Securing Information Systems - Chapter 10

Which of the following is an example of a phishing attack?

• A hacker uses a brute force attack to guess passwords.

• An attacker sends an email pretending to be a trusted entity to steal sensitive information.

• A virus that replicates itself to spread to other computers.

• A denial-of-service attack that overwhelms a system with traffic.

Tags

DOK Level 1: Recall

What does the principle of "least privilege" entail in information security?

• Users should have the maximum level of access to perform their tasks.

• Users should have access only to the information and resources necessary for their job functions.

• All users should have administrative privileges.

• Users should share their passwords with their supervisors.

Tags

DOK Level 1: Recall

Which protocol is commonly used to secure web traffic?

• FTP

• HTTP

• HTTPS

• SMTP

Tags

DOK Level 1: Recall

What is the primary purpose of data encryption?

• To compress data for storage efficiency.

• To convert data into a format that is unreadable without a decryption key.

• To back up data to a remote server.

• To delete sensitive data securely.

Tags

DOK Level 1: Recall

Which of the following is a method of access control?

• Firewall

• Antivirus software

• Role-Based Access Control (RBAC)

• Data encryption

Tags

DOK Level 1: Recall

What is the first step in an incident response plan?

• Eradication

• Containment

• Identification

• Recovery

Tags

DOK Level 1: Recall

Which of the following is a type of malware that encrypts a user's files and demands payment for the decryption key?

• Spyware

• Ransomware

• Adware

• Worm

Tags

DOK Level 1: Recall

What does the term "CIA triad" stand for in information security?

• Confidentiality, Integrity, Availability

• Confidentiality, Information, Authentication

• Control, Integrity, Access

• Confidentiality, Integrity, Authorization

Tags

DOK Level 1: Recall

Which of the following is a common symmetric encryption algorithm?

• RSA

• AES

• ECC

• DSA

Tags

DOK Level 1: Recall

What is the purpose of a firewall in network security?

• To encrypt data in transit.

• To monitor and control incoming and outgoing network traffic based on predetermined security rules.

• To detect and remove malware from a system.

• To provide secure remote access to a network.

Tags

DOK Level 1: Recall