The architecture where an integrated combination of appliances, systems and solutions, software, alarms, and vulnerability scans working together

Which of the following is NOT an Information Security statement?

It restricts access to authorized individuals.

The information can be accessed and modified by authorized individuals in an appropriate timeframe.

It is a factor of identification that has a user ID and password.

It is a factor of identification that uses physical characteristics.

It only provides access to information necessary to perform their job duties to read, modify, add, and/or delete information.

It is created for each resource that can read, write, delete or add information.

It is an algorithm that encodes or scrambles information during transmission or storage.

It is a possibility that a threat exploits a vulnerability in an asset and causes damage or loss to the asset.

It is something that can potentially cause damage to the organization, IT Systems or network.

It is a weakness in the organization, IT Systems, or network that can be exploited by a threat.

Which is NOT an Element of Threats?

Which of the following is NOT an Agent of threat element?

It is an element of threat that outcomes the applied threat.

Which of the following is NOT a possible threat?

Which of the following is NOT a Threat Source?

To provide management direction and support for Information security.

To prevent unauthorized access, theft, compromise, damage information and information processing facilities.

It is manipulating a person into knowingly or unknowingly giving up information.

Which of the following is NOT part of the Social Engineering attack cycle?

It is an aggressor that will first try to build up a good bonding with the target and he makes sure that he gains the trust of the target which he’ll later exploit.

Once the target has finished the task requested by the attacker,

the cycle is complete.

These attacks deceive the user into

believing that the application in use is truly providing them with

security which is not the fact always.

Which of the following is NOT part of the Pre-atack Phase?

Which of the following is NOT Information Gathering Methodology?

It is used to find personal information like residential addresses, contact numbers, date of birth, and change of location.

It is a free, open-source, domain footprinting tool that will scarpe the websites on the domain, as well as search Google, Netcraft, DNS to build up information.

It is a tool to extract targeted company's contact data from the internet.

It integrates the world's most advanced route tracing software with performance measurements.

It uses planet imagery and geographic information right on your desktop.

It is an email analysis tool that enables analysis of an email and its headers automatically and provides graphical results.

It is a web site stealing tool that has everything you need instantly.

It is an automated sub-domain retrieval tool.

It provides rich information to perform passive reconnaissance.

It is the process of gathering resources regarding a target computer or network  system.

Which of the following is not a Footprinting resource?

It is used to query information regarding certain domain names.

It is a tool that connects to an available database to provide information  regarding a domain or host.

It is a program that provides the hostname of a particular IP address  and vice-versa.

It is a program that traces packet routes.

It is is a graphical version of tracert.

It is a general purpose  Internet utility  package which  includes ping,  nslookup, whois, IP  block, and  traceroute function.

It detects the live system on target network and services running on target computer.

These are tools that is used to scan a range of  phone nos. for vulnerable modems.

It is a tool that sends an ICMP echo request  to a range of IP addresses and lists all  hosts that reply.

It is a tool that is used to detect services  running in a computer.

It is used to determine the operating system  running in a computer.

It is a type of Fingerprinting that takes advantage of the fact that OS  vendors implement the TCP stack  differently and sends a packet to target computer and  based on the response it guesses the OS  running in the computer.

It is recognized as essential to protect vital processes and the systems that provide those processes.

It is a management framework for implementation.

To ensure the security of valuable organizational IT and its related assets.

To reduce the risks of human error, theft, fraud or misuse of facilities.

The target could then be manipulated by the ‘trusted’ attacker to reveal their sensitive information like password to carry out an action.

There could be variety of techniques which is used by the aggressor to gather sensitive information about the target(s).

It can be made private using an internal network to limit access to them.

Single-factor authentication (user ID/password) is the easiest to break.

Persons accessing the information is who they say they are.

Data has not been altered in an unauthorized manner.

These attacks are those attacks that are purely perpetrated through

the art of deception.

It is a new term of the century which is used to take over a private.

Hundreds and thousands of e-mails are

sent to the victim. This is tightly related with phishing attempt.

The attacker acts as a clean support crew to help users to fix any problem

It is a trick to make the user believe that something false is real.

The attacker can call up to the organization’s computer help desk and pretend to have trouble accessing the system.

It is an element of threat performs as a catalyst of threat.

It is an element of threat that causes the agent to act.

To ensure the correct and secure operation of information processing facilities.

To ensure security built into information systems.