilot implementation
Q3) ____ is a simple planning tool.
A)RFP
B)WBS
C)ISO 17799
D)SDLC
Q4) DMZ is the primary way to secure an organization's networks.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 11: Security and Personnel
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44644
Sample Questions
Q1) It is important to gather employee ____________________ early about the information security program and respond to it quickly.
Q2) Upper management should learn more about the budgetary needs of the information security function and the positions within it._________________________
A)True
B)False
Q3) ISSEP was developed under a joint agreement between the FBI and the United States National Security Agency,Information Assurance Directorate.
A)True
B)False
Q4) The information security function can be placed within the ____.
A)insurance and risk management function
B)administrative services function
C)legal department
D)All of the above
Q5) Information security should be visible to the users.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 12: Information Security Maintenance
Available Study Resources on Quizplus for this Chatper
103 Verified Questions
103 Flashcards
Source URL: https://quizplus.com/quiz/44645
Sample Questions
Q1) The value of internal monitoring is low when the resulting knowledge of the network and systems configuration is fed into the vulnerability assessment and remediation maintenance domain.
A)True
B)False
Q2) As an alternative view of the way data flows into the monitoring process,a(n)____ approach may prove useful.
A)DTD
B)DFD
C)Schema
D)ERP
Q3) To be put to the most effective use,the information that comes from the IDPS must be integrated into the inventory process._________________________
A)True
B)False
Q4) All systems that are mission critical should be enrolled in PSV measurement.
A)True
B)False
Q5) Why should agencies monitor the status of their programs?
To view all questions and flashcards with answers, click on the resource link above. Page 15