Chapter 12

Tonya is working with a team of subject matter experts to diagnose a problem with her system. The experts determine that the problem likely resides at the Presentation Layer of the Open Systems Interconnection (OSI) model. Which technology is the most likely suspect? A. User interface B. Encryption C. Routing D. Signaling

B. Encryption: International Organization for Standardization Explanation: Encryption occurs at the Presentation Layer of the OSI model. The user interface is a function of the Application Layer, while routing takes place at the Network Layer. Signaling is a function of the Physical Layer.

Gary is troubleshooting a security issue on an Ethernet network and would like to look at the Ethernet standard. What publication should he seek out? A. NIST 800-53 B. IEEE 802.3 C. ANSI x.1199 D. ISO 17799

B. IEEE 802.3: Institute of Electrical and Electronics Engineers Explanation: The Institute of Electrical and Electronics Engineers (IEEE) standard 802.3 contains the specification for Ethernet networking.

Bill is conducting an analysis of a new IT service. He would like to assess it using the Open Systems Interconnection (OSI) model and would like to learn more about this framework. What organization should he turn to for the official definition of OSI? A. Ocean Surveillance Information System (OSIS) B. International Organization for Standardization (ISO) C. National Institute of Standards and Technology (NIST) D. Information Systems Audit and Control Association (ISACA)

B. International Organization for Standardization (ISO) Explanation: The ISO publishes many standards for nearly all industries. Perhaps the best-known ISO standard is the Open Systems Interconnection (OSI) Reference Model. This internationally accepted framework of standards governs how separate computer systems communicate using networks.

What type of publication is the primary working product of the Internet Engineering Task Force (IETF)? A. Special Publication (SP) B. Request for comment (RFC) C. ISO standard D. Public service announcement (PSA)

B. Request for comment (RFC): Request for Comment Explanation: The IETF produces requests for comment (RFCs). An RFC is a document that ranges from a simple memo to several standards documents. Each RFC's introduction indicates its status. The RFC model allows input from many sources and encourages collaboration and peer review.

Which organization created a standard version of the widely used C programming language in 1989? A. Institute of Electrical and Electronics Engineers (IEEE) B. International Organization for Standardization (ISO) C. American National Standards Institute (ANSI) D. European Telecommunications Standards Institute (ETSI)

C. American National Standards Institute (ANSI): Important ANSI Standards Explanation: The American National Standards Institute published ANSI C as a standard version of the C programming language in 1989.

Mary is designing a software component that will function at the Presentation Layer of the Open Systems Interconnection (OSI) model. What other two layers of the model will her component need to interact with? A. Network and Session B. Session and Transport C. Application and Session D. Application and Transport

C. Application and Session: International Organization for Standardization Explanation: Components at one layer of the OSI model must interact with the layers immediately above and below it. The Presentation Layer (Layer 6) must interact with the Application Layer (Layer 7) and the Session Layer (Layer 5).

Which technology category would NOT likely be the subject of a standard published by the International Electrotechnical Commission (IEC)? A. Semiconductors B. Solar energy C. Encryption D. Consumer appliances

C. Encryption: International Electrotechnical Commission Explanation: The IEC does not cover encryption standards. It does, however, cover a wide variety of areas, including power generation, commercial and consumer electrical appliances, semiconductors, and much more.

Juan comes across documentation from his organization related to several information security initiatives using different standards as their reference. Which International Organization for Standardization (ISO) standard provides current guidance on information security management? A. ISO 17799 B. ISO 9000 C. ISO 27002 D. ISO 14001

C. ISO 27002: ISO/IEC 27002 Explanation: ISO 27002 is the current guidance on information security management issued by the ISO. It replaces the older ISO 17799 that covered the same topic.

Allie is working on the development of a web browser and wants to make sure that the browser correctly implements the Hypertext Markup Language (HTML) standard. What organization's documentation should she turn to for the authoritative source of information? A. International Electrotechnical Commission (IEC) B. National Institute of Standards and Technology (NIST) C. World Wide Web Consortium (W3C) D. Internet Engineering Task Force (IETF)

C. World Wide Web Consortium (W3C): World Wide Web Consortium Explanation: The W3C produces standards that govern and coordinate many aspects of web development and operation, including the HTML standard.

