Exam 8: Controls for Information Security

Virtualization refers to the ability of

The most effective way to protect network resources that are exposed to the internet,yet reside outside of a network is

Timely detection of problems is not enough to protect organizations' information resources.

Which of the below keeps a record of the network traffic permitted to pass through a firewall?

Which of the following preventive controls are necessary to provide adequate security for social engineering threats?

Organizations are infrequently the target of deliberate attacks.

Describe four requirements of effective passwords .

The steps that criminals take to identify potential points of remote entry is called

The process that uses automated tools to identify whether a system possesses any well-known security problems is known as a(n)

The process of maintaining a table listing all established connections between the organization's computers and the internet to determine whether an incoming packet is part of an ongoing communication initiated by an internal computer is known as

Describe the three types of detective controls that enable organizations timely detection of intrusions and problems.

________ is/are an example of a preventive control.

Compatibility tests utilize a(n)________,which is a list of authorized users,programs,and data files the users are authorized to access or manipulate.

Which of the following is not one of the essential criteria for successfully implementing each of the principles that contribute to systems reliability,as discussed in the Trust Services Framework?

The process that screens individual IP packets based solely on the contents of the source and/or destination fields in the packet header is known as

A system that creates logs of all network traffic that was permitted to pass the firewall and then analyzes those logs for signs of attempted or successful intrusions is called

Information technology managers are often in a bind when a new exploit is discovered in the wild.They can respond by updating the affected software or hardware with new code provided by the manufacturer,which runs the risk that a flaw in the update will break the system.Or they can wait until the new code has been extensively tested,but that runs the risk that they will be compromised by the exploit during the testing period.Dealing with these issues is referred to as

Who bears the responsibility for information security in an organization?

Describe the security risks associated with virtualization and cloud computing.

Residents in Berryhill received an e-mail stating that there is an armed robber on the loose.The e-mail claimed to be from the Berryhill police department,but it wasn't.Computer forensic experts later determined that the e-mail was sent from a computer lab in the Berryhill's public library.The police were then able to uniquely identify the computer that was used by means of its network interface card's ________ address.Security cameras later help the police to reveal the identity of the individual responsible for the hoax.