CTS 1120, FINAL EXAM (MULTIPLE CHOICE)
UPDATED ACTUAL QUESTIONS AND CORRECT
ANSWERS
Question 1.
Adam is evaluating the security of a web server before it goes live. He believes that an issue in the code
allows an SQL injection attack against the server. What term describes the issue that Adam discovered?
ANSWER
Vulnerability
Question 2.
Which technology category would NOT likely be the subject of a standard published by the
International Electrotechnical Commission (IEC)?
ANSWER
Encryption
Question 3.
What is NOT an effective key distribution method for plaintext encryption keys?
ANSWER
CD
Question 4.
Which of the following agencies is NOT involved in the Gramm-Leach-Bliley Act (GLBA) oversight
process?
ANSWER
Federal Communications Commission (FCC)
,Question 5.
Yolanda would like to prevent attackers from using her network as a relay point for a smurf attack.
What protocol should she block?
ANSWER
Internet Control Message Protocol (ICMP)
Question 6.
What is NOT a symmetric encryption algorithm?
ANSWER
Rivest-Shamir-Adelman (RSA)
Question 7.
What type of security role is covered by the Committee on National Security Systems (CNSS) Training
Standard CNSS-4012?
ANSWER
Senior System Manager
Question 8.
What type of malware does NOT have an anti-malware solution and should be covered in security
awareness training?
ANSWER
Zero-day
Question 9.
Adam's company recently suffered an attack where hackers exploited an SQL injection issue on their
web server and stole sensitive information from a database. What term describes this activity?
ANSWER
Incident
,Question 10.
Which of the following is NOT an advantage to undertaking self-study of information security topics?
ANSWER
Fixed pace
Question 11.
Norm recently joined a new organization. He noticed that the firewall technology used by his new firm
opens separate connections between the devices on both sides of the firewall. What type of
technology is being used?
ANSWER
Application proxying
Question 12.
Donna is building a security awareness program designed to meet the requirements of the Payment
Card Industry Data Security Standard (PCI DSS) 3.2. How often must she conduct training for all current
employees?
ANSWER
Annually
Question 13.
Under the Health Insurance Portability and Accountability Act (HIPAA) Security Rule, what type of
safeguards must be implemented by all covered entities, regardless of the circumstances?
ANSWER
Required
Question 14.
What is NOT a typical sign of virus activity on a system?
ANSWER
Unexpected power failures
, Question 15.
How many years of specialized experience are required to earn one of the Certified Information
Systems Security Professional (CISSP) concentrations?
ANSWER
Two
Question 16.
Breanne's system was infected by malicious code after she installed an innocent-looking solitaire game
that she downloaded from the Internet. What type of malware did she likely encounter?
ANSWER
Trojan horse
Question 17.
Juan comes across documentation from his organization related to several information security
initiatives using different standards as their reference. Which International Organization for
Standardization (ISO) standard provides current guidance on information security management?
ANSWER
ISO 27002
Question 18.
What federal government agency is charged with the responsibility of creating information security
standards and guidelines for use within the federal government and more broadly across industries?
ANSWER
National Institute of Standards and Technology (NIST)
Question 19.
Hilda is troubleshooting a problem with the encryption of data. At which layer of the OSI Reference
Model is she working?
ANSWER
Presentation
UPDATED ACTUAL QUESTIONS AND CORRECT
ANSWERS
Question 1.
Adam is evaluating the security of a web server before it goes live. He believes that an issue in the code
allows an SQL injection attack against the server. What term describes the issue that Adam discovered?
ANSWER
Vulnerability
Question 2.
Which technology category would NOT likely be the subject of a standard published by the
International Electrotechnical Commission (IEC)?
ANSWER
Encryption
Question 3.
What is NOT an effective key distribution method for plaintext encryption keys?
ANSWER
CD
Question 4.
Which of the following agencies is NOT involved in the Gramm-Leach-Bliley Act (GLBA) oversight
process?
ANSWER
Federal Communications Commission (FCC)
,Question 5.
Yolanda would like to prevent attackers from using her network as a relay point for a smurf attack.
What protocol should she block?
ANSWER
Internet Control Message Protocol (ICMP)
Question 6.
What is NOT a symmetric encryption algorithm?
ANSWER
Rivest-Shamir-Adelman (RSA)
Question 7.
What type of security role is covered by the Committee on National Security Systems (CNSS) Training
Standard CNSS-4012?
ANSWER
Senior System Manager
Question 8.
What type of malware does NOT have an anti-malware solution and should be covered in security
awareness training?
ANSWER
Zero-day
Question 9.
Adam's company recently suffered an attack where hackers exploited an SQL injection issue on their
web server and stole sensitive information from a database. What term describes this activity?
ANSWER
Incident
,Question 10.
Which of the following is NOT an advantage to undertaking self-study of information security topics?
ANSWER
Fixed pace
Question 11.
Norm recently joined a new organization. He noticed that the firewall technology used by his new firm
opens separate connections between the devices on both sides of the firewall. What type of
technology is being used?
ANSWER
Application proxying
Question 12.
Donna is building a security awareness program designed to meet the requirements of the Payment
Card Industry Data Security Standard (PCI DSS) 3.2. How often must she conduct training for all current
employees?
ANSWER
Annually
Question 13.
Under the Health Insurance Portability and Accountability Act (HIPAA) Security Rule, what type of
safeguards must be implemented by all covered entities, regardless of the circumstances?
ANSWER
Required
Question 14.
What is NOT a typical sign of virus activity on a system?
ANSWER
Unexpected power failures
, Question 15.
How many years of specialized experience are required to earn one of the Certified Information
Systems Security Professional (CISSP) concentrations?
ANSWER
Two
Question 16.
Breanne's system was infected by malicious code after she installed an innocent-looking solitaire game
that she downloaded from the Internet. What type of malware did she likely encounter?
ANSWER
Trojan horse
Question 17.
Juan comes across documentation from his organization related to several information security
initiatives using different standards as their reference. Which International Organization for
Standardization (ISO) standard provides current guidance on information security management?
ANSWER
ISO 27002
Question 18.
What federal government agency is charged with the responsibility of creating information security
standards and guidelines for use within the federal government and more broadly across industries?
ANSWER
National Institute of Standards and Technology (NIST)
Question 19.
Hilda is troubleshooting a problem with the encryption of data. At which layer of the OSI Reference
Model is she working?
ANSWER
Presentation
