MSIS 4123 Exam 4 Questions with Correct Answers Latest Update 2025/2026
The process of ensuring that a system meets the security requirements of its domain - Answers
System Accreditation
A pen test oriented toward an insider or employee view would likely use a _____ knowledge test -
Answers Full knowledge test
Matching found services, ports and o/s to known vulnerabilities during a pen test is called
______ - Answers Vulnerability mapping
Pen testing ______ is an aggressive search requiring an active connection and directed queries -
Answers Enumeration
_________ includes vulnerability assessment, remediation, and reporting of networks and
computers. - Answers Penetration testing (pen testing)
_____ is the broad term for the "good" use of hacker tools and hacker processes - Answers
ethical hacking
A vulnerability assessment is the process of identifying, quantifying, and _____ the vulnerabilities
in a system - Answers prioritizing (or ranking)
a pen test oriented toward a hacker view would likely use a _____ knowledge test - Answers Zero
Pen testing _____ uses programs like NMAP and NESSUS as part of the discovery process -
Answers Scanning
_____ is a specific internet service offered by places like GoDaddy that may reveal information
about the owner of an internet domain name - Answers WHOIS
Guidelines for how an ethical hacker will conduct a pen test are called _____ of _____. - Answers
Rules of Behavior
Pen testing ________ is a passive process of gathering knowledge about an organization. -
Answers Footprinting
In the scientific method we wither reject or _____ the hypothesis - Answers fail to reject
Evidence is said to be _____ when it proves to be suitable for admission of persuadable fact in a
court of law. - Answers forensic
The first computer crime law anywhere was created in _____ because of false winning dog track
tickets. - Answers Florida
___ of ___ covers all property obtained by criminal acts. - Answers fruits of crime
A(n) _____ characteristic uniquely identifies something. "That's my dog Summer", for example. -
, Answers individual
ISFCE, GIAC and IACIS are all sources or originators of digital forensics _____. - Answers
certifications
Proof that there is continuity of possession of evidence is done with the _____ of ______ . -
Answers chain of custody
property not allowed to private citizens is called ______ - Answers contraband
Locard's _____ principal states that contact between two things will leave evidence. - Answers
exchange
A(n) _____ characteristic identifies something as belonging to a group. "That's a dog", for
example. - Answers class
The application of science to law is called _____ science. - Answers forensic
The wiring of all the things, even mundane items like refrigerators, to the Internet is creating the
_____. - Answers Internet of Things (IoT)
Ensuring that evidence is what it claims to be and has probative value is known as _____ in
digital forensics. - Answers authentication
The first federal computer crime law was created in the country of _____. - Answers Canada
As an outcome of the scientific method we may explain how something occurs (which is a
_____), or why something occurs (which is a _____). - Answers law; theory
Hashing is used in digital forensics to show that the of the _____ evidence has not been
compromised. - Answers integrity
_____occurs when improperly obtained evidence is used as the basis for conducting a legitimate
case but only the legitimate method is revealed in court. (2 words) - Answers Parallel
Construction
Something has _____ if it is used in a significant way in a crime. - Answers instrumentality
Viewing computers in crime as hardware or software used as an instrumentality,
contraband/fruit of crime, or evidence follows the categories established by the _____ (acronym).
- Answers USDOJ
Thinking of a computer used in a crime as being a(n) object, subject, tool or symbol is the basis
of _____ categories. - Answers Parker's
Any data stored or transmitted using a computer that can be used to support or refute an
offense in law is _____ evidence. - Answers digital
The process of ensuring that a system meets the security requirements of its domain - Answers
System Accreditation
A pen test oriented toward an insider or employee view would likely use a _____ knowledge test -
Answers Full knowledge test
Matching found services, ports and o/s to known vulnerabilities during a pen test is called
______ - Answers Vulnerability mapping
Pen testing ______ is an aggressive search requiring an active connection and directed queries -
Answers Enumeration
_________ includes vulnerability assessment, remediation, and reporting of networks and
computers. - Answers Penetration testing (pen testing)
_____ is the broad term for the "good" use of hacker tools and hacker processes - Answers
ethical hacking
A vulnerability assessment is the process of identifying, quantifying, and _____ the vulnerabilities
in a system - Answers prioritizing (or ranking)
a pen test oriented toward a hacker view would likely use a _____ knowledge test - Answers Zero
Pen testing _____ uses programs like NMAP and NESSUS as part of the discovery process -
Answers Scanning
_____ is a specific internet service offered by places like GoDaddy that may reveal information
about the owner of an internet domain name - Answers WHOIS
Guidelines for how an ethical hacker will conduct a pen test are called _____ of _____. - Answers
Rules of Behavior
Pen testing ________ is a passive process of gathering knowledge about an organization. -
Answers Footprinting
In the scientific method we wither reject or _____ the hypothesis - Answers fail to reject
Evidence is said to be _____ when it proves to be suitable for admission of persuadable fact in a
court of law. - Answers forensic
The first computer crime law anywhere was created in _____ because of false winning dog track
tickets. - Answers Florida
___ of ___ covers all property obtained by criminal acts. - Answers fruits of crime
A(n) _____ characteristic uniquely identifies something. "That's my dog Summer", for example. -
, Answers individual
ISFCE, GIAC and IACIS are all sources or originators of digital forensics _____. - Answers
certifications
Proof that there is continuity of possession of evidence is done with the _____ of ______ . -
Answers chain of custody
property not allowed to private citizens is called ______ - Answers contraband
Locard's _____ principal states that contact between two things will leave evidence. - Answers
exchange
A(n) _____ characteristic identifies something as belonging to a group. "That's a dog", for
example. - Answers class
The application of science to law is called _____ science. - Answers forensic
The wiring of all the things, even mundane items like refrigerators, to the Internet is creating the
_____. - Answers Internet of Things (IoT)
Ensuring that evidence is what it claims to be and has probative value is known as _____ in
digital forensics. - Answers authentication
The first federal computer crime law was created in the country of _____. - Answers Canada
As an outcome of the scientific method we may explain how something occurs (which is a
_____), or why something occurs (which is a _____). - Answers law; theory
Hashing is used in digital forensics to show that the of the _____ evidence has not been
compromised. - Answers integrity
_____occurs when improperly obtained evidence is used as the basis for conducting a legitimate
case but only the legitimate method is revealed in court. (2 words) - Answers Parallel
Construction
Something has _____ if it is used in a significant way in a crime. - Answers instrumentality
Viewing computers in crime as hardware or software used as an instrumentality,
contraband/fruit of crime, or evidence follows the categories established by the _____ (acronym).
- Answers USDOJ
Thinking of a computer used in a crime as being a(n) object, subject, tool or symbol is the basis
of _____ categories. - Answers Parker's
Any data stored or transmitted using a computer that can be used to support or refute an
offense in law is _____ evidence. - Answers digital
