NETSEC MIDTERM EXAM PART 1

What is the primary responsibility of management in ensuring information security?

• Supervising infrastructure deployment

• Delegating security tasks to IT

• Implementing security measures effectively

Which of the following is NOT a common IP violation?

• Software piracy

• Intellectual property protection

• Technical protection measures enforcement

What is the main characteristic of a brute force password attack?

• Selecting specific accounts for attack

• Trying every possible combination of a password

• Using widely known passwords for guessing

What is the primary role of the Chief Information Security Officer (CISO)?

• Advising on strategic information management

• Enforcing information security policies

• Reviewing technical aspects of security projects

Which approach to information security implementation involves a systematic plan like Systems Development Life Cycle (SDLC)?

• Top-down Approach

• Bottom-up Approach

• Middle-out Approach

What is the main objective of a denial-of-service (DoS) attack?

• Stealing sensitive information

• Gaining unauthorized access

• Disrupting normal system functions

Who is responsible for deciding the data classification level associated with the data?

• Data Custodian

• Data Owner

• Data User

Which threat involves the redirection of legitimate Web traffic to illegal domains?

• Phishing

• Pharming

• Spoofing

What is the main purpose of physical security measures?

• Protecting communications media

• Avoiding unauthorized access to physical items

• Ensuring the authenticity of information

Which component of an information system is primarily responsible for managing the systems housing the information?

• End Users

• Data Custodians

• Systems Administrators