Security Ch.1

Ian recently earned his security certification and has been offered a promotion to a position that requires him to analyze and design security solutions as well as identifying users' needs. Which of these generally recognized security positions has Ian been offered?

• Security administrator

• Security technician

• Security officer

• Security manager

Alyona has been asked by her supervisor to give a presentation regarding reasons why security attacks continue to be successful. She has decided to focus on the issue of widespread vulnerabilities. Which of the following would Alyona NOT include in her presentation?

• Large number of vulnerabilities

• End-of-life systems

• Lack of vendor support

• Misconfigurations

Tatyana is discussing with her supervisor potential reasons why a recent attack was successful against one of their systems. Which of the following configuration issues would NOT covered?

• Default configurations

• Weak configurations

• Vulnerable business processes

• Misconfigurations

What is a race condition?

• When a vulnerability is discovered and there is a race to see if it can be patched before it is exploited by attackers.

• When two concurrent threads of execution access a shared resource simultaneously, resulting in unintended consequences

• When an attack finishes its operation before antivirus can complete its work

• When a software update is distributed prior to a vulnerability being discovered.

Which the following is NOT a reason why it is difficult to defend against today's attackers?

• Delays in security updating

• Greater sophistication of defense tools

• Increased speed of attacks

• Simplicity of attack tools

Which of the following is NOT true regarding security

• Security is a goal.

• Security includes the necessary steps to protect from har

• Security is a process.

• Security is a war that must be won at all costs.

Adone is attempting to explain to his friend the relationship between security and convenience. Which of the following statements would he use?

• "Security and convenience are not related."

• "Convenience always outweighs security.''

• "Security and convenience are inversely proportional.''

• "Whenever security and convenience intersect, security always wins."

Which of the following ensures that only authorized parties can view protected information?

• Authorization

• Confidentiality

• Availability

• Integrity

Which of the following is NOT a successive layer in which information security is achieved?

• Products

• People

• Procedures

• Purposes

Complete this definition of information security: That which protects the integrity, confidentiality, and availability of information _____.

• on electronic digital devices and limited analog devices that can connect via the Internet or through a local area network.

• through a long-term process that results in ultimate security.

• using both open-sourced as well as supplier-sourced hardware and software that interacts appropriately with limited resources.

• through products, people, and procedures on the devices that store, manipulate, and transmit the information.