ECIH QUIZ

Computer security incident can be defined as:

• Rectifying loss of information that may affect the investment of organization in different business activities

• Events related to physical security incidents and trouble--- shooting issues in corporate networks

• Any real or suspected adverse event in relation to the security of computer systems or networks

• Policies guaranteeing access to information system resources

Data classification is the process of classifying data based on the level of sensitivity as it is created, modified, improved, stored, or transmitted. Which of

these levels fall into U.S. Government standards for data classification?

• Top secret

• All answer is correct

• Confidential

• Restricted

• Unclassified

"Technically not a U.S. Government classification level, but used for government documents that do not have a classification. Such documents can sometimes be viewed by those without security clearance”. Which of the following items correctly

describes the above statement?

• Top secret

• Unclassified

• Confidential

• Restricted

Information Warfare refers to the use of information and information systems as weapons in a conflict in which the information and information systems themselves are the targets. Which of these constitute the categories of information warfare?

• Offensive information warfare

• Employee sabotage information warfare

• Defensive information warfare

• Organization’s breach information warfare

• Offensive and Defensive information warfare

Information system processes data into useful information to achieve specified organizational or individual goals. It accepts, processes, and stores data in the form of records in a computer system and automates some of the information processing activities of the organization.

Who is responsible for implementing and controlling the security measures of an information system?

• Information custodian

• Information consultant

• Information owner

• Information implementer

• Information gatherer

Identify the three tenets of information security.

• Confidentiality

• Integrity

• Availability

• Non---Repudiation

• authorization

Which out of these signs do not indicate a computer security incident?

• A system alarm or similar indication from an intrusion---detection

• Attempt to logon to a new user account

• Smoke emitting from the system

• System crashes or poor system performance

• Unauthorized operation of a program or sniffer device to capture network traffic

Personal theft of data related to a computer incident refers to which of the following security incident levels?

• Low Level

• Middle Level

• High Level

• Exterior Level

• Interior Level

A computer security incident might be any real or suspected adverse event in relation to the security of computer systems or networks. In order to clearly

communicate security incidents and events across different departments in an organization or members of an incident response team, it is necessary to adopt a common set of terminology and to categorize the incidents.

Localized worm/virus outbreak refers to which of the following security incident levels?

• Middle Level

• Low Level

• High Level

• Exterior Level

• Interior Level

which level poses an immediate threat to various systems that lead to criminal charges, regulatory fines, or bad name to the organization?

• Low Level

• Middle Level

• High Level

• Dual Level

• Interior Level