TEST BANK FOR COMPUTER
SECURITY FUNDAMENTALS 4TH
EDITION BY WILLIAM CHUCK
EASTTOM II 2026 INFORMATION
SECURITY SCRIPT SOLVED
QUESTIONS VERIFIED ANSWERS A+
◉ Which one of these is NOT one the three pillars of security in the CIA
triangle?
A. Authentication
B. Integrity
C. Confidentiality
D. Availability.
Answer: A. Authentication
◉ Confidentiality, integrity, and availability are three pillars of the CIA
triangle.
A. True
B. False.
Answer: A. True
,◉ Auditing is the process to determine if a user's credentials are
authorized to access a network resource.
A. True
B. False.
Answer: B. False
(This describes authentication. Auditing is the process to review logs,
records, and procedures.)
◉ Someone who finds a flaw in a system and reports that flaw to the
vendor of the system is a __________.
A. Black Hat Hacker
B. Red Hat Hacker
C. White Hat Hacker
D. Grey Hat Hacker.
Answer: C. White Hat Hacker
(White hat hackers are often hired by companies to do penetration tests.)
◉ In which type of hacking does the user block access from legitimate
users without actually accessing the attacked system?
,A. Session Hijacking
B. Denial of Service
C. Web Attack
D. None of the Above.
Answer: B. Denial of Service
(A denial-of-service attack is probably the most common attack on the
web.)
◉ Which of these was the first computer incident-response team?
A. Microsoft Security Advisor
B. F-Secure
C. Computer Emergency Response Team
D. SANS Institute.
Answer: C. Computer Emergency Response Team
◉ Which of these is a repository for detailed information on virus
outbreaks?
A. Computer Emergency Response Team
B. F-Secure
C. SANS Institute
D. Microsoft Security Advisor.
, Answer: B. F-Secure
(Information includes how a virus spreads, ways to recognize the virus,
and, frequently, specific tools for cleaning an infected system.)
◉ Your company is instituting a new security awareness program. You
are responsible for educating end users on a variety of threats, including
social engineering. Which of the following best defines social
engineering?
A. Destruction or alteration of data
B. Using people skills to obtain proprietary information
C. Gathering information from discarded manuals and printouts
D. Illegal copying of software.
Answer: B. Using people skills to obtain proprietary information
◉ Which of these is the process to determine if the credentials given by
a user or another system are authorized to access the network resource in
question?
A. Integrity
B. Authentication
C. Confidentiality
D. Availability.
Answer: B. Authentication
SECURITY FUNDAMENTALS 4TH
EDITION BY WILLIAM CHUCK
EASTTOM II 2026 INFORMATION
SECURITY SCRIPT SOLVED
QUESTIONS VERIFIED ANSWERS A+
◉ Which one of these is NOT one the three pillars of security in the CIA
triangle?
A. Authentication
B. Integrity
C. Confidentiality
D. Availability.
Answer: A. Authentication
◉ Confidentiality, integrity, and availability are three pillars of the CIA
triangle.
A. True
B. False.
Answer: A. True
,◉ Auditing is the process to determine if a user's credentials are
authorized to access a network resource.
A. True
B. False.
Answer: B. False
(This describes authentication. Auditing is the process to review logs,
records, and procedures.)
◉ Someone who finds a flaw in a system and reports that flaw to the
vendor of the system is a __________.
A. Black Hat Hacker
B. Red Hat Hacker
C. White Hat Hacker
D. Grey Hat Hacker.
Answer: C. White Hat Hacker
(White hat hackers are often hired by companies to do penetration tests.)
◉ In which type of hacking does the user block access from legitimate
users without actually accessing the attacked system?
,A. Session Hijacking
B. Denial of Service
C. Web Attack
D. None of the Above.
Answer: B. Denial of Service
(A denial-of-service attack is probably the most common attack on the
web.)
◉ Which of these was the first computer incident-response team?
A. Microsoft Security Advisor
B. F-Secure
C. Computer Emergency Response Team
D. SANS Institute.
Answer: C. Computer Emergency Response Team
◉ Which of these is a repository for detailed information on virus
outbreaks?
A. Computer Emergency Response Team
B. F-Secure
C. SANS Institute
D. Microsoft Security Advisor.
, Answer: B. F-Secure
(Information includes how a virus spreads, ways to recognize the virus,
and, frequently, specific tools for cleaning an infected system.)
◉ Your company is instituting a new security awareness program. You
are responsible for educating end users on a variety of threats, including
social engineering. Which of the following best defines social
engineering?
A. Destruction or alteration of data
B. Using people skills to obtain proprietary information
C. Gathering information from discarded manuals and printouts
D. Illegal copying of software.
Answer: B. Using people skills to obtain proprietary information
◉ Which of these is the process to determine if the credentials given by
a user or another system are authorized to access the network resource in
question?
A. Integrity
B. Authentication
C. Confidentiality
D. Availability.
Answer: B. Authentication
