Exam 8: Controls for Information Security

The process of maintaining a table listing all established connections between the organization's computers and the internet to determine whether an incoming packet is part of an ongoing communication initiated by an internal computer is known as

Cloud computing can potentially generate significant cost savings for an organization.

Identify one aspect of systems reliability that is not a source of concern with regards to a public cloud.

This is used to identify rogue modems (or by hackers to identify targets).

The process that screens individual IP packets based solely on the contents of the source and/or destination fields in the packet header is known as

This protocol specifies the procedures for dividing files and documents into packets to be sent over the Internet.

Compatibility tests utilize a(n)________,which is a list of authorized users,programs,and data files the users are authorized to access or manipulate.

Restricting access of users to specific portions of the system as well as specific tasks,is an example of

This network access control determines which IP packets are allowed entry to a network and which are dropped.

Verifying the identity of the person or device attempting to access the system is an example of

This protocol specifies the structure of packets sent over the internet and the route to get them to the proper destination.

Which of the following is not one of the three fundamental information security concepts?

Describe what information security process the term hardening refers to.

The security technology that evaluates IP packet traffic patterns in order to identify attacks against a system is known as

There are "white hat" hackers and "black hat" hackers.Cowboy451 was one of the "black hat" hackers.He had researched an exploit and determined that he could penetrate the target system,download a file containing valuable data,and cover his tracks in eight minutes.Six minutes into the attack he was locked out of the system.Using the notation of the time-based model of security,which of the following must be true?

The ________ disseminates information about fraud,errors,breaches and other improper system uses and their consequences.

On April 1,2012,students enrolled in an economics course at Harvard University received an e-mail stating that class would be cancelled.The e-mail claimed to be from the professor,but it wasn't.Computer forensic experts determined that the e-mail was sent from a computer in one of the campus labs at 6:32 A.M.They were then able to uniquely identify the computer that was used by means of its network interface card's ________ address.Security cameras revealed the identity of the student responsible for spoofing the class.

This is an authorized attempt by an internal audit team or an external security consultant to attempt to break into the organization's information system.

Perimeter defense is an example of which of the following preventive controls that are necessary to provide adequate security?

Which of the following is an example of a corrective control?