What is NOT an area where the Internet Architecture Board (IAB) provides oversight on behalf of the Internet Engineering Task Force (IETF)? A. Architecture for Internet protocols and procedures B. Editorial and publication procedures for requests for comments (RFCs) C. Confirmation of IETF chairs D. Subject matter expertise on routing and switching

D. Subject matter expertise on routing and switching : Internet Architecture Board Explanation: The IAB provides oversight for the architecture used for Internet protocols and procedures, the processes used to create standards, the editorial and publication procedures for RFCs, and the confirmation of IETF chairs and technical area directors.

Which organization promotes technology issues as an agency of the United Nations? A. International Telecommunication Union (ITU) B. Institute of Electrical and Electronics Engineers (IEEE) C. American National Standards Institute (ANSI) D. Internet Assigned Numbers Authority (IANA)

A. International Telecommunication Union (ITU): International Telecommunication Union Telecommunication Sector Explanation: The ITU is a United Nations agency responsible for managing and promoting information and technology issues. The ITU is a global point of focus for both governmental and commercial development of networks and related services.

What federal agency is charged with the mission of promoting "U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life?" A. National Institute of Standards and Technology (NIST) B. Federal Communications Commission (FCC) C. Federal Trade Commission (FTC) D. National Aeronautics and Space Administration (NASA)

A. National Institute of Standards and Technology (NIST): National Institute of Standards and Technology Explanation: NIST is a federal agency within the U.S. Department of Commerce. NIST's mission is to "promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life."

Which term accurately describes Layer 3 of the Open Systems Interconnection (OSI) model? A. Network B. Application C. Physical D. Session

A. Network: International Organization for Standardization Explanation: The seven layers of the OSI model, in order from the first through seventh layer, are: Physical, Data Link, Network, Transport, Session, Presentation, and Application.

Which document is the initial stage of a standard under the Internet Engineering Task Force (IETF) process? A. Proposed Standard (PS) B. Draft Standard (DS) C. Standard (STD) D. Best Current Practice (BCP)

A. Proposed Standard (PS): Request for Comment Explanation: The PS is the initial official stage of a standard being considered by the IETF.

Which Institute of Electrical and Electronics Engineers (IEEE) standard covers wireless LANs? A. 802.3 B. 802.11 C. 802.16 D. 802.18

B. 802.11: Institute of Electrical and Electronics Engineers Explanation: The IEEE 802.11 series of standards covers wireless LAN technology, including 802.11a, 802.11b, 802.11g, 802.11n, and 802.11ac.

Maya is creating a computing infrastructure compliant with the Payment Card Industry Data Security Standard (PCI DSS). What type of information is she most likely trying to protect? A. Health records B. Credit card information C. Educational records D. Trade secrets

B. Credit card information: Payment Card Industry Data Security Standard Explanation: PCI DSS is an international standard for handling transactions involving payment cards. The Payment Card Industry Security Standards Council (PCI SSC) developed, publishes, and maintains the standard.

. Which element is NOT a core component of the ISO 27002 standard? A. Risk assessment B. Cryptography C. Asset management D. Access control

B. Cryptography: ISO/IEC 27002 Explanation: The core sections of the ISO/IEC 27002 standard are risk assessment, security policy, organization of information security, asset management, human resources security, physical and environmental security, communications and operations management, access control, information systems acquisition development and maintenance, information security incident management, business continuity management, and compliance.

What series of Special Publications does the National Institute of Standards and Technology (NIST) produce that covers information systems security activities? A. 600 B. 700 C. 800 D. 900

C. 800: National Institute of Standards and Technology Explanation: The NIST Special Publications 800 series contains many standards that provide guidance for information systems security activities.

Which organization creates information security standards that specifically apply within the European Union? A. International Telecommunication Union (ITU) B. American National Standards Institute (ANSI) C. European Telecommunications Standards Institute (ETSI) Cyber Security Technical Committee (TC CYBER) D. Institute of Electrical and Electronics Engineers (IEEE)

C. European Telecommunications Standards Institute (ETSI) Cyber Security Technical Committee (TC CYBER): ETSI Cyber Security Technical Committee Explanation: In 2014, ETSI organized a Cyber Security Technical Committee, called TC CYBER. TC CYBER centralizes all cybersecurity standards within ETSI committees. The TC CYBER standards are intended to result in international standards that will initially be adopted by member EU states.

Which unit of measure represents frequency and is expressed as the number of cycles per second? A. Joule B. Weber C. Gauss D. Hertz

D. Hertz: International Electrotechnical Commission Explanation: Hertz represents frequency and is expressed as the number of cycles per second. Gauss is a measurement of a magnetic field, joule is a measure of energy, and weber is a measure of magnetic flux.