Information Assurance
Chapter Exam Questions
Course Introduction
Information Assurance focuses on the strategies, practices, and technologies used to protect and manage information assets in organizations. The course covers foundational concepts including risk management, security policies, and legal frameworks governing information security. Students learn about the principles of confidentiality, integrity, availability, authentication, and non-repudiation, and how these principles are applied to safeguard data. Topics also include threat assessment, incident response, cryptography basics, and the implementation of controls to prevent unauthorized access or data loss. Emphasis is placed on developing practical skills for designing, evaluating, and implementing comprehensive security measures to ensure ongoing information assurance in a dynamic technological landscape.
Recommended Textbook
Information Security and IT Risk Management 1st Edition by Manish Agrawal
Available Study Resources on Quizplus
14 Chapters
349 Verified Questions
349 Flashcards
Source URL: https://quizplus.com/study-set/3541 Page 2
Chapter 1: Introduction
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70324
Sample Questions
Q1) The biggest time-consuming activity for most Information security professionals is
A) Responding to information security incidents
B) Fixing software bugs
C) Researching new technologies
D) Helping customers
Answer: C
Q2) The gang of 414 is famous in the information security literature for
A) Causing one of the most significant Internet outages ever
B) Intruding into a number of high profile computer installations
C) Stealing commercial information by exploiting weakness is wireless networks
D) Falsification of financial records at publicly traded companies
Answer: B
Q3) Of the measures you can take to improve your personal security, the least important is
A) Spending lot of money
B) Using end-point virus) protection
C) Automating software updates
D) Using appropriate passwords
Answer: A
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: System Administration
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70325
Sample Questions
Q1) The system administrator is the person responsible for
A) Day-to-day operation of a technology system
B) Writing , enforcing , and reviewing security-operating procedures
C) Developing new technology systems
D) Upgrading existing technology systems
Answer: A
Q2) UNIX was developed by
A) Ken Thompson and Dennis Ritchie in 1969
B) Bill Gates and Paul Allen in 1977
C) Edgar F. Codd in 1970
D) Bob Metcalfe in 1973
Answer: A
Q3) Common system administration tasks include
A) Developing software
B) Purchasing hardware
C) Updating software
D) Customer service
Answer: C
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: System Administration 2
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70326
Sample Questions
Q1) Common shell programs include
A) Bourne shell, C shell, D shell
B) Born shell, C shell, Born again shell
C) Korn shell, Born shell, C shell
D) Bourne shell, C shell, Bourne-again shell
Answer: D
Q2) To view the contents of a folder, we can use the command
A) ls
B) head
C) pwd
D) cd
Answer: A
Q3) When using a shell program, command options also called flags or switches are
A) Debates between users on which command to use
B) Data provided to a command to use as input
C) Single letters of full words that modify the behavior of the command in a pre-determined way
D) Debates among system administrators on which commands to use
Answer: C
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Basic Information Security Model
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70327
Sample Questions
Q1) A missing authorization vulnerability refers to a situation where
A) Users are allowed access to privileged parts of a program without verification of credentials
B) Input from other users is supplied as output to other users
C) A program puts more data into a storage location than it can hold
D) User input is used without confirming its validity
Q2) An unrestricted uploads vulnerability refers to a situation where
A) Files are accepted as input without verifying their specifications
B) Input from other users is supplied as output to other users
C) A program puts more data into a storage location than it can hold
D) User input is used without confirming its validity
Q3) Vulnerabilities are
A) Safeguards used to minimize the impact of threats
B) Capabilities, intentions and attack methods of adversaries to cause harm to assets
C) Resource or information that is to be protected
D) Weaknesses in an information system that can lead to a compromise of an asset
Q4) Vulnerabilities in IT systems can be eliminated through secure coding practices
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Asset Identification and Characterization
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70328
Sample Questions
Q1) The ISO standard for information security is
A) ISO 9000
B) ISO 27002
C) ISO 14000
D) ISO 3166
Q2) Restricted assets are
A) Assets whose loss would cause severe repercussions to the organization immediately
B) Importance of an asset to the immediate survival of an organization
C) The damage caused to an organization from a breach of confidentiality or integrity of an asset
D) Assets whose disclosure or alteration would have adverse consequences for the organization
Q3) Essential assets are those whose loss of availability
A) Could be acceptable
B) Could be tolerated for a short period of time
C) Could cause confidentiality breaches
D) Would cause immediate severe repercussions to the organization
To view all questions and flashcards with answers, click on the resource link above.
Chapter 6: Threats and Vulnerabilities
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70329
Sample Questions
Q1) Help desk staff can be a threat due to A) Abuse of privileges
B) Human errors
C) Lack of training
D) All of the above
Q2) Threats are
A) Capabilities, intentions and attack methods of adversaries
B) Interactions between relevant agents, actions
C) Individuals, organizations or groups that originate a particular threat action
D) Activist groups
Q3) Threat actions are
A) Activities performed by agents to compromise assets
B) Capabilities, intentions and attack methods of adversaries
C) Interactions between relevant agents, actions and assets
D) Individuals, organizations or groups that originate a particular threat action
To view all questions and flashcards with answers, click on the resource link above.
