Cyber Security Class
white-hat hacker - ANS-A person skilled in attacking computer systems, who uses those skills
as a security expert to help protect systems, is a:
reasoned paranoia - ANS-A rational security decision, such as locking your vehicle when not in
use, is an example of:
take actions to mitigate a serious risk - ANS-A security analyst is performing a security
assessment. The analyst should not:
TRUE - ANS-A supervisory control and data acquisition (SCADA) device is a computer that
controls motors, valves, and other devices in industrial applications.
FALSE - ANS-A threat agent is a person who did attack our assets, an attacker might attack an
asset.
TRUE - ANS-A vulnerability is a weakness in the boundary that protects the assets from the
threat agents.
an attack - ANS-An attempt by a threat agent to exploit assets without permission is referred to
as:
Threat - ANS-Anonymous is an example of what kind of agents.
Acceptable Use Policy - ANS-AUP stands for?
TRUE - ANS-Botnets can (often) perform distributed denial of service (DDoS) attacks in which
thousands of individual computers send overwhelming amounts of traffic at a victims computer.
Rule Based - ANS-Car ignition Locks are an example of what type of decision:
authentication - ANS-CIA properties do not include:
FALSE - ANS-Information security architecture often relies on boundaries outside the computer
to protect important information or programs from error prone or malicious programs.
FALSE - ANS-Modus Operandi applies only to criminal organizations.
risk-assessment process - ANS-OCTAVE is a:
TRUE - ANS-People can be threat agents in some cases but trustworthy in others.
, TRUE - ANS-Security Category RMF begins with a high level estimate of the impact caused by
cyber security failures.
utilities - ANS-Supervisory control and data acquisition (SCADA) devices are most often
associated with:
FALSE - ANS-The security process and the Information engineering process find their origin in
the concept of Continuous Improvement.
TRUE - ANS-The term "security theater" refers to security measures intended to make potential
victims feel safe and secure without regard to their effectiveness.
Attack Matrix - ANS-This yields a more specific set of attacks tied to our particular threat agents.
TRUE - ANS-To analyze a risk, we review it against the threat agents behind the risk.
FALSE - ANS-Victims can protect themselves against zero-day attacks.
Malware - ANS-What is a worm?
including enough detail to allow an attacker to exploit the vulnerability - ANS-When disclosing a
security vulnerability in a system or software, the manufacturer should avoid:
security architecture study - ANS-When you analyze a system using the six-phase security
process, you are performing a:
FALSE - ANS-Zero Day vulnerability is one that has been reported to the software's vendor and
the general public.
TRUE - ANS-A computer's Basic Input/Output System (BIOS) is a computer program stored in
read-only memory (ROM).
TRUE - ANS-A stack provides a simple, structured way to give temporary storage to a
procedure, including a place to save the return address.
mechanical - ANS-A type of security control in which you unplug a computer from the Internet to
protect it from malware is:
corrective - ANS-A type of security control that takes measures to help restore a system is
referred to as:
TRUE - ANS-Although parallel cables could be faster in theory, improved circuitry yields a
significant performance improvement with SATA connections.
white-hat hacker - ANS-A person skilled in attacking computer systems, who uses those skills
as a security expert to help protect systems, is a:
reasoned paranoia - ANS-A rational security decision, such as locking your vehicle when not in
use, is an example of:
take actions to mitigate a serious risk - ANS-A security analyst is performing a security
assessment. The analyst should not:
TRUE - ANS-A supervisory control and data acquisition (SCADA) device is a computer that
controls motors, valves, and other devices in industrial applications.
FALSE - ANS-A threat agent is a person who did attack our assets, an attacker might attack an
asset.
TRUE - ANS-A vulnerability is a weakness in the boundary that protects the assets from the
threat agents.
an attack - ANS-An attempt by a threat agent to exploit assets without permission is referred to
as:
Threat - ANS-Anonymous is an example of what kind of agents.
Acceptable Use Policy - ANS-AUP stands for?
TRUE - ANS-Botnets can (often) perform distributed denial of service (DDoS) attacks in which
thousands of individual computers send overwhelming amounts of traffic at a victims computer.
Rule Based - ANS-Car ignition Locks are an example of what type of decision:
authentication - ANS-CIA properties do not include:
FALSE - ANS-Information security architecture often relies on boundaries outside the computer
to protect important information or programs from error prone or malicious programs.
FALSE - ANS-Modus Operandi applies only to criminal organizations.
risk-assessment process - ANS-OCTAVE is a:
TRUE - ANS-People can be threat agents in some cases but trustworthy in others.
, TRUE - ANS-Security Category RMF begins with a high level estimate of the impact caused by
cyber security failures.
utilities - ANS-Supervisory control and data acquisition (SCADA) devices are most often
associated with:
FALSE - ANS-The security process and the Information engineering process find their origin in
the concept of Continuous Improvement.
TRUE - ANS-The term "security theater" refers to security measures intended to make potential
victims feel safe and secure without regard to their effectiveness.
Attack Matrix - ANS-This yields a more specific set of attacks tied to our particular threat agents.
TRUE - ANS-To analyze a risk, we review it against the threat agents behind the risk.
FALSE - ANS-Victims can protect themselves against zero-day attacks.
Malware - ANS-What is a worm?
including enough detail to allow an attacker to exploit the vulnerability - ANS-When disclosing a
security vulnerability in a system or software, the manufacturer should avoid:
security architecture study - ANS-When you analyze a system using the six-phase security
process, you are performing a:
FALSE - ANS-Zero Day vulnerability is one that has been reported to the software's vendor and
the general public.
TRUE - ANS-A computer's Basic Input/Output System (BIOS) is a computer program stored in
read-only memory (ROM).
TRUE - ANS-A stack provides a simple, structured way to give temporary storage to a
procedure, including a place to save the return address.
mechanical - ANS-A type of security control in which you unplug a computer from the Internet to
protect it from malware is:
corrective - ANS-A type of security control that takes measures to help restore a system is
referred to as:
TRUE - ANS-Although parallel cables could be faster in theory, improved circuitry yields a
significant performance improvement with SATA connections.
