Security Plus Chapter 7-12 Practice Final

Which of the following is NOT an asymmetric encryption algorithm?

3DS

Computer room humidity should ideally be kept at what percent?

50%

Which of the following statements is true?

A virus requires a user action to propagate & infect other host systems.

A programmer that fails to check the length of input before processing leaves the code vulnerable to what form of common attack?

Buffer overflow

Which of the following is NOT a goal of information security?

Archival

Which of the following is a solution that addresses physical security?

Escort visitors at all times

Which of the following security device uses some biological characteristic of human beings to uniquely identify a person for authentication?

Biometric

Which method of attack against a password happens when an attacker tries many different combinations of alphanumeric characters until successful?

Brute Force

Which method of code breaking tries every possible combination of characters in an attempt to "guess" the password or key?

Brute Force

Which of the following dictates that educational institutions may not release information to unauthorized parties without the express permission of the student?

FERPA

Which U.S. government agency is responsible for creating and breaking codes?

NSA

Individuals who specialize in the making of codes are known as which of the following?

Crpytographers

Which of the following is primarily subject to an SQL injection attack?

Database Servers

Which of the following can be used to stop piggybacking that has been occurring at a front entrance where employees should swipe their smart cards to gain entry?

Deploy a mantrap

You are the administrator of a website. You are working when you suddenly notice web server and network utilization spike to 100% and it stays there for several minutes. Network users start reporting "Server not available" errors. You may have been the victim of what kind of attack?

DoS

Your company is getting rid of old 1GB USB flash drives that contain sensitive data. What is the proper method of disposing of this type of storage media?

Drilling a hole into the flash memory component of the USB drives and then discarding them

Which of the following statements about electrostatic discharge (ESD) is not correct?

ESD is much more likely to occur when the relative humidity is above 50%

Which of the following is used to provide EMI & RFI shielding for an entire room of computer or electronic equipment (also used to prevent eavesdropping)?

Faraday cage

Which of the following prohibits banks from releasing information to nonaffiliated third parties without permission?

Gramm-Leach-Bliley Act

Which U.S. regulation dictates the standards for storage, use, and transmission of personal medical information?

HIPPA

Which type of policy determines if information is secret, top-secret, or public?

Information classifications policies

An End User License Agreement (EULA) for software would typically be considered what classification of information?

Limited Distribution

Which U.S. government agency publishes lists of known vulnerabilities in operating systems?

NIST

Which PKCS standard is the standard for password-based cryptography?

PKCS#5

On the outer edge of physical security is the first barrier to entry. This barrier is known as which of the following?

Perimeter

Locking the door(s) to the server room involves what kind of security?

Physical

A digital file containg a comany's proprietary processes and strategic information would be classified as which of the following?

Restricted

Which type of virus attacks or bypasses the antivirus software installed on a computer?

Retrovirus

Which of the following is a hashing algorithm?

SHA

Which of the following is a slang term for unwanted commercial e-mail?

SPAM

Which kind of security attack is a result of the trusting nature of human beings?

Social Engineering

Which of the following is an internal threat?

System Failure

Which fire extinguisher type is the best to be used on computer equipment in the case of a computer fire?

Type C

Which "X." standard defines certificate formats and fields for public keys?

X.509

Which of the following is not a component of Public Key Infrastructure (PKI)?

XA

Which of the following is an attack that inject malicious scripts into Web pages to redirect users to fake websites or gather personal information?

XSS

Which of the following is the term for an area in a building where access is individually monitored and controlled?

man trap

Which of the following is a type of attack that occurs when an attacker pretends to be a legitimate client, using information it has gained from a legitimate client (like it's IP address).

Spoofing

What kind of cryptographic method replaces one character with another from a "match-up list" to produce the ciphertext?

Substitution cipher

As you browse the Internet, you notice that when you go to some sites, multiple additional windows are opened automatically. Many of these windows contain advertisements for products that are inappropriate for your family to view.Which tool can you implement to prevent these windows from showing?

pop-up blocker