ITN 267 EXAM QUESTIONS WITH
CORRECT ANSWERS
A _____________ is a method of controlled entry into a facility and
| | | | | | | | | | | |
provides access to secure areas such as a research lab or data center. -
| | | | | | | | | | | | | |
CORRECT ANSWER✔✔-Mantrap |
Biometric data is considered personally identifiable information. T or F -
| | | | | | | | | | |
CORRECT ANSWER✔✔-True |
A contract tells an organization how it must act and the consequences
| | | | | | | | | | | |
for failing to act properly. T or F - CORRECT ANSWER✔✔-False
| | | | | | | | | |
All of the following are ways to protect confidentiality except: -
| | | | | | | | | | |
CORRECT ANSWER✔✔-Shoulder surfing
| |
What is the purpose of Executive Order 13526? - CORRECT
| | | | | | | | | |
ANSWER✔✔-It describes rules for using and a system of for classifying
| | | | | | | | | | |
national security information.
| |
,While external and internal attackers are both deliberate threats, only
| | | | | | | | | |
internal attackers seek to embarrass an organization. T or F - CORRECT
| | | | | | | | | | | |
ANSWER✔✔-False
Confidential describes information that could cause damage to U.S.
| | | | | | | | |
security if disclosed to an unauthorized person. This is the lowest data
| | | | | | | | | | | |
classification level. T or F - CORRECT ANSWER✔✔-True | | | | | | |
A keystroke logger is harmful code intentionally left on a computer
| | | | | | | | | | |
system. It lies dormant for a certain period, and when specific
| | | | | | | | | | |
conditions are met, it "explodes" and carries out its malicious function.
| | | | | | | | | | |
T or F - CORRECT ANSWER✔✔-False
| | | | |
In what ways can you classify safeguards? - CORRECT ANSWER✔✔-
| | | | | | | | |
Safeguards can be classified by how they work or how they act.
| | | | | | | | | | |
The United States has one comprehensive data protection law and relies
| | | | | | | | | |
on the Federal Trade Commission (FTC) to ensure compliance. T or F -
| | | | | | | | | | | | | |
CORRECT ANSWER✔✔-False |
Threats fall into four categories: Human, Natural, Technology and
| | | | | | | | |
Operational, and Physical and Environmental. T or F - CORRECT
| | | | | | | | | |
ANSWER✔✔-True
, Based on the descriptions given, what film does NOT exemplify the
| | | | | | | | | | |
concept of social engineering? - CORRECT ANSWER✔✔-Office Space:
| | | | | | | |
Three friends and disgruntled coworkers at a tech company discover
| | | | | | | | | |
that the company's accounting system has a computer glitch that
| | | | | | | | | |
calculates certain financial information to six decimal points, but only
| | | | | | | | | |
records the first two decimal points in the accounting files and then
| | | | | | | | | | | |
regularly discards the remaining fractions of pennies. When the trio
| | | | | | | | | |
learns their jobs are in jeopardy, they create a computer program that
| | | | | | | | | | | |
diverts the discarded fractions of pennies into a bank account they
| | | | | | | | | | |
share. They believe that the company will continue to pay them in
| | | | | | | | | | | |
installments small enough that the company will never notice but that
| | | | | | | | | | |
will lead to a very large amount of money over time.
