CIS Midterm Study Guide

Which of the following statements best describes the relationship of a BCP to a DRP?

A DRP is a component of a BCP

Which risk analysis value represents the annual probability of a loss?

ARO

Which risk is most effectively mitigated by an upstream Internet service provider (ISP)?

Distributed denial of service (DDoS)

An attacker uses exploit software when wardialing

False

Risk management is responding to a negative event when it occurs

False

Vishing a type of wireless network attack

False

With adequate security controls and defenses, an organization can often reduce its risk to zero.

False

A DoS attack is coordinated attempt to deny service by occupying a computer to perform large amounts of unnecessary tasks.

True

A VPN router is a security appliance that is sued to filter IP packets

True

A birthday attack is a type of cryptographic attack that is used to make brute-force attack of one-way hashes easier

True

Authorization is the process of granting rights to use an organization's IT assets, systems, applications, and data to a specific user.

True

Failing to prevent an attack all but invites an attack.

True

It is faster to create the incremental weekday backups than the differential backups

True

Using a secure logon and authentication process is one of the six steps used to prevent malware

True

A rootkit uses a directed broadcast to create a flood of network traffic for the victim computer

false

Which risk response would be most appropriate if the impact of a risk becoming a reality is negligible?

Accept

The System/Application Domain holds all the mission-critical systems, applications, and data

True

In the Remote Access Domain, if private data or confidential data is compromised remotely, you should set automatic blocking for attempted logon retries.

False

Which security control is most helpful in protecting against eavesdropping on wirless LAN (WLAN) data transmissions that would jeopardize confidentiality

Applying strong encryption

Simple Network Management Protocol is used for network device monitoring, alarm, and performance.

True

Spyware gathers information about a user through an internet connection, without his or her knowledge

True

Matthew captures traffic on his network and notices connections using ports 20, 22, 23, and 80. Which port normally hosts a protocol that uses secure, encrypted connections?

22

What a key principle of risk management programs?

Don't spend more to protect an asset than it is worth

Bob recently accepted a position as the information security and compliance manager for a medical practice. Which regulation is likely to most directly apply to Bob's employer?

Health Insurance Portability and Accountability Act

Which mitigation plan is most appropriate to limit the risk of unauthorized access to workstations?

Password Protection

Which element of the security framework requires approval from upper management and applies to the entire organization

Policy

Chris is writing a document that provides step-by-step instructions for end users seeking to update the security software on their computers. Performing these updates is mandatory. Which type of document is Chris writing?

Procedure

Which tool can capture the packets transmitted between systems over a network

Protocol analyzer

Which type of risk analysis uses relative ranking?

Qualitative risk analysis

Which type of risk analysis uses formulas and numeric values to indicate risk severity?

Quantitative risk analysis

Which formula is typically used to describe the components of information security risks?

Risk = Threat X Vulnerability

According to PMI, which term described the list of identified risks?

Risk register

What is NOT one of the three tenets of information security

Safety

In which type of attack does the attacker attempt to take over an existing connection between two systems

Session hijacking

Which risk-response option would best describe purchasing fire insurance?

Transfer

Spam is some act intended to deceive or trick the receiver, normally in email messages

false

The Sarbanes-Oxley Act requires all types of financial institutions to protect customers private financial information

false

The main difference between a virus and a worm is that a virus does not need a host program to infect

false

Maria's company recently experienced a major system outage due to the failure of a critical component. During that time period, the company did not register any sales through its online site. Which type of loss did the company experience as a result of lost sales?

Opportunity Cost

Which term is used to indicate the amount of data loss that is acceptable?

RPO

Which group is most likely a target of a social engineering attack

Receptionists and administrative assistants

Networks, routers, and equipment require continuous monitoring and management to keep wide area network (WAN) service available.

True

Organizations should start defining their IT security policy framework by defining an asset classification policy

True

Risk refers to the amount of harm a threat exploiting a vulnerability can cause

True