Question 1

The process that uses automated tools to identify whether a system possesses any well-known security problems is known as a(n)

Accepted Answer

A)  intrusion detection system. 
B)  log analysis. 
C)  penetration test. 
D)  vulnerability scan. 
A)  intrusion detection system. 
B)  log analysis. 
C)  penetration test. 
D)  vulnerability scan.

Question 2

A well-known hacker started his own computer security consulting business shortly after being released from prison.Many companies pay him to attempt to gain unauthorized access to their network.If he is successful,he offers advice as to how to design and implement better controls.What is the name of the testing for which the hacker is being paid?

Accepted Answer

A)  penetration test 
B)  vulnerability scan 
C)  deep packet inspection 
D)  buffer overflow test 
A)  penetration test 
B)  vulnerability scan 
C)  deep packet inspection 
D)  buffer overflow test

Question 3

Information technology managers are often in a bind when a new exploit is discovered in the wild.They can respond by updating the affected software or hardware with new code provided by the manufacturer,which runs the risk that a flaw in the update will break the system.Or they can wait until the new code has been extensively tested,but that runs the risk that they will be compromised by the exploit during the testing period.Dealing with these issues is referred to as

Accepted Answer

A)  change management. 
B)  hardening. 
C)  patch management. 
D)  defense in depth. 
A)  change management. 
B)  hardening. 
C)  patch management. 
D)  defense in depth.

Question 4

The Trust Services Framework reliability principle that states access to the system and its data should be controlled and restricted to legitimate users is known as

Accepted Answer

A)  availability. 
B)  security. 
C)  privacy. 
D)  integrity. 
A)  availability. 
B)  security. 
C)  privacy. 
D)  integrity.

Question 5

Identify the primary means of protecting data stored in a cloud from unauthorized access.

Accepted Answer

A)  authentication 
B)  authorization 
C)  virtualization 
D)  securitization 
A)  authentication 
B)  authorization 
C)  virtualization 
D)  securitization

Question 6

The most effective way to protect network resources that are exposed to the internet,yet reside outside of a network is

Accepted Answer

A)  a firewall. 
B)  employee training. 
C)  a demilitarized zone. 
D)  stateful packet filtering. 
A)  a firewall. 
B)  employee training. 
C)  a demilitarized zone. 
D)  stateful packet filtering.

Question 7

Describe four requirements of effective passwords .

Accepted Answer

1.Strong passwords should be at least 8

Question 8

Noseybook is a social networking site that boasts over a million registered users and a quarterly membership growth rate in the double digits.As a consequence,the size of the information technology department has been growing very rapidly,with many new hires.Each employee is provided with a name badge with a photo and embedded computer chip that is used to gain entry to the facility.This is an example of a(n)

Accepted Answer

A)  authentication control. 
B)  biometric device. 
C)  remote access control. 
D)  authorization control. 
A)  authentication control. 
B)  biometric device. 
C)  remote access control. 
D)  authorization control.

Question 9

A border router

Accepted Answer

A)  routes electronic communications within an organization. 
B)  connects an organization's information system to the Internet. 
C)  permits controlled access from the Internet to selected resources. 
D)  serves as the main firewall. 
A)  routes electronic communications within an organization. 
B)  connects an organization's information system to the Internet. 
C)  permits controlled access from the Internet to selected resources. 
D)  serves as the main firewall.

Question 10

The most common input-related vulnerability is

Accepted Answer

A)  buffer overflow attack. 
B)  hardening. 
C)  war dialing. 
D)  encryption. 
A)  buffer overflow attack. 
B)  hardening. 
C)  war dialing. 
D)  encryption.

Question 11

Multi-factor authentication

Accepted Answer

A)  involves the use of two or more basic authentication methods. 
B)  is a table specifying which portions of the systems users are permitted to access. 
C)  provides weaker authentication than the use of effective passwords. 
D)  requires the use of more than one effective password. 
A)  involves the use of two or more basic authentication methods. 
B)  is a table specifying which portions of the systems users are permitted to access. 
C)  provides weaker authentication than the use of effective passwords. 
D)  requires the use of more than one effective password.

Question 12

The process that allows a firewall to be more effective by examining the data in the body of an IP packet,instead of just the header,is known as

Accepted Answer

A)  deep packet inspection. 
B)  stateful packet filtering. 
C)  static packet filtering. 
D)  an intrusion prevention system. 
A)  deep packet inspection. 
B)  stateful packet filtering. 
C)  static packet filtering. 
D)  an intrusion prevention system.

Question 13

A special purpose hardware device or software running on a general purpose computer,which filters information that is allowed to enter and leave the organization's information system,is known as a(n)

Accepted Answer

A)  demilitarized zone. 
B)  intrusion detection system. 
C)  intrusion prevention system. 
D)  firewall. 
A)  demilitarized zone. 
B)  intrusion detection system. 
C)  intrusion prevention system. 
D)  firewall.

Question 14

Which of the below keeps a record of the network traffic permitted to pass through a firewall?

Accepted Answer

A)  intrusion detection system 
B)  vulnerability scan 
C)  log analysis 
D)  penetration test 
A)  intrusion detection system 
B)  vulnerability scan 
C)  log analysis 
D)  penetration test

Question 15

Which of the following is commonly true of the default settings for most commercially available wireless access points?

Accepted Answer

A)  The security level is set at the factory and cannot be changed. 
B)  Wireless access points present little danger of vulnerability so security is not a concern. 
C)  Security is set to the lowest level that the device is capable of. 
D)  Security is set to the highest level that the device is capable of. 
A)  The security level is set at the factory and cannot be changed. 
B)  Wireless access points present little danger of vulnerability so security is not a concern. 
C)  Security is set to the lowest level that the device is capable of. 
D)  Security is set to the highest level that the device is capable of.