8
Chapter 7: Encryption Controls
Available Study Resources on Quizplus for this Chatper
24 Verified Questions
24 Flashcards
Source URL: https://quizplus.com/quiz/70330
Sample Questions
Q1) For any given input, the length of its hash out is
A) Always shorter than the input
B) Depends upon the length of the input
C) Always the same
D) Always longer than the input
Q2) The current standard for secret key encryption is
A) DES Data Encryption Standard
B) AES Advanced Encryption Standard
C) IDEA International Data Encryption Algorithm
D) SHA Secure Hash Algorithm
Q3) The popular encryption method RSA is an example of
A) Secret key encryption
B) Public key encryption
C) Hash functions
D) AES
Q4) The first documented instance of encryption was used by
A) Egyptian pharaoh Tutankhamun
B) Italian inventor Leonardo da Vinci
C) Italian artist Michelangelo
D) Roman Emperor Julius Caesar
Page 9
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: Identity and Access Management
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70331
Sample Questions
Q1) Authentication is
A) The process of proving that a user is the owner of the identity being used
B) A secret series of characters known only to the user
C) The use of minute differences in physical traits to prove identity
D) A protocol that allows nodes in an insecure network to securely identify themselves to each other using tokens
Q2) OpenID uses an
A) Insecure model of authentication
B) Centralized model for authentication
C) Federated model for authentication
D) Distributed model for authentication
Q3) Hardware or software tokens are used for
A) The process of proving that a user is the owner of the identity being used
B) A secret series of characters known only to the user
C) The minute differences in physical traits used to prove identity
D) A protocol that allows nodes in an insecure network to securely identify themselves to each other using tokens
Q4) Kerberos has been very useful in securing web applications
A)True
B)False
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Hardware and Software Controls
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70332
Sample Questions
Q1) Patches should always be installed as soon as they become available
A)True
B)False
Q2) In enterprise networks, power users can facilitate patch management by
A) Administering as much of the patch management themselves as possible
B) Setting automatic updates to as many services and software as possible
C) Using department funds to deploy local patch management systems to as many systems as possible
D) Allowing system administrators to controls as much of the patch management as possible
Q3) Compromised passwords is/ are
A) Passwords on the system known to unauthorized users
B) Acquiring passwords from storage, network transmission or user knowledge
C) Repeated attempts to authenticate using possible passwords
D) Generating character strings to match existing passwords
Q4) Password capturing is
A) Passwords on the system known to unauthorized users
B) Acquiring passwords from storage, network transmission or user knowledge
C) Repeated attempts to authenticate using possible passwords
D) Generating character strings to match existing passwords
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Shell Scripting
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70333
Sample Questions
Q1) The difference between break and continue while processing loop input is that A) break exits the loop, but continue only exits the current iteration of the loop
B) break only exits the current iteration of the loop, but continue exits the loop
C) break and continue exit the loop
D) break and continue both exit only the current iteration of the loop
Q2) Consider the following script. The output will be newlines replaced by spaces for brevity): #! /bin/bash for number in \(\{ 5 \ldots 1 \}\) do echo snumber done
A) 5 .. 1
B) 5 4 3 2 1
C) 1 2 3 4 5
D) 5 3 1
To view all questions and flashcards with answers, click on the resource link above.
12
Chapter 11: Incident Handling
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70334
Sample Questions
Q1) In the context of monitoring, a false negative is
A) An undetected problem
B) A component that is working intermittently
C) A component that is likely to fail soon
D) An alert that upon further investigation turns out to be not a problem
Q2) The leader of the IRT is preferably
A) Someone from the senior leadership of the organization
B) A technically competent professional with high credibility within the organization
C) The functional leader of the business unit affected by the incident
D) The leader of the IT function within the organization
Q3) Compliance is
A) A violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices
B) The act of following applicable laws, regulations, rules, industry codes and contractual obligations
C) The part of the incident response policy that specifies the targets of the policy
D) Staff designated to respond to incidents
To view all questions and flashcards with answers, click on the resource link above.
13
Chapter 12: Incident Analysis
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70335
Sample Questions
Q1) Syslog selectors are composed of
A) Information, warning
B) Facility, priority
C) Event logs, application logs
D) Syslog, logmon
Q2) A common default location for Linux syslog messages is
A) /tmp/messages
B) /etc/log/messages
C) /var/log/messages
D) /messages
Q3) In Windows, operating system log messages are recorded in the
A) Application log
B) Security log
C) System event log
D) Forwarded events log
Q4) In Windows, login and logout attempts are recorded by default in the A) Application log
B) Security log
C) System event log
D) Forwarded events log
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Policies, Standards and Guidelines
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70336
Sample Questions
Q1) From the perspective of information security, the Family Educational Rights and Privacy FERPA act defines
A) Requirements for financial institutions to protect the privacy of their customers' non-public, personal information
B) Protections for the privacy of student education records
C) The responsibilities of top executives of publicly traded companies for the accuracy and timeliness of financial data
D) Safeguards that covered entities must use to protect the confidentiality, integrity and availability of electronic protected health information
Q2) A guideline is
A) Procedures that tell units when it would be nice if things were operated a certain way, but it is not a requirement to do so
B) Guidelines to users and customers on what is appropriate and what is not appropriate to do with information technology resources
C) A defined set of rules, accepted and adopted by several organizations
D) A document that records a high-level principle or course of action that has been decided on
To view all questions and flashcards with answers, click on the resource link above.
Chapter 14: It Risk Analysis and Risk Management
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70337
Sample Questions
Q1) As described in the text, a statement of a risk includes
A) Agent, threat, asset, damage
B) Agent, action, damage, threat
C) Agent, action, asset, damage
D) Threat, asset, action, damage
Q2) IT general controls are controls that
A) Only affect non-financial systems such as email systems
B) Involve the most important financial applications
C) Are directly supervised by the organization's senior leadership
D) Involve the underlying IT systems which support financial applications
Q3) A certain risk has a 1% likelihood of occurrence in the coming year. If the risk is observed, the organization estimates a loss of $1million. The risk is then assessed as A) 1%
B) $1,000,000
C) 1,000
D) $10,000
Q4) A given threat is usually associated with one risk
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 16