With the introduction of the computer the need for automated tools for protecting files and other
information stored on the computer became evident. - Correct Answer True
There is a natural tendency on the part of users and system managers to perceive little benefit from
security investment until a security failure occurs. - Correct Answer True
There are clear boundaries between network security and internet security. - Correct Answer False
The CIA (Confidentiality, Integrity, Availability) triad embodies the fundamental security objectives for
both data and for information and computing services. - Correct Answer True
In developing a particular security mechanism or algorithm one must always consider potential attacks
on those security features. - Correct Answer True
A loss of confidentiality is the unauthorized modification or destruction of information. - Correct Answer
False
Patient allergy information is an example of an asset with a moderate requirement for integrity. -
Correct Answer False
The more critical a component or service, the higher the level of availability required. - Correct Answer
True
Data origin authentication provides protection against the duplication or modification of data units. -
Correct Answer False
The emphasis in dealing with passive attacks is on prevention rather than detection. - Correct Answer
True
, Data integrity is the protection of data from unauthorized disclosure. - Correct Answer False
Information access threats exploit service flaws in computers to inhibit use by legitimate users. - Correct
Answer False
Viruses and worms are two examples of software attacks. - Correct Answer True
A connection-oriented integrity service deals with individual messages without regard to any larger
context and generally provides protection against message modification only. - Correct Answer False
Pervasive security mechanisms are not specific to any particular OSI (Open Systems Interconnection)
security service or protocol layer. - Correct Answer True
Public-key encryption is also referred to as conventional encryption, secret-key, or single-key
encryption. - Correct Answer False
The advantage of a block cipher is that you can reuse keys. - Correct Answer True
Ciphertext is the scrambled message produced as output.. - Correct Answer True
The security of symmetric encryption depends on the secrecy of the algorithm, not the secrecy of the
key. - Correct Answer False
The ciphertext-only attack is the easiest to defend against because the opponent has the least amount
of information to work with. - Correct Answer True
The Feistel structure is a particular example of the more general structure used by all symmetric block
ciphers. - Correct Answer True
Smaller block sizes mean greater security but reduced encryption/decryption speed. - Correct Answer
False
information stored on the computer became evident. - Correct Answer True
There is a natural tendency on the part of users and system managers to perceive little benefit from
security investment until a security failure occurs. - Correct Answer True
There are clear boundaries between network security and internet security. - Correct Answer False
The CIA (Confidentiality, Integrity, Availability) triad embodies the fundamental security objectives for
both data and for information and computing services. - Correct Answer True
In developing a particular security mechanism or algorithm one must always consider potential attacks
on those security features. - Correct Answer True
A loss of confidentiality is the unauthorized modification or destruction of information. - Correct Answer
False
Patient allergy information is an example of an asset with a moderate requirement for integrity. -
Correct Answer False
The more critical a component or service, the higher the level of availability required. - Correct Answer
True
Data origin authentication provides protection against the duplication or modification of data units. -
Correct Answer False
The emphasis in dealing with passive attacks is on prevention rather than detection. - Correct Answer
True
, Data integrity is the protection of data from unauthorized disclosure. - Correct Answer False
Information access threats exploit service flaws in computers to inhibit use by legitimate users. - Correct
Answer False
Viruses and worms are two examples of software attacks. - Correct Answer True
A connection-oriented integrity service deals with individual messages without regard to any larger
context and generally provides protection against message modification only. - Correct Answer False
Pervasive security mechanisms are not specific to any particular OSI (Open Systems Interconnection)
security service or protocol layer. - Correct Answer True
Public-key encryption is also referred to as conventional encryption, secret-key, or single-key
encryption. - Correct Answer False
The advantage of a block cipher is that you can reuse keys. - Correct Answer True
Ciphertext is the scrambled message produced as output.. - Correct Answer True
The security of symmetric encryption depends on the secrecy of the algorithm, not the secrecy of the
key. - Correct Answer False
The ciphertext-only attack is the easiest to defend against because the opponent has the least amount
of information to work with. - Correct Answer True
The Feistel structure is a particular example of the more general structure used by all symmetric block
ciphers. - Correct Answer True
Smaller block sizes mean greater security but reduced encryption/decryption speed. - Correct Answer
False
