Quiz on Information Assurance and Security

What is the definition of risk in the context of information security?

• An item that has value

• A weakness that allows a threat to be realized

• The likelihood that something bad will happen to an asset

• Any action that could damage an asset

Which of the following is NOT a type of hacker?

• Red-hat Hacker

• White-hat Hacker

• Gray-hat Hacker

• Black-hat Hacker

What type of malware actively attempts to copy itself to other computers?

• Spyware

• Rootkit

• Virus

• Trojan Horse

What is a security breach?

• A network monitoring tool

• A method of data encryption

• A type of malware

• A violation of confidentiality, integrity, or availability

Which of the following is an example of an active attack?

• Logging keystrokes

• Modifying data in a transmission

• Eavesdropping on transmissions

• Monitoring network traffic

What is a common purpose of a denial of service attack?

• To steal confidential data

• To disrupt system services

• To install malware

• To gain unauthorized access

Which of the following is a type of hiding program?

• Spyware

• Virus

• Worm

• Trojan Horse

What does a vulnerability scanner do?

• Captures network traffic

• Identifies open ports

• Records keystrokes

• Identifies and verifies vulnerabilities

What is the primary target of protection for organizations?

• Customer Data

• Employee Behavior

• Network Infrastructure

• Software Code

Which of the following is a characteristic of a passive attack?

• Modifies the data stream

• Attempts to gain unauthorized access

• Eavesdrops on transmissions

• Creates a deception