Question 16

All employees of E.C.Hoxy are required to pass through a gate and present their photo identification cards to the guard before they are admitted.Entry to secure areas,such as the Information Technology Department offices,requires further procedures.This is an example of a(n)

Accepted Answer

A)  authentication control. 
B)  authorization control. 
C)  physical access control. 
D)  hardening procedure. 
A)  authentication control. 
B)  authorization control. 
C)  physical access control. 
D)  hardening procedure.

Question 17

In recent years,many of the attacks carried out by hackers have relied on this type of vulnerability in computer software.

Accepted Answer

A)  code mastication 
B)  boot sector corruption 
C)  weak authentication 
D)  buffer overflow 
A)  code mastication 
B)  boot sector corruption 
C)  weak authentication 
D)  buffer overflow

Question 18

Which of the following is not a requirement of effective passwords?

Accepted Answer

A)  Passwords should be changed at regular intervals. 
B)  Passwords should be no more than 8 characters in length. 
C)  Passwords should contain a mixture of upper and lowercase letters, numbers and characters. 
D)  Passwords should not be words found in dictionaries. 
A)  Passwords should be changed at regular intervals. 
B)  Passwords should be no more than 8 characters in length. 
C)  Passwords should contain a mixture of upper and lowercase letters, numbers and characters. 
D)  Passwords should not be words found in dictionaries.

Question 19

Which of the following is not one of the essential criteria for successfully implementing each of the principles that contribute to systems reliability,as discussed in the Trust Services Framework?

Accepted Answer

A)  developing and documenting policies 
B)  effectively communicating policies to all outsiders 
C)  designing and employing appropriate control procedures to implement policies 
D)  monitoring the system and taking corrective action to maintain compliance with policies 
A)  developing and documenting policies 
B)  effectively communicating policies to all outsiders 
C)  designing and employing appropriate control procedures to implement policies 
D)  monitoring the system and taking corrective action to maintain compliance with policies

Question 20

Virtualization refers to the ability of

Accepted Answer

A)  running multiple systems simultaneously on one physical computer. 
B)  eliminating the need for a physical computer. 
C)  using the Internet to perform all needed system functions. 
D)  using web-based security to protect an organization. 
A)  running multiple systems simultaneously on one physical computer. 
B)  eliminating the need for a physical computer. 
C)  using the Internet to perform all needed system functions. 
D)  using web-based security to protect an organization.

The process that uses automated tools to identify whether a system possesses any well-known security problems is known as a(n)

The Trust Services Framework reliability principle that states access to the system and its data should be controlled and restricted to legitimate users is known as

Identify the primary means of protecting data stored in a cloud from unauthorized access.

The most effective way to protect network resources that are exposed to the internet,yet reside outside of a network is

Describe four requirements of effective passwords .

A border router

The most common input-related vulnerability is

Multi-factor authentication

The process that allows a firewall to be more effective by examining the data in the body of an IP packet,instead of just the header,is known as

A special purpose hardware device or software running on a general purpose computer,which filters information that is allowed to enter and leave the organization's information system,is known as a(n)

Which of the below keeps a record of the network traffic permitted to pass through a firewall?

Which of the following is commonly true of the default settings for most commercially available wireless access points?

All employees of E.C.Hoxy are required to pass through a gate and present their photo identification cards to the guard before they are admitted.Entry to secure areas,such as the Information Technology Department offices,requires further procedures.This is an example of a(n)

In recent years,many of the attacks carried out by hackers have relied on this type of vulnerability in computer software.

Which of the following is not a requirement of effective passwords?

Which of the following is not one of the essential criteria for successfully implementing each of the principles that contribute to systems reliability,as discussed in the Trust Services Framework?

Virtualization refers to the ability of

Accounting Information Systems: an Overview

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Confidentiality and Privacy Controls

Processing Integrity and Availability Controls

Auditing Computer-Based Information Systems

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, implementation, and Operation

Filters

Exam 8: Controls for Information Security

The process that uses automated tools to identify whether a system possesses any well-known security problems is known as a(n)

The Trust Services Framework reliability principle that states access to the system and its data should be controlled and restricted to legitimate users is known as

Identify the primary means of protecting data stored in a cloud from unauthorized access.

The most effective way to protect network resources that are exposed to the internet,yet reside outside of a network is

Describe four requirements of effective passwords .

A border router

The most common input-related vulnerability is

Multi-factor authentication

The process that allows a firewall to be more effective by examining the data in the body of an IP packet,instead of just the header,is known as

A special purpose hardware device or software running on a general purpose computer,which filters information that is allowed to enter and leave the organization's information system,is known as a(n)

Which of the below keeps a record of the network traffic permitted to pass through a firewall?

Which of the following is commonly true of the default settings for most commercially available wireless access points?

All employees of E.C.Hoxy are required to pass through a gate and present their photo identification cards to the guard before they are admitted.Entry to secure areas,such as the Information Technology Department offices,requires further procedures.This is an example of a(n)

In recent years,many of the attacks carried out by hackers have relied on this type of vulnerability in computer software.

Which of the following is not a requirement of effective passwords?

Which of the following is not one of the essential criteria for successfully implementing each of the principles that contribute to systems reliability,as discussed in the Trust Services Framework?

Virtualization refers to the ability of

Accounting Information Systems: an Overview

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Confidentiality and Privacy Controls

Processing Integrity and Availability Controls

Auditing Computer-Based Information Systems

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, implementation, and Operation

Filters