: : e:
Module 01 - An Overview of Information Security and Risk Management
True / False
1. The C.I.A. triad is the industry standard for computer security since the development of the mainframe and is based on
three characteristics that describe the utility of information.
a. True
b. False
ANSWER: True
POINTS: 1
REFERENCES: H1: AN OVERVIEW OF INFORMATION SECURITY
p. 3
QUESTION TYPE: True / False
HAS VARIABLES: False
LEARNING OBJECTIVES: 1.1 - Define and explain information security
DATE CREATED: 7/20/2020 12:38 PM
DATE MODIFIED: 12/27/2020 10:41 AM
2. Confidentiality is an attribute of information that describes how data is protected from disclosure or exposure to
unauthorized individuals or systems.
a. True
b. False
ANSWER: True
POINTS: 1
REFERENCES: p. 3
H1: AN OVERVIEW OF INFORMATION SECURITY
QUESTION TYPE: True / False
HAS VARIABLES: False
LEARNING OBJECTIVES: 1.1 - Define and explain information security
DATE CREATED: 7/20/2020 12:45 PM
DATE MODIFIED: 7/25/2020 2:49 PM
3. A power spike is a long-term increase in electrical power availability.
a. True
b. False
ANSWER: False
POINTS: 1
REFERENCES: p. 6
H1: AN OVERVIEW OF INFORMATION SECURITY
H2: The 12 Categories of Threats
QUESTION TYPE: True / False
HAS VARIABLES: False
LEARNING OBJECTIVE 1.1 - Define and explain information security
S:
DATE CREATED: 7/20/2020 12:53 PM
Copyright Cengage Learning. Powered by Cognero. Page 1
,Name Class Dat
: : e:
Module 01 - An Overview of Information Security and Risk Management
DATE MODIFIED: 12/27/2020 10:42 AM
4. Intellectual property (IP) includes trade secrets, copyrights, trademarks, and patents.
a. True
b. False
ANSWER: True
POINTS: 1
REFERENCES: H1: AN OVERVIEW OF INFORMATION SECURITY
H2: The 12 Categories of Threats
p. 6
QUESTION TYPE: True / False
HAS VARIABLES: False
LEARNING OBJECTIVE 1.1 - Define and explain information security
S:
DATE CREATED: 5/7/2020 4:06 PM
DATE MODIFIED: 12/27/2020 10:43 AM
5. A hacker is an information security professional with authorization to attempt to gain system access in an effort to
identify and recommend resolutions for vulnerabilities in those systems.
a. True
b. False
ANSWER: False
POINTS: 1
REFERENCES: H1: AN OVERVIEW OF INFORMATION SECURITY
H2: The 12 Categories of Threats
p. 7
QUESTION TYPE: True / False
HAS VARIABLES: False
LEARNING OBJECTIVE 1.1 - Define and explain information security
S:
DATE CREATED: 7/20/2020 4:28 PM
DATE MODIFIED: 12/27/2020 10:45 AM
6. A disaster recovery plan (DR plan) deals with identifying, classifying, responding to, and recovering from an incident.
a. True
b. False
ANSWER: False
POINTS: 1
REFERENCES: H1: OVERVIEW OF RISK MANAGEMENT
H2: Risk Treatment/Risk Control
p. 37
QUESTION TYPE: True / False
HAS VARIABLES: False
LEARNING OBJECTIVES: 1.3 - Identify and explain the basic concepts and phases of risk management
Copyright Cengage Learning. Powered by Cognero. Page 2
,Name Class Dat
: : e:
Module 01 - An Overview of Information Security and Risk Management
DATE CREATED: 5/7/2020 4:06 PM
DATE MODIFIED: 12/27/2020 10:48 AM
Modified True / False
7. Confidentiality is the state of being secure and free from danger or harm.
ANSWER: False - Security
POINTS: 1
REFERENCES: H1: AN OVERVIEW OF INFORMATION SECURITY
p. 2
QUESTION TYPE: Modified True / False
HAS VARIABLES: False
STUDENT ENTRY MODE: Basic
LEARNING OBJECTIVES: 1.1 - Define and explain information security
DATE CREATED: 7/20/2020 12:42 PM
DATE MODIFIED: 12/27/2020 10:49 AM
8. Integrity is an attribute of information that describes how data is protected from disclosure or exposure to unauthorized
individuals or systems.
ANSWER: False - Confidentiality
POINTS: 1
REFERENCES: p. 3
H1: AN OVERVIEW OF INFORMATION SECURITY
QUESTION TYPE: Modified True / False
HAS VARIABLES: False
STUDENT ENTRY MODE: Basic
LEARNING OBJECTIVES: 1.1 - Define and explain information security
DATE CREATED: 7/20/2020 12:48 PM
DATE MODIFIED: 12/27/2020 10:50 AM
9. Noise is the presеnce of additional and disruptive signals in network communications or electrical power delivery.
ANSWER: True
POINTS: 1
REFERENCES: p. 6
H1: AN OVERVIEW OF INFORMATION SECURITY
H2: The 12 Categories of Threats
QUESTION TYPE: Modified True / False
HAS VARIABLES: False
STUDENT ENTRY MOD Basic
E:
LEARNING OBJECTIVE 1.1 - Define and explain information security
S:
DATE CREATED: 7/20/2020 12:54 PM
DATE MODIFIED: 7/25/2020 3:33 PM
Copyright Cengage Learning. Powered by Cognero. Page 3
, Name Class Dat
: : e:
Module 01 - An Overview of Information Security and Risk Management
10. A penetration tester is someone who conducts attacks for personal financial benefit or for a crime organization or
foreign government.
ANSWER: False - professional hacker
POINTS: 1
REFERENCES: p. 7
H1: AN OVERVIEW OF INFORMATION SECURITY
H2: The 12 Categories of Threats
QUESTION TYPE: Modified True / False
HAS VARIABLES: False
STUDENT ENTRY MOD Basic
E:
LEARNING OBJECTIVE 1.1 - Define and explain information security
S:
DATE CREATED: 7/20/2020 4:30 PM
DATE MODIFIED: 7/25/2020 3:37 PM
11. A rainbow table is a list of hash values and their corresponding plaintext values that can be used to look up
password values if an attacker is able to steal a system’s encryptеd password file.
ANSWER: True
POINTS: 1
REFERENCES: p. 8
H1: AN OVERVIEW OF INFORMATION SECURITY
H2: The 12 Categories of Threats
QUESTION TYPE: Modified True / False
HAS VARIABLES: False
STUDENT ENTRY MOD Basic
E:
LEARNING OBJECTIVE 1.1 - Define and explain information security
S:
DATE CREATED: 7/20/2020 4:32 PM
DATE MODIFIED: 7/25/2020 3:39 PM
12. Pretexting is when аn attacker provides what appears to be a legitimate communication (usually e-mail), but it
contains hidden or embedded code that redirects the reply to a third-party site in an effort to extract personal
or confidential information.
ANSWER: False - Phishing
POINTS: 1
REFERENCES: p. 9
H1: AN OVERVIEW OF INFORMATION SECURITY
H2: The 12 Categories of Threats
QUESTION TYPE: Modified True / False
HAS VARIABLES: False
STUDENT ENTRY MOD Basic
E:
Copyright Cengage Learning. Powered by Cognero. Page 4