Page | 1
ITN 260 Questions and Verified Answers
Question: What is the category of threat actors that sell their knowledge of vulnerabilities
to other attackers or governments?
Ans: Brokers
Question: Tatyana is discussing with her supervisor potential reasons why a recent attack
was successful against one of their systems. Which of the following configuration issues
would NOT be covered?
Ans: Vulnerable business processes
Question: Which of the following ensures that only authorized parties can view protected
information?
Ans: confidentiality
Question: Complete this definition of information security: That which protects the
integrity, confidentiality, and availability of information _____.
Ans: through products, people, and procedures on the devices that store, manipulate, and
transmit the information.
Question: Which of the following is an enterprise critical asset?
Ans: information
Question: Which the following is NOT a reason why it is difficult to defend against today's
attackers?
Ans: Greater sophistication of defense tools
Question: Adone is attempting to explain to his friend the relationship between security
and convenience. Which of the following statements would he use?
Ans: Security and convenience are inversely proportional.
Question: Which act requires banks and financial institutions to alert their customers of
their policies in disclosing customer information?
, Page | 2
Ans: Gramm-Leach-Bliley Act (GLBA)
Question: Why do cyberterrorists target power plants, air traffic control centers, and water
systems?
Ans: They can cause significant disruption by destroying only a few targets.
Question: Ian recently earned his security certification and has been offered a promotion to
a position that requires him to analyze and design security solutