ITM 350 midterm study guide UPDATED ACTUAL Questions And Correct Answers
C
Terms in this set (153)
True or False? For businesses and organizations under true
recent compliance laws, data classification standards
typically include private, confidential, internal use only,
and public-domain categories.
In which domain of a typical IT infrastructure is the first user domain
layer of defense for a layered security strategy?
A.Local Area Network (LAN) Domain
B.System/Application Domain
C.Workstation Domain
D.User Domain
True or False? Encrypting data within databases and true
storage devices gives an added layer of security.
True or False? A data classification standard provides a True
consistent definition for how an organization should
handle and secure different types of data.
True or False? Availability is the tenet of information True
security that deals with uptime and downtime.
True or False? An information system is a safeguard or False
countermeasure an organization implements to help
reduce risk.
True or False? Hypertext Transfer Protocol (HTTP) False
encrypts data transfers between secure browsers and
secure webpages.
Juan's web server was down for an entire day in April. It 96.67%
experienced no other downtime during that month. What
represents the web server uptime for that month? reason: April has 30 days, so the web server had 29 days of uptime: 29/30 = 0.9667
A.96.67% or 96.67%.
B.3.33%
C.1.03%
D.99.96%
True or False? Access control lists (ACLs) are used to true
permit and deny traffic in an Internet Protocol (IP) router.
, Devaki is capturing traffic on her network. She notices 22
connections using ports 20, 22, 23, and 80. Which port
normally hosts a protocol that uses secure, encrypted Reason: The Secure Shell (SSH) protocol uses port 22. SSH is a network protocol
connections? for performing remote terminal access to another device. SSH encrypts data for
A.80 maintaining the confidentiality of communications. Port 20 corresponds to the File
B.23 Transfer Protocol (FTP), which is a cleartext protocol. Port 23 corresponds to the
C.20 Telnet protocol, which is a cleartext protocol. Port 80 corresponds to the
D.22 Hypertext Transfer Protocol (HTTP), which is a cleartext protocol.
True or False? Cryptography is the practice of making true
data unreadable.
True or False? Authorization is the process of granting True
rights to use an organization's IT assets, systems,
applications, and data to a specific user.
True or False? Hypertext Transfer Protocol (HTTP) is the True
communications protocol between web browsers and
websites with data in cleartext.
A brute-force password attack and the theft of a mobile Remote Access Domain
worker's laptop are risks most likely found in which
domain of a typical IT infrastructure?
A. Remote Access Domain
B. User Domain
C. Local Area Network (LAN) Domain
D.Workstation Domain
True or False? An IT security policy framework is like an True
outline that identifies where security controls should be
used.
True or False? The Local Area Network (LAN) Domain of true
a typical IT infrastructure includes both physical network
components and logical configuration of services for
users.
Bob is the information security and compliance manager Federal information security management act (FISMA)
for a financial institution. Which regulation is most likely to
directly apply to Bob's employer? reason: GLBA requires all types of financial institutions to protect customer's
A.Gramm-Leach-Bliley Act (GLBA) private financial information.
B.Federal Information Security Management Act (FISMA)
C.Children's Internet Protection Act (CIPA)
D.Health Insurance Portability and Accountability Act
(HIPAA)
C
Terms in this set (153)
True or False? For businesses and organizations under true
recent compliance laws, data classification standards
typically include private, confidential, internal use only,
and public-domain categories.
In which domain of a typical IT infrastructure is the first user domain
layer of defense for a layered security strategy?
A.Local Area Network (LAN) Domain
B.System/Application Domain
C.Workstation Domain
D.User Domain
True or False? Encrypting data within databases and true
storage devices gives an added layer of security.
True or False? A data classification standard provides a True
consistent definition for how an organization should
handle and secure different types of data.
True or False? Availability is the tenet of information True
security that deals with uptime and downtime.
True or False? An information system is a safeguard or False
countermeasure an organization implements to help
reduce risk.
True or False? Hypertext Transfer Protocol (HTTP) False
encrypts data transfers between secure browsers and
secure webpages.
Juan's web server was down for an entire day in April. It 96.67%
experienced no other downtime during that month. What
represents the web server uptime for that month? reason: April has 30 days, so the web server had 29 days of uptime: 29/30 = 0.9667
A.96.67% or 96.67%.
B.3.33%
C.1.03%
D.99.96%
True or False? Access control lists (ACLs) are used to true
permit and deny traffic in an Internet Protocol (IP) router.
, Devaki is capturing traffic on her network. She notices 22
connections using ports 20, 22, 23, and 80. Which port
normally hosts a protocol that uses secure, encrypted Reason: The Secure Shell (SSH) protocol uses port 22. SSH is a network protocol
connections? for performing remote terminal access to another device. SSH encrypts data for
A.80 maintaining the confidentiality of communications. Port 20 corresponds to the File
B.23 Transfer Protocol (FTP), which is a cleartext protocol. Port 23 corresponds to the
C.20 Telnet protocol, which is a cleartext protocol. Port 80 corresponds to the
D.22 Hypertext Transfer Protocol (HTTP), which is a cleartext protocol.
True or False? Cryptography is the practice of making true
data unreadable.
True or False? Authorization is the process of granting True
rights to use an organization's IT assets, systems,
applications, and data to a specific user.
True or False? Hypertext Transfer Protocol (HTTP) is the True
communications protocol between web browsers and
websites with data in cleartext.
A brute-force password attack and the theft of a mobile Remote Access Domain
worker's laptop are risks most likely found in which
domain of a typical IT infrastructure?
A. Remote Access Domain
B. User Domain
C. Local Area Network (LAN) Domain
D.Workstation Domain
True or False? An IT security policy framework is like an True
outline that identifies where security controls should be
used.
True or False? The Local Area Network (LAN) Domain of true
a typical IT infrastructure includes both physical network
components and logical configuration of services for
users.
Bob is the information security and compliance manager Federal information security management act (FISMA)
for a financial institution. Which regulation is most likely to
directly apply to Bob's employer? reason: GLBA requires all types of financial institutions to protect customer's
A.Gramm-Leach-Bliley Act (GLBA) private financial information.
B.Federal Information Security Management Act (FISMA)
C.Children's Internet Protection Act (CIPA)
D.Health Insurance Portability and Accountability Act
(HIPAA)
