Information Security Practice Questions
Course Introduction
Information Security is a comprehensive course that explores the principles, practices, and technologies essential for protecting information assets in modern organizations. The course examines key concepts such as confidentiality, integrity, and availability, alongside security threats, vulnerabilities, and risk management strategies. Students will learn about cryptographic techniques, authentication and authorization mechanisms, network security, malware, and incident response. Practical case studies and hands-on exercises will equip students with the skills needed to design, implement, and evaluate security policies and controls, ensuring robust defenses against a diverse range of cyber threats.
Recommended Textbook
Principles of Information Security 4th Edition by Michael E. Whitman
Available Study Resources on Quizplus
12 Chapters
1111 Verified Questions
1111 Flashcards
Source URL: https://quizplus.com/study-set/2244
Page 2
Chapter 1: Introduction to Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44634
Sample Questions
Q1) A computer is the ____________________ of an attack when it is the target entity.
Answer: object
Q2) Information security can be an absolute. A)True B)False
Answer: False
Q3) ____________________ of information is the quality or state of being genuine or original,rather than a reproduction or fabrication.
Answer: Authenticity
Q4) During the ____________________ War,many mainframes were brought online to accomplish more complex and sophisticated tasks so it became necessary to enable the mainframes to communicate via a less cumbersome process than mailing magnetic tapes between computer centers.
Answer: Cold
Q5) A(n)____________________ information security policy outlines the implementation of a security program within the organization. Answer: enterprise
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: The Need for Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44635
Sample Questions
Q1) ____ is an integrated system of software,encryption methodologies,and legal agreements that can be used to support the entire information infrastructure of an organization.
A)SSL
B)PKI
C)PKC
D)SIS
Answer: B
Q2) A ____ is an attack in which a coordinated stream of requests is launched against a target from many locations at the same time.
A)denial-of-service
B)distributed denial-of-service
C)virus
D)spam
Answer: B
Q3) Script ____________________ are hackers of limited skill who use expertly written software to attack a system.
Answer: kiddies
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Legal, Ethical, and Professional Issues in Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44636
Sample Questions
Q1) Cultural differences can make it easy to determine what is and is not ethical-especially when it comes to the use of computers.
A)True
B)False
Answer: False
Q2) The Association for Computing Machinery and the Information Systems Security Association have the authority to banish violators of their ethical standards from practicing their trade.
A)True
B)False
Answer: False
Q3) Guidelines that describe acceptable and unacceptable employee behaviors in the workplace are known as ____________________.
Answer: policies
Q4) Key studies reveal that the overriding factor in leveling the ethical perceptions within a small population is ____________________.
Answer: education
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Risk Management
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44637
Sample Questions
Q1) Once the organizational threats have been identified,an assets identification process is undertaken.
A)True
B)False
Q2) Qualitative-based measures are comparisons based on numerical standards,such as numbers of successful attacks._________________________
A)True
B)False
Q3) Overriding an employee's security ____________________ requires that the need-to-know standard be met.
Q4) After identifying and performing the preliminary classification of an organization's information assets,the analysis phase moves on to an examination of the ____________________ facing the organization.
Q5) In a(n)____,each information asset is assigned a score for each of a set of assigned critical factor.
A)OPSEC
B)COMSEC
C)weighted factor analysis
D)data classification scheme
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Planning for Security
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44638
Sample Questions
Q1) SP 800-18 Rev.1,The Guide for Developing Security Plans for Federal Information Systems,must be customized to fit the particular needs of a(n)organization._________________________
A)True
B)False
Q2) ACLs are more specific to the operation of a system than rule-based policies and they may or may not deal with users directly.
A)True
B)False
Q3) A(n)____________________ message is a scripted description of an incident,usually just enough information so that each individual knows what portion of the IR plan to implement,and not enough to slow down the notification process.
Q4) The SETA program is the responsibility of the ____ and is a control measure designed to reduce the incidences of accidental security breaches by employees.
A)CIO
B)CISCO
C)CISO
D)end users
To view all questions and flashcards with answers, click on the resource link above.
Chapter 6: Security Technology: Firewalls and Vpns
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44639
Sample Questions
Q1) What must a VPN that proposes to offer a secure and reliable capability while relying on public networks accomplish?
Q2) A(n)____ is "a private data network that makes use of the public telecommunication infrastructure,maintaining privacy through the use of a tunneling protocol and security procedures."
A)SVPN
B)VPN
C)SESAME
D)KERBES
Q3) Static filtering is common in network routers and gateways._________________________
A)True
B)False
Q4) Good policy and practice dictates that each firewall device,whether a filtering router,bastion host,or other firewall implementation,must have its own set of configuration rules.
