Course Introduction
Computer Security
Test Questions
Computer Security examines the principles and practices necessary to protect digital information and systems from unauthorized access, misuse, and disruption. The course covers core topics including cryptography, authentication, access control, network security, malware, security policies, and risk management. Students explore real-world attack scenarios and defense mechanisms, gaining hands-on experience with tools and techniques used to safeguard data and infrastructure. Through theoretical study and practical labs, learners develop an understanding of vulnerabilities in hardware, software, and networked systems, as well as best practices for designing secure computing environments.
Recommended Textbook
Principles of Information Security 4th Edition by Michael E. Whitman
Available Study Resources on Quizplus
12 Chapters
Verified Questions 1111 Flashcards
Source URL: https://quizplus.com/study-set/2244
Page 2
Chapter 1: Introduction to Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44634
Sample Questions
Q1) During the early years,information security was a straightforward process composed predominantly of ____________________ security and simple document classification schemes.
Answer: physical
Q2) Risk evaluation is the process of identifying,assessing,and evaluating the levels of risk facing the organization,specifically the threats to the organization's security and to the information stored and processed by the organization._________________________
A)True
B)False
Answer: False
Q3) ____ is the predecessor to the Internet.
A)NIST
B)ARPANET
C)FIPS
D)DES
Answer: B
Q4) The ____________________ component of the IS comprises applications,operating systems,and assorted command utilities.
Answer: software
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: The Need for Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44635
Sample Questions
Q1) Compared to Web site defacement,vandalism within a network is less malicious in intent and more public.
A)True
B)False
Answer: False
Q2) Expert hackers are extremely talented individuals who usually devote lots of time and energy to attempting to break into other people's information systems.
A)True
B)False
Answer: True
Q3) The ____ hijacking attack uses IP spoofing to enable an attacker to impersonate another entity on the network.
A)WWW
B)TCP
C)FTP
D)HTTP
Answer: B
Q4) The timing attack explores the contents of a Web browser's ____________________.
Answer: cache
Page 4
To view all questions and flashcards with answers, click on the resource link above.
Chapter 3: Legal, Ethical, and Professional Issues in Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44636
Sample Questions
Q1) Which of the following acts is also widely known as the Gramm-Leach-Bliley Act?
A)Financial Services Modernization Act
B)Communications Act
C)Computer Security Act
D)Economic Espionage Act
Answer: A
Q2) The difference between a policy and a law is that ignorance of a law is an acceptable defense.
A)True
B)False
Answer: False
Q3) ____ law regulates the structure and administration of government agencies and their relationships with citizens,employees,and other governments.
A)Public
B)Private
C)Civil
D)Criminal
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Risk Management
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44637
Sample Questions
Q1) ____________________ are defined as information and the systems that use,store,and transmit information.
Q2) Of the three types of mitigation plans,the _________________________ plan is the most strategic and long term.
Q3) Eliminating a threat is an impossible proposition.
A)True
B)False
Q4) Overriding an employee's security ____________________ requires that the need-to-know standard be met.
Q5) You should adopt naming standards that do not convey information to potential system attackers.
A)True
B)False
Q6) Once the inventory and value assessment are complete,you can prioritize each asset using a straightforward process known as ____________________ analysis.
Q7) A(n)____________________ is a "value or profile of a performance metric against which changes in the performance metric can be usefully compared."
Q8) List Microsoft's "Ten Immutable Laws of Security" in any order
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Planning for Security
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44638
Sample Questions
Q1) An attack ____________________ is a detailed description of the activities that occur during an attack.
Q2) The first phase in the development of the contingency planning process is the ____.
A)BIA
B)BRP
C)DP9
D)IRP
Q3) Incident ____________________ is the process of examining a potential incident,or incident candidate,and determining whether or not the candidate constitutes an actual incident.
Q4) A(n)____________________ is a device that selectively discriminates against information flowing into or out of the organization.
Q5) The ISSP sets out the requirements that must be met by the information security blueprint or framework.
A)True
B)False
Q6) RAID Level 1 is commonly called disk ____________________.
Q7) What is the purpose of security education,training,and awareness (SETA)?
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Security Technology: Firewalls and Vpns
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44639
Sample Questions
Q1) The Remote ____________________ Dial-In User Service system centralizes the management of user authentication by placing the responsibility for authenticating each user in the central RADIUS server.
