Quiz SIA2 Chapter 11

There is 5 principles that jointly contribute to system reliability, which one is the system and its information are available to meet operational and contractual obligation

• Security

• Privacy

• Availability

• Confidentiality

The time-based model of information security can be expressed in the following formula: P > D + R , what is the symbol P?

• The time it takes an attacker to break through the various controls that protect the organization’s information assets.

• The time it takes for the organization to detect that an attack is in progress

• The time it takes to respond to and stop the attack

• The time needed to develop the company.

Which one is a physical or behavioral characteristic used as an authentication credential??

• Defense In Depth

• Authentication

• Biometric Identifier

• Multifactor Authentication

Routers and firewalls control access by filtering individual packets. Organizations own one or more border routers that connect their internal networks to the Internet Service Provider. Those border routers and the organization’s main firewall use sets of IF-THEN rules, called?

• Compability Test

• Access Control Lists

• Demilitarized Zone

• Access Control Matrix

What is the specific purpose of the Router?

• A.      To control traffic, rather than looking only at the information in the IP and TCP headers.

• A.      To determine what to do with arriving packets.

• A.      To determine whether that employee should be allowed to access that resource and perform the requested action.

• A.      To read the source and destination address fields in IP packet headers to decide where to send (route) the packet next.

Which of the following is not a basic step criminals follow to attack information systems?

• Find known vulnerabilities

• Infect the victim’s network with a virus

• Identify potential points of remote entry

• Learn as musch as possible about the target and its vulnerabilities

Systems that create logs of all network traffic that was permitted to pass the firewall and then analyze those logs for signs of attempted or successful intrusions is

• A. Intrusion Prevention Systems

• B. Computer Incident Response

• C. Response Penetration Test

• D. Intrusion Detection Systems

The CIRT should lead the organization’s incident response process through four steps, which one is the last step?

• Recognition

• Recovery

• Containment

• Follow up

What is log analysis useful for?

• To identify evidence of possible attack

• To eliminate unnecessary settings and services

• To take advantage of a known vulnerability

• To identify whether a given system possesses any unused and unnecessary programs that represent potential security threats.

What are the endpoints related to?

• The security life cycle involves the acquisition or building of specific technological tools.

• The process of restricting access of authenticated users to specific portions of the system and limiting what actions they are permitted to perform.

• The workstations, servers, printers, and other devices that comprise an organization’s net.

• The organization’s internal information system that permits controlled access from the Internet.