Security in Computing Final Test Solutions
Course Introduction
Security in Computing explores the fundamental principles, methodologies, and technologies used to protect computer systems and data from unauthorized access, misuse, and threats. The course covers key topics such as cryptography, authentication, access control, threat modeling, network security, software vulnerabilities, and malware analysis. Students learn about risk management, security policies, legal and ethical issues, and practical defense mechanisms for real-world computing environments. Through hands-on exercises and case studies, the course aims to develop the skills required to design, implement, and evaluate secure computing systems.
Recommended Textbook Principles of Information Security 4th Edition by Michael E. Whitman
Available Study Resources on Quizplus
12 Chapters
1111 Verified Questions
1111 Flashcards
Source URL: https://quizplus.com/study-set/2244 Page 2
Chapter 1: Introduction to Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44634
Sample Questions
Q1) The ____________________ phase consists primarily of assessments of the organization,its current systems,and its capability to support the proposed systems.
Answer: analysis
Q2) The CNSS model of information security evolved from a concept developed by the computer security industry known as the ____________________ triangle.
Answer: CIA
C.I.A.
Confidentiality,Integrity,and Availability
Q3) The history of information security begins with the history of ____________________ security.
Answer: computer
Q4) Of the two approaches to information security implementation,the top-down approach has a higher probability of success._________________________ A)True
B)False
Answer: True
Q5) Information has ____________________ when it is whole,complete,and uncorrupted.
Answer: integrity
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: The Need for Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44635
Sample Questions
Q1) Which of the following is an example of a Trojan horse program?
A)Netsky
B)MyDoom
C)Klez
D)Happy99.exe
Answer: D
Q2) Packet kiddies use automated exploits to engage in distributed denial-of-service attacks._________________________
A)True
B)False
Answer: False
Q3) As frustrating as viruses and worms are,perhaps more time and money is spent on resolving virus ____.
A)false alarms
B)power faults
C)hoaxes
D)urban legends
Answer: C
Q4) ESD means electrostatic ____________________.
Answer: discharge
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Legal, Ethical, and Professional Issues in Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44636
Sample Questions
Q1) The Computer ____ and Abuse Act of 1986 is the cornerstone of many computer-related federal laws and enforcement efforts.
A)Violence
B)Fraud
C)Theft
D)Usage Answer: B
Q2) DHS is made up of three directorates.
A)True
B)False
Answer: False
Q3) The NSA is responsible for signal intelligence and information system security.
A)True
B)False Answer: True
Q4) The key difference between laws and ethics is that ethics carry the authority of a governing body and laws do not.
A)True
B)False Answer: False
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Risk Management
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44637
Sample Questions
Q1) In a(n)____,each information asset is assigned a score for each of a set of assigned critical factor.
A)OPSEC
B)COMSEC
C)weighted factor analysis
D)data classification scheme
Q2) The ____ security policy is a planning document that outlines the process of implementing security in the organization.
A)program
B)agency
C)issue-specific
D)system-specific
Q3) The most common of the mitigation procedures is the disaster recovery plan._________________________
A)True
B)False
Q4) You can assess the relative risk for each of the vulnerabilities by a process called risk
Q5) List Microsoft's "Ten Immutable Laws of Security" in any order
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Planning for Security
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44638
Sample Questions
Q1) The Federal Bureau of Investigation deals with many computer crimes that are categorized as felonies.
A)True B)False
Q2) Policies are living documents that must be managed._________________________
A)True B)False
Q3) The standard should begin with a clear statement of purpose._________________________
A)True
B)False
Q4) Quality security programs begin and end with policy. A)True
B)False
Q5) The policy champion and manager is called the policy ____________________.
Q6) A security ____________________ defines the boundary between the outer limit of an organization's security and the beginning of the outside world.
7
Q7) A(n)_________________________ plan ensures that critical business functions continue if a catastrophic incident or disaster occurs.
To view all questions and flashcards with answers, click on the resource link above.
Chapter 6: Security Technology: Firewalls and Vpns
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44639
Sample Questions
Q1) The outside world is known as the trusted network (e.g. ,the Internet)._________________________
A)True
B)False
Q2) Kerberos uses asymmetric key encryption to validate an individual user to various network resources._________________________
A)True
B)False
Q3) A packet-____________________ firewall installed on a TCP/IP based network typically functions at the IP level and determines whether to drop a packet (deny)or forward it to the next network connection (allow)based on the rules programmed into the firewall.
