Font size
WorksheetsInformation Security Quiz
Total questions: 25
Worksheet time: 14mins
Describe the role of a data trustee.
(a)
In file hashing, a file is read by a special algorithm that uses the value of the bits in the file to compute a single number called the (a) value.
__________ was the first operating system to integrate security as one of its core functions.
UNIX
DOS
MULTICS
ARPANET
During the early years, information security was a straightforward process composed predominantly of (a) security and simple document classification schemes.
__________ has become a widely accepted evaluation standard for training and education related to the security of information systems and is hosted by CNSS.
NIST SP 800-12
NSTISSI No. 4011
IEEE 802.11(g)
ISO 17788
Describe the need for balance between information security and access to information inherent in information systems.
(a)
Describe the multiple types of security systems present in many organizations.
(a)
The value of information comes from the characteristics it possesses.
True
False
A potential weakness in an asset or its defensive control system(s) is known as a(n) (a) .
Every organization, whether public or private and regardless of size, has information it wants to protect.
True
False
Using a methodology will usually have no effect on the probability of success.
True
False
A(n) project team should consist of a number of individuals who are experienced in one or multiple facets of the technical and nontechnical areas.
True
False
Information has redundancy when it is free from mistakes or errors and it has the value that the end user expects.
True
False
Network security focuses on the protection of physical items, objects, or areas from unauthorized access and misuse.
True
False
The famous study entitled “Protection Analysis: Final Report” focused on a project undertaken by ARPA to understand and detect __________ in operating systems security.
bugs
vulnerabilities
malware
maintenance hooks
A champion is a project manager, who may be a departmental line manager or staff unit manager, and has expertise in project management and information security technical requirements.
True
False
Hardware is often the most valuable asset possessed by an organization, and it is the main target of intentional attacks.
True
False
E-mail spoofing involves sending an e-mail message with a harmful attachment.
True
False
Confidentiality ensures that only those with the rights and privileges to access information are able to do so.
True
False
In 1993, the first ______ conference was held in Las Vegas. Originally, it was established as a gathering for people interested in information security, including authors, lawyers, government employees, and law enforcement officials.
DEFCON
CyberCom
Black Hat
World Security
When a computer is the subject of an attack, it is the entity being attacked.
True
False
A server would experience a(n) __________ attack when a hacker compromises it to acquire information via a remote location using a network connection.
indirect
direct
software
hardware
During the early years of computing, the primary threats to security were physical theft of equipment, espionage against the products of the systems, and sabotage.
True
False
Information security can begin as a grassroots effort in which systems administrators attempt to improve the security of their systems, often referred to as the bottom-up approach.
True
False
The ______ is the individual primarily responsible for the assessment, management, and implementation of information security in the organization.
ISO
CIO
CISO
