CYB125 - Ch1

Which term describes the level of exposure to some event that has an effect on an asset, usually the likelihood that something bad will happen to an asset?

• Risk

• Countermeasure

• Vulnerability

• Threat

Bob is the information security and compliance manager for a financial institution. Which regulation is most likely to directly apply to Bob's employer?

• Federal Information Security Management Act (FISMA)

• Health Insurance Portability and Accountability Act (HIPAA)

• Children's Internet Protection Act (CIPA)

• Gramm-Leach-Bliley Act (GLBA)

Rachel is investigating an information security incident that took place at the high school where she works. She suspects that students may have broken into the student records system and altered their grades. If that is correct, which one of the tenets of information security did this attack violate?

• Confidentiality

• Integrity

• Availability

• Nonrepudiation

What measures the average amount of time between failures for a particular system?

• Uptime

• Mean time to failure (MTTF)

• Mean time to repair (MTTR)

• Recovery time objective (RTO)

Juan’s web server was down for an entire day in April. It experienced no other downtime during that month. What represents the web server uptime for that month?

• 96.67%

• 93.33%

• 99.96%

• 1.03%

In which domain of a typical IT infrastructure is the first layer of defense for a layered security strategy?

• User Domain

• Workstation Domain

• LAN Domain

• WAN Domain

Which security control is most helpful in protecting against eavesdropping on wide area network (WAN) transmissions?

• Applying filters on exterior Internet Protocol (IP) stateful firewalls

• Deploying an intrusion detection system/intrusion prevention system (IDS/IPS)

• Blocking Transmission Control Protocol (TCP) synchronize (SYN) open connections

• Encrypting transmissions with virtual private networks (VPNs)

Devaki is capturing traffic on her network. She notices connections using ports 20, 22, 23, and 80. Which port normally hosts a protocol that uses secure, encrypted connections?

• 20

• 22

• 23

• 80

Which network device is designed to block network connections that are identified as potentially malicious?

• Intrusion detection system (IDS)

• Intrusion prevention system (IPS)

• Router

• Web server

Which risk is most effectively mitigated by an upstream Internet service provider (ISP)?

• Distributed denial of service (DDoS)

• Inherently insecure Transmission Control Protocol/Internet Protocol (TCP/IP) applications

• Firewall configuration error

• Unauthorized remote access