Principles of Information Security 4th Edition Whitman Test Bank
Download: http://testbanklive.com/download/principles-of-information-security-
4th-edition-whitman-test-bank/
Chapter 02: The Need for Security
TRUE/FALSE
1. Information security’s primary mission is to ensure that systems and their contents retain their
confidentiality at all costs.
ANS: F PTS: 1 REF: 41
2. Information security safeguards the technology assets in use at the organization.
ANS: T PTS: 1 REF: 41
3. A firewall is a mechanism that keeps certain kinds of network traffic out of a private network.
ANS: T PTS: 1 REF: 42
4. An act of theft performed by a hacker falls into the category of “theft,” but is also often accompanied
by defacement actions to delay discovery and thus may also be placed within the category of “forces of
nature.”
ANS: F PTS: 1 REF: 44
5. Two watchdog organizations that investigate allegations of software abuse: SIIA and NSA.
ANS: F PTS: 1 REF: 46
6. A number of technical mechanisms—digital watermarks and embedded code, copyright codes, and
even the intentional placement of bad sectors on software media—have been used to enforce copyright
laws.
ANS: T PTS: 1 REF: 46
7. A worm requires that another program is running before it can begin functioning.
ANS: F PTS: 1 REF: 48
8. A worm can deposit copies of itself onto all Web servers that the infected system can reach, so that
users who subsequently visit those sites become infected.
ANS: T PTS: 1 REF: 48
9. Attacks conducted by scripts are usually unpredictable.
ANS: F PTS: 1 REF: 53
10. Expert hackers are extremely talented individuals who usually devote lots of time and energy to
attempting to break into other people’s information systems.
ANS: T PTS: 1 REF: 53
11. With the removal of copyright protection, software can be easily distributed and installed.
, ANS: T PTS: 1 REF: 56
12. Forces of nature, force majeure, or acts of God can present some of the most dangerous threats,
because they are usually occur with very little warning and are beyond the control of people.
ANS: T PTS: 1 REF: 56
13. Much human error or failure can be prevented with training and ongoing awareness activities.
ANS: T PTS: 1 REF: 59
14. Compared to Web site defacement, vandalism within a network is less malicious in intent and more
public.
ANS: F PTS: 1 REF: 61
15. With electronic information is stolen, the crime is readily apparent.
ANS: F PTS: 1 REF: 63
16. Organizations can use dictionaries to disallow passwords during the reset process and thus guard
against easy-to-guess passwords.
ANS: T PTS: 1 REF: 67
17. DoS attacks cannot be launched against routers.
ANS: F PTS: 1 REF: 68
18. A mail bomb is a form of DoS.
ANS: T PTS: 1 REF: 70
19. A sniffer program shows all the data going by on a network segment including passwords, the data
inside files—such as word-processing documents—and screens full of sensitive data from
applications.
ANS: T PTS: 1 REF: 70
20. A timing attack involves the interception of cryptographic elements to determine keys and encryption
algorithms.
ANS: T PTS: 1 REF: 74
MODIFIED TRUE/FALSE
1. Intellectual property is defined as “the ownership of ideas and control over the tangible or virtual
representation of those ideas.”
ANS: T PTS: 1 REF: 44
Download: http://testbanklive.com/download/principles-of-information-security-
4th-edition-whitman-test-bank/
Chapter 02: The Need for Security
TRUE/FALSE
1. Information security’s primary mission is to ensure that systems and their contents retain their
confidentiality at all costs.
ANS: F PTS: 1 REF: 41
2. Information security safeguards the technology assets in use at the organization.
ANS: T PTS: 1 REF: 41
3. A firewall is a mechanism that keeps certain kinds of network traffic out of a private network.
ANS: T PTS: 1 REF: 42
4. An act of theft performed by a hacker falls into the category of “theft,” but is also often accompanied
by defacement actions to delay discovery and thus may also be placed within the category of “forces of
nature.”
ANS: F PTS: 1 REF: 44
5. Two watchdog organizations that investigate allegations of software abuse: SIIA and NSA.
ANS: F PTS: 1 REF: 46
6. A number of technical mechanisms—digital watermarks and embedded code, copyright codes, and
even the intentional placement of bad sectors on software media—have been used to enforce copyright
laws.
ANS: T PTS: 1 REF: 46
7. A worm requires that another program is running before it can begin functioning.
ANS: F PTS: 1 REF: 48
8. A worm can deposit copies of itself onto all Web servers that the infected system can reach, so that
users who subsequently visit those sites become infected.
ANS: T PTS: 1 REF: 48
9. Attacks conducted by scripts are usually unpredictable.
ANS: F PTS: 1 REF: 53
10. Expert hackers are extremely talented individuals who usually devote lots of time and energy to
attempting to break into other people’s information systems.
ANS: T PTS: 1 REF: 53
11. With the removal of copyright protection, software can be easily distributed and installed.
, ANS: T PTS: 1 REF: 56
12. Forces of nature, force majeure, or acts of God can present some of the most dangerous threats,
because they are usually occur with very little warning and are beyond the control of people.
ANS: T PTS: 1 REF: 56
13. Much human error or failure can be prevented with training and ongoing awareness activities.
ANS: T PTS: 1 REF: 59
14. Compared to Web site defacement, vandalism within a network is less malicious in intent and more
public.
ANS: F PTS: 1 REF: 61
15. With electronic information is stolen, the crime is readily apparent.
ANS: F PTS: 1 REF: 63
16. Organizations can use dictionaries to disallow passwords during the reset process and thus guard
against easy-to-guess passwords.
ANS: T PTS: 1 REF: 67
17. DoS attacks cannot be launched against routers.
ANS: F PTS: 1 REF: 68
18. A mail bomb is a form of DoS.
ANS: T PTS: 1 REF: 70
19. A sniffer program shows all the data going by on a network segment including passwords, the data
inside files—such as word-processing documents—and screens full of sensitive data from
applications.
ANS: T PTS: 1 REF: 70
20. A timing attack involves the interception of cryptographic elements to determine keys and encryption
algorithms.
ANS: T PTS: 1 REF: 74
MODIFIED TRUE/FALSE
1. Intellectual property is defined as “the ownership of ideas and control over the tangible or virtual
representation of those ideas.”
ANS: T PTS: 1 REF: 44
