ITBP301_Chapter 01

Which of the following best describes system integrity?

• Preventing the system from unauthorized manipulation
• Ensuring all users have full access to the system
• Encrypting user passwords for safety
• Blocking all non-administrative users

A vulnerability is:

• A potential for harm
• A secure part of the system
• The act of breaching a system
• A flaw or weakness that could be exploited

Which of the following is an example of a passive attack?

• Modification of message
• Denial of service
• Traffic analysis
• Masquerade

Which type of active attack involves capturing and retransmitting data?

• Masquerade
• Replay
• Modification
• Denial of Service

What is a countermeasure in computer security?

• An action to exploit a vulnerability
• A method to bypass system security
• A way to reduce or eliminate a threat
• A measure to hide system information

Authenticity in security refers to:

• User convenience
• Data confidentiality
• Encryption standards
• Assurance that data or users are genuine

Accountability helps with all of the following except:

• Intrusion detection
• Forging audit logs
• Fault isolation
• Non-repudiation

Which of the following assets is most vulnerable to theft and least protected by automated controls?

• Data
• Software
• Hardware
• Networks

What is the most difficult software security issue to detect?

• Pirated copies
• Deletion of files
• Altered user interface
• Software that still functions but behaves differently

Which of these mechanisms is classified as an irreversible encipherment method?

• Public key cryptography
• Symmetric encryption
• Hash algorithms
• Stream ciphers