A)True
B)False
Q5) The architecture of a(n)____________________ firewall provides a DMZ.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Security Technology: Intrusion Detection and
Prevention Systems, and Other Security Tools
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44640
Sample Questions
Q1) A(n)port is a network channel or connection point in a data communications system._________________________
A)True
B)False
Q2) Minutiae are unique points of reference that are digitized and stored in an encrypted format when the user's system access credentials are created._________________________
A)True
B)False
Q3) A padded cell is a hardened honeynet._________________________ A)True B)False
Q4) The Simple Network Management Protocol contains trap functions,which allow a device to send a message to the SNMP management console indicating that a certain threshold has been crossed,either positively or negatively. A)True B)False
Q5) A(n)____________________ vulnerability scanner is one that initiates traffic on the network in order to determine security holes.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Cryptography
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/44641
Sample Questions
Q1) To ____________________ means to encrypt,encode,or convert plaintext into the equivalent ciphertext.
Q2) In 1917,Gilbert S.Vernam,an AT&T employee,invented a polyalphabetic cipher machine that used a non-repeating random key. A)True B)False
Q3) Encryption is the process of converting the ciphertext message back into plaintext so that it can be readily understood._________________________
A)True
B)False
Q4) Plaintext or cleartext is the original unencrypted message,or a message that has been successfully decrypted._________________________ A)True B)False
Q5) The permutation cipher simply rearranges the values within a block to create the ciphertext.
A)True B)False
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Physical Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44642
Sample Questions
Q1) ____ sensors work when two contacts are connected as,for example,when a foot steps on a pressure-sensitive pad under a rug,or a window being opened triggers a pin-and-spring sensor.
A)Pressure
B)Contact and weight
C)Motion
D)Movement
Q2) Keycard readers based on smart cards are often used to secure computer rooms,communications closets,and other restricted areas.
A)True
B)False
Q3) A(n)____________________ or offline UPS is an offline battery backup that detects the interruption of power to the power equipment.
Q4) A(n)____________________ system has pressurized water in all pipes and has some form of valve in each protected area.
Q5) ____________________ security encompasses the design,implementation,and maintenance of countermeasures that protect the physical resources of an organization.
Q6) A(n)_________________________ is typically worn concealed.
11
To view all questions and flashcards with answers, click on the resource link above.
Chapter 10: Implementing Information Security
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44643
Sample Questions
Q1) A(n)____________________ is a specific point in the project plan when a task that has a noticeable impact on the progress of the project plan is complete.
Q2) A(n)____________________ is a completed document or program module that can either serve as the beginning point for a later task or become an element in the finished project.
Q3) The optimal time frame for training is usually one to three weeks before the new policies and technologies come online._________________________
A)True
B)False
Q4) The ____ involves collecting information about an organization's objectives,its technical architecture,and its information security environment.
A)SISC
B)SecSDLC
C)DLC
D)SIDLC
Q5) The first step in the WBS approach encompasses activities,but not deliverables.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Security and Personnel
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/44644
Sample Questions
Q1) The SSCP exam consists of ____ multiple-choice questions,and must be completed within three hours.
A)75
B)100
C)125
D)225
Q2) Sometimes onsite contracted employees are self-employed or are employees of an organization hired for a specific,one-time purpose.These people are typically referred to as ____________________.
Q3) Builders operate and administrate the security tools and the security monitoring function and continuously improve the processes,performing all the day-to-day work.
A)True
B)False
Q4) Job ____________________ can greatly increase the chance that an employee's misuse of the system or abuse of the information will be detected by another.
Q5) The Information Systems ____________________ and Control Association offers the CISA certification for auditing,networking,and security professionals.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Information Security Maintenance
Available Study Resources on Quizplus for this Chatper
103 Verified Questions
103 Flashcards
Source URL: https://quizplus.com/quiz/44645
Sample Questions
Q1) A trouble ticket is closed when a user calls about an issue._________________________
A)True
B)False
Q2) An effective security program demands comprehensive and continuous understanding of program and system configuration.
A)True
B)False
Q3) When an organization uses specific software products as part of its information security program,the ____________________ often provides either direct support or indirect tools that allow user communities to support each other.
Q4) Court decisions generally do not impact agency policy.
A)True
B)False
Q5) Policy needs to be reviewed and refreshed from time to time to ensure that it's sound.
A)True B)False
Q6) Why should agencies monitor the status of their programs?
Page 14
To view all questions and flashcards with answers, click on the resource link above.