Q4) All organizations with an Internet connection have some form of a router at the boundary between the organization's internal networks and the external service provider. A)True B)False
Q5) Since the bastion host stands as a sole defender on the network perimeter,it is commonly referred to as the ____________________ host.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Security Technology: Intrusion Detection
and Prevention Systems, and Other Security Tools
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44640
Sample Questions
Q1) ____ is based on the use of some measurable human characteristic or trait to authenticate the identity of a proposed systems user.
A)Biometric access control
B)Physical access control
C)Software access control
D)System access control
Q2) A(n)log file monitor is similar to a NIDPS._________________________
A)True
B)False
Q3) ____ is the process of classifying IDPS alerts so that they can be more effectively managed.
A)Alarm filtering
B)Alarm clustering
C)Alarm compaction
D)Alarm attenuation
Q4) Alarm ____________________ and compaction is a consolidation of almost identical alarms that happen at close to the same time into a single higher-level alarm.
Q5) HIDPSs are also known as system ____________________ verifiers.
Q6) List and describe at least four reasons to acquire and use an IDPS.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Cryptography
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44641
Sample Questions
Q1) Symmetric encryption uses two different but related keys,and either key can be used to encrypt or decrypt the message._________________________
A)True
B)False
Q2) You cannot combine the XOR operation with a block cipher operation.
A)True
B)False
Q3) ____ is the amount of effort (usually in hours)required to perform cryptanalysis to decode an encrypted message when the key or algorithm (or both)are unknown.
A)Code
B)Algorithm
C)Key
D)Work factor
Q4) The CA periodically distributes a(n)____ to all users that identifies all revoked certificates.
A)CRL
B)RA
C)MAC
D)AES
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Physical Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44642
Sample Questions
Q1) A device that assures the delivery of electric power without interruption is a(n)____.
A)GFCI
B)HVAC
C)GPS
D)UPS
Q2) Static electricity is not noticeable to humans until levels approach 150 volts.
A)True
B)False
Q3) Vibration sensors fall into the motion sensor category.
A)True
B)False
Q4) There are three methods of data interception: direct observation,interception of data transmission,and mechanical interception.
A)True
B)False
Q5) When the lock of a door fails and the door becomes unlocked,it is classified as a fail-secure lock.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Implementing Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44643
Sample Questions
Q1) A cybernetic loop ensures that progress is measured periodically._________________________
A)True
B)False
Q2) The task of creating a project plan is often assigned to either a project manager or the project leader._________________________
A)True B)False
Q3) An ideal organization fosters resilience to change._________________________
A)True
B)False
Q4) Each organization has to determine its own project management methodology for IT and information security projects.
A)True
B)False
Q5) A direct changeover is also known as going "fast turnkey."
A)True B)False
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Security and Personnel
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44644
Sample Questions
Q1) The model used often by large organizations places the information security department within the ____ department.
A)management
B)information technology
C)financial
D)production
Q2) GIAC stands for Global Information Architecture Certification._________________________
A)True
B)False
Q3) What functions does the CISO perform?
Q4) ____ was designed to recognize mastery of an international standard for information security and a common body of knowledge (sometimes called the CBK).
A)CISSP
B)ISSMP
C)SSCP
D)All of the above
Q5) It is important to gather employee ____________________ early about the information security program and respond to it quickly.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Information Security Maintenance
Available Study Resources on Quizplus for this Chatper
103 Verified Questions
103 Flashcards
Source URL: https://quizplus.com/quiz/44645
Sample Questions
Q1) Remediation of vulnerabilities can be accomplished by accepting or transferring the risk,removing the threat,or repairing the vulnerability.
A)True
B)False
Q2) Policy needs to be reviewed and refreshed from time to time to ensure that it's sound.
A)True B)False
Q3) Threats cannot be removed without requiring a repair of the vulnerability.
A)True
B)False
Q4) The value of internal monitoring is low when the resulting knowledge of the network and systems configuration is fed into the vulnerability assessment and remediation maintenance domain.
A)True B)False
Q5) The proven cases of real vulnerabilities can be considered vulnerability
Q6) Why should agencies monitor the status of their programs?
To view all questions and flashcards with answers, click on the resource link above. Page 14