Q2) Most firewalls use packet header information to determine whether a specific packet should be allowed to pass through or should be dropped._________________________
A)True
B)False
Q3) The DMZ cannot be a dedicated port on the firewall device linking a single bastion host.
A)True
B)False
Q4) ____ inspection firewalls keep track of each network connection between internal and external systems.
A)Static
B)Dynamic
C)Stateful
D)Stateless
Q5) Briefly describe the seven best practices rules for firewall use.
Q6) The architecture of a(n)____________________ firewall provides a DMZ.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Security Technology: Intrusion Detection and
Prevention Systems, and Other Security Tools
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44640
Sample Questions
Q1) Passive scanners are advantageous in that they require vulnerability analysts to get approval prior to testing.
A)True
B)False
Q2) For Linux or BSD systems,there is a tool called "scanner" that allows a remote individual to "mirror" entire Web sites._________________________
A)True
B)False
Q3) The false error rate is the percentage of identification instances in which authorized users are denied access a result of a failure in the biometric device._________________________
A)True
B)False
Q4) ____ applications use a combination of techniques to detect an intrusion and then trace it back to its source.
A)Trace and treat
B)Trap and trace
C)Treat and trap
D)Trace and clip
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Cryptography
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44641
Sample Questions
Q1) ____ is the process of converting an original message into a form that is unreadable to unauthorized individuals.
A)Encryption
B)Decryption
C)Cryptology
D)Cryptography
Q2) ____________________ or cryptosystem is an encryption method or process encompassing the algorithm,key(s)or cryptovariable(s),and procedures used to perform encryption and decryption.
Q3) Internet Protocol Security is designed to protect data integrity,user confidentiality,and authenticity at the IP packet level._________________________
A)True
B)False
Q4) Digital ____________________ are public-key container files that allow computer programs to validate the key and identify to whom it belongs.
Q5) The process of hiding messages within the digital encoding of a picture or graphic is called ____________________.
Q6) Describe digital certificates.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Physical Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44642
Sample Questions
Q1) ____________________ detect movement within a confined space and are either active or passive.
Q2) In the ____ UPS,the internal components of the standby models are replaced with a pair of inverters and converters.
A)line-interactive
B)ferroresonant
C)true online
D)offline
Q3) In the ____ approach,the sensor detects an unusually rapid increase in the area temperature within a relatively short period of time.
A)fixed temperature
B)permanent temperature
C)fixed rate
D)rate-of-rise
Q4) Class ____________________ fires are extinguished by agents that interrupt the ability of the fuel to be ignited.
Q5) A wet-pipe system is usually considered appropriate in computer rooms.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Implementing Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44643
Sample Questions
Q1) The Lewin change model consists of ____.
A)unfreezing
B)moving
C)refreezing
D)All of the above
Q2) All organizations should designate a champion from the general management community of interest to supervise the implementation of an information security project plan.
A)True
B)False
Q3) The primary drawback to the direct changeover approach is that if the new system fails or needs modification,users may be without services while the system's bugs are worked out.
A)True
B)False
Q4) A direct changeover is also known as going "fast turnkey."
A)True B)False
Q5) ERP stands for enterprise ____________________ planning.
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Security and Personnel
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44644
Sample Questions
Q1) ____ are the technically qualified individuals tasked to configure firewalls,deploy IDSs,implement security software,diagnose and troubleshoot problems,and coordinate with systems and network administrators to ensure that an organization's security technology is properly implemented.
A)CSOs
B)CISOs
C)Security managers
D)Security technicians
Q2) The applicant for the CISA must provide evidence of ____ years of professional work experience in the field of information security,with a waiver or substitution of up to two years for education or previous certification.
A)five
B)eight
C)ten
D)twelve
Q3) ISSMP stands for Information Systems Security Monitoring
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above.
Page 13
Chapter 12: Information Security Maintenance
Available Study Resources on Quizplus for this Chatper
103 Verified Questions
103 Flashcards
Source URL: https://quizplus.com/quiz/44645
Sample Questions
Q1) Threats cannot be removed without requiring a repair of the vulnerability.
A)True
B)False
Q2) CM assists in streamlining change management processes and prevents changes that could detrimentally affect the security posture of a system before they happen._________________________
A)True
B)False
Q3) The ____ vulnerability assessment process is designed to find and document selected vulnerabilities that are likely to be present on the internal network of the organization.
A)intranet
B)Internet
C)LAN
D)WAN
Q4) The target selection step involves using the external monitoring intelligence to configure a test engine (such as Nessus)for the tests to be performed.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 14