Reference no: EM133309954

1. The storage facility must also maintain the proper environment for holding digital information, which requires the following, controlled temperature and humidity.

True

False

2. This open source HIDPS,.____ should be able to detect these exploit kits..

a-SNORT

b-Wireshark

c-Port sniffer

d-Trons

3. Many successful attacks remain undetected for ____ of time.

a. significant periods

b. significant amount

c. very little periods

d. 56 days

4. Does NIST suggests, that most organizations evaluate acquisition options based on a total cost of ownership that includes initial costs, such as licensing, hardware, and configuration, and increases to operating costs for an initial period of use, ____?

a. a couples of months

b. less than three years

c. more than 10 years

d. such as 3 to 5 years

5. ____, which have an attack pattern that includes the use of ICMP, DNS querying, and e-mail routing analysis

a. spoofing and DNS poisoning

b. spoofing and DNS corruption

c. footprinting and fingerprinting activities

d. spearfishing and macro injection

6. Will the entire budget of ownership of IDPSs well surpasses acquisition ____.

a. exceeds dapertment budget

b. budget

c. cost

d. bottom line

7. Essentially a DoS attack, the malware (or virus) ____ is commonly used in phishing attacks aimed at getting users to visit a fake Web site; others are designed to work as human malware devices, tricking users into manually deleting or modifying key files.

8. Essentially a DoS attack, the malware (or virus) ____ is commonly used in phishing attacks aimed at getting users to visit a fake Web site; others are designed to work as human malware devices, tricking users into manually deleting or modifying key files.

a. rootkit

b. Ipaddress

c. hoax

d. zombie

9. After an infection has been detected, it is up to the CSIRT to look for other possibly undetected infections. Ways not to accomplish this include the following ____.

a. Scanning internal systems to look for active service ports that are not supposed to be present on internal
systems.
b. Prompt and aggressive use of out of update scanning and cleanup tools

c. Periodic and ongoing audits of the running processes on systems to validate that all running processes are expected and legitimate.

d. Giving network and host intrusion systems access to signature files that can indicate when the behavior characteristics of malware infection have occurred.

10. When the term unauthorized access is mentioned, the inclination is to use it as a synonym for hacking which means ____.

a. Sniffing network traffic without explicit authorization

b. Gaining authorized access to any network or computing resource, including connection to inadvertently open service ports or dialing into unsecured modems

c. Using social engineering techniques, such as impersonating thier boss to gain unauthorized access

d. Gaining authorized administrative control of any server or service.