Question Results

Score 1 of 1

Question:

Match the following terms and definitions

Response:

Match	User answer	Feedback
Intended to discourage a potential attacker	Deterrent
Intended to avoid an incident from happening	Preventive
Fixes component or systems after an incident has occurred	Corrective
Intended to bring the environment back to production levels	Recovery
Identify an incidents activities	Detective
Alternate measures of control	Compensating

Score 1 of 1

Question:

Motion detectors, video cameras, fences, locked doors, guards and dogs are all examples of

Response:

	Both Technical and Administrative controls
	Technical controls
	Administrative controls
	Physical controls

Score 1 of 1

Question:

Which access control includes job rotation?

Response:

	Administrative
	Organizational
	Physical
	Technical

Score 1 of 1

Question:

Which of the following have the best CER?

Response:

	Badge Scanning
	Hand scanning
	Iris Scanning
	Finger scanning

Score 1 of 1

Question:

Match the following control types to their purposes

Response:

Match	User answer	Feedback
Reducing Risk	Preventative
Correcting violations and incidents	Recovery	Corrective controls also help improve existing preventative and detective controls
Discouraging violations	Deterrent
Providing alternate ways of accomplishing a task	Compensating
Restoring systems and information	Recovery

Score 1 of 1

Question:

Which of the following is primarily focused on restoring systems and information?

Response:

	Corrective
	Recovery
	Preventative
	Detective
	Compensating

Score 1 of 1

Question:

A WAN is

Response:

	one of the Wilson-Adder Need types
	a Wide Array Node
	a Wide Area Network
	the Westinghouse Address Naming convention
	a Working Authentication Name

Score 0 of 1

Question:

Which of the following is the highest in the OSI model:

Response:

	Physical
	Network
	Data Link
	Presentation
	Transport

Score 0 of 1

Question:

What OSI Layer includes data encryption?

Response:

	Network
	Application
	Transport
	Datalink
	Presentation

Score 0 of 1

Question:

"The strength of the cryptosystem is a function of the keys, not the algorithm" is also known as

Response:

	Rijndael's Challenge
	Kerckhoff's Principle
	Moore's Law
	Diffe-Hillman's Axiom

Score 0 of 1

Question:

Which of the following packet switched networks is best suited to support fully meshed VPNs?

Response:

	SMDS
	SONET
	MPLS
	ATM
	Frame Relay

Score 1 of 1

Question:

Biometric authentication is most often hampered by:

Response:

	Rings/Weight change
	Initial Registration
	User acceptance
	Cost to implement

Score 0 of 1

Question:

More key terms from Chapter 2

Response:

Match	User answer	Feedback
Weakness or lack of a countermeasure	Vulnerability
Entity that can exploit a vulnerability	Threat agent
The danger of having a vulnerability exploited	Risk
The probability of a threat being realized	Threat
Presence of a vulnerability which exposes the organization	Exposure

Score 1 of 1

Question:

Which access control includes job rotation?

Response:

	Physical
	Organizational
	Administrative
	Technical

Score 0 of 1

Question:

Which of the following would be the least useful in attempting to crack a password?

Response:

	Packet sniffing
	John the Ripper
	MAC the Knife
	brute force/dictionary attack
	LophtCrack