IEEE QUIZ

The individual who periodically reviews security settings and maintains records of access by users is called the _____.

• Manager

• Custodian

• Owner

• Supervisor

Which of the following is NOT a flaw in standard operating systems?

• Operating systems cannot create a trusted path between users and applications.

• Operating systems are complex programs with millions of lines of code that make
  vulnerabilities extremely difficult to recognize.

• Operating systems do not isolate applications from each another so that one

  application that is compromised can impact the entire computer.

• Operating systems by default use the principle of least privilege.

Hashing would not be used in which of the following examples?

• Bank automatic teller machine (ATM)

• Verifying a user password entered on a Linux system

• Determining the integrity of a message

• Encrypting and decrypting e-mail attachments

A user account that has not been accessed for a lengthy period of time is called a(n) _____ account.

• Orphaned

• Static

• Limbo

• Dormant

A(n) _____ constructs LDAP statements based on user inputs in order to retrieve information from the database or modify its contents.

• 
  SQL/LDAP insert attack

• 
  RBASE plug-in attack

• 
  Modified Trojan attack

• LDAP injection attack

The individual who periodically reviews security settings and maintains records of access by users is called the _____.

• Manager

• Owner

• Supervisor

• Custodian

The areas of a file in which steganography can hide data include all of the following except ______.

• In the directory structure of the file system

• 
  In areas that contain the content data itself

• In the file header fields that describe the file

• In data that is used to describe the content or structure of the actual data

A token code is valid _______.

• 
  For as long as it appears on the device

• 
  If it is longer than 8 characters

• For up to 1 hour

• Only for the user who possesses the device

What is a hybrid attack?

• An attack that slightly alters dictionary words

• An attack that combines a dictionary attack with an online guessing attack

• An attack that uses both automated and user input

• A brute force attack that uses special tables

Separation of duties requires that _____

• Managers must monitor owners for security purposes

• Processes should be divided between two or more individuals

• Jobs be rotated among different individuals

• End users cannot set security for themselves