1. Answer the following Chapter 1 Review Questions:  

1.1. ____ attacks are responsible for half of all malware delivered by Web advertising.

a. “Canadian Pharmacy” c. Melissa

b. Fake antivirus d. Slammer

1.2. Approximately ____ percent of households in the United States use the Internet for managing their finances.

a. 60 c. 70

b. 80 d. 90

1.3. In a ____ attack, attackers can attackers use hundreds or thousands of computers in an attack against a single computer or network.

a. centered c. remote

b. local d. distributed

1.4. The term ____ is frequently used to describe the tasks of securing information that is in a digital format.

a. information security c. physical security

b. network security d. logical security

1.5. ____ ensures that only authorized parties can view information.

a. Confidentiality c. Integrity

b. Availability d. Security

1.6. ____ ensures that information is correct and that no unauthorized person or malicious software has altered that data.

a. Availability c. Identity

b. Confidentiality d. Integrity

1.7. ____ ensures that the individual is who they claim to be (the authentic or genuine person) and not an imposter.

a. Encryption c. Authentication

b. Authorization d. Accounting

1.8. In information security, a loss can be ____.

a. theft of information

b. a delay in transmitting information that results in a financial penalty

c. the loss of good will or a reputation

d. all of the above

1.9  An example of a(n) ________ is a software defect in an operating system that allows an unauthorized user to gain access without a password.

a.  threat agent c.  vulnerability

b.  threat d.  exploit

1.10. In information security, an example of a threat agent can be ____.

a. a force of nature such as a tornado that could destroy computer equipment

b. a virus that attacks a computer network

c. an unsecured computer network

d. both a and b

1.11. ____ involves stealing another person’s personal information, such as a Social Security number, and then using the information to impersonate the victim, generally for financial gain.

a. Cyberterrorism c. Identity theft

b. Phishing d. Scam

1.12. ____ are a loose-knit network of attackers, identity thieves, and financial fraudsters.

a. Cyberterrorists c. Computer spies

b. Cybercriminals d. Hackers

1.13. Targeted attacks against financial networks, unauthorized access to information, and the theft of personal information is sometimes known as ____.

a. spam c. phishing

b. cybercrime d. Cyberterrorism

1.14   After an attacker has probed a network for information, the next step is to

a.  penetrate any defenses c.  circulate to other systems

b.  paralyze networks and devices d.  modify security settings

1.15   An organization that purchased security products from different vendors is demonstrating which security principle?

a. obscurity c. limiting

b. diversity d.  layering

2. Answer each question below:

a. Why is confidentiality required for patient names and list of prescriptions filled by a pharmacy last month?

3. Your company has the source code for its next-generation product stored on its server. The source code is the asset which must be protected.  The threat is theft of the source code.

a. Identify one threat agent, one possible vulnerability, and one way the threat agent can exploit the vulnerability.

b. Identify product, people and procedure security methods (one of each) to protect your asset and mitigate the risk of the threat identified above.

4. Match the terms with the examples listed below:

a. asset b. threat c.  threat agent d. vulnerability e. exploit

________  A software defect in an e-mail server

________  A cybercriminal

________  Employee database with social security numbers

________  Theft of employee database

_________ Send malware to an e-mail server with a defect

5. Compare and contrast the following types of attackers:  script kiddies, spies, insiders, cybercriminals and cyberterrorists.

6. Put the steps of an attack in order.  1 is first and 5 is last.

______ Circulate to other systems

______ Modify security settings

______ Paralyze networks and devices

______ Penetrate any defenses

______ Probe for information

7. Match the terms with the examples of securing a castle listed below:

a.  layering b.  limiting c.  diversity d.  obscurity e.  simplicity

_____  build two moats around the castle

_____  build a moat and a fence around the castle

_____  using magic, hide the details of the castle from outsiders

_____  only authorized personnel can enter the castle

______ castle defenses are easy to use from inside

Answers (1)