| | | | | | | | | |
The domain of Telecommunications and Network Security describes
| | | | | | | |
how to protect information systems resources during their normal
| | | | | | | | |
operational state. It includes items such as vulnerability management
| | | | | | | | |
and incident response activities. T or F - CORRECT ANSWER✔✔-False
| | | | | | | | |
Physical safeguards are actions that an organization takes to protect its
| | | | | | | | | | |
actual, tangible resources. They keep unauthorized individuals out of
| | | | | | | | |
controlled areas. T or F - CORRECT ANSWER✔✔-True
| | | | | | |
Organizations have a number of options for responding to risk, which
| | | | | | | | | | |
include risk avoidance, risk mitigation, and risk transfer. T or F -
| | | | | | | | | | | |
CORRECT ANSWER✔✔-True |
CORRECT ANSWERS
A _____________ is a method of controlled entry into a facility and
| | | | | | | | | | | |
provides access to secure areas such as a research lab or data center. -
| | | | | | | | | | | | | |
CORRECT ANSWER✔✔-Mantrap |
Biometric data is considered personally identifiable information. T or F -
| | | | | | | | | | |
CORRECT ANSWER✔✔-True |
A contract tells an organization how it must act and the consequences
| | | | | | | | | | | |
for failing to act properly. T or F - CORRECT ANSWER✔✔-False
| | | | | | | | | |
All of the following are ways to protect confidentiality except: -
| | | | | | | | | | |
CORRECT ANSWER✔✔-Shoulder surfing
| |
What is the purpose of Executive Order 13526? - CORRECT
| | | | | | | | | |
ANSWER✔✔-It describes rules for using and a system of for classifying
| | | | | | | | | | |
national security information.
| |
,While external and internal attackers are both deliberate threats, only
| | | | | | | | | |
internal attackers seek to embarrass an organization. T or F - CORRECT
| | | | | | | | | | | |
ANSWER✔✔-False
Confidential describes information that could cause damage to U.S.
| | | | | | | | |
security if disclosed to an unauthorized person. This is the lowest data
| | | | | | | | | | | |
classification level. T or F - CORRECT ANSWER✔✔-True | | | | | | |
A keystroke logger is harmful code intentionally left on a computer
| | | | | | | | | | |
system. It lies dormant for a certain period, and when specific
| | | | | | | | | | |
conditions are met, it "explodes" and carries out its malicious function.
| | | | | | | | | | |
T or F - CORRECT ANSWER✔✔-False
| | | | |
In what ways can you classify safeguards? - CORRECT ANSWER✔✔-
| | | | | | | | |
Safeguards can be classified by how they work or how they act.
| | | | | | | | | | |
The United States has one comprehensive data protection law and relies
| | | | | | | | | |
on the Federal Trade Commission (FTC) to ensure compliance. T or F -
| | | | | | | | | | | | | |
CORRECT ANSWER✔✔-False |
Threats fall into four categories: Human, Natural, Technology and
| | | | | | | | |
Operational, and Physical and Environmental. T or F - CORRECT
| | | | | | | | | |
ANSWER✔✔-True
, Based on the descriptions given, what film does NOT exemplify the
| | | | | | | | | | |
concept of social engineering? - CORRECT ANSWER✔✔-Office Space:
| | | | | | | |
Three friends and disgruntled coworkers at a tech company discover
| | | | | | | | | |
that the company's accounting system has a computer glitch that
| | | | | | | | | |
calculates certain financial information to six decimal points, but only
| | | | | | | | | |
records the first two decimal points in the accounting files and then
| | | | | | | | | | | |
regularly discards the remaining fractions of pennies. When the trio
| | | | | | | | | |
learns their jobs are in jeopardy, they create a computer program that
| | | | | | | | | | | |
diverts the discarded fractions of pennies into a bank account they
| | | | | | | | | | |
share. They believe that the company will continue to pay them in
| | | | | | | | | | | |
installments small enough that the company will never notice but that
| | | | | | | | | | |
will lead to a very large amount of money over time.
| | | | | | | | | |
The domain of Telecommunications and Network Security describes
| | | | | | | |
how to protect information systems resources during their normal
| | | | | | | | |
operational state. It includes items such as vulnerability management
| | | | | | | | |
and incident response activities. T or F - CORRECT ANSWER✔✔-False
| | | | | | | | |
Physical safeguards are actions that an organization takes to protect its
| | | | | | | | | | |
actual, tangible resources. They keep unauthorized individuals out of
| | | | | | | | |
controlled areas. T or F - CORRECT ANSWER✔✔-True
| | | | | | |
Organizations have a number of options for responding to risk, which
| | | | | | | | | | |
include risk avoidance, risk mitigation, and risk transfer. T or F -
| | | | | | | | | | | |
CORRECT ANSWER✔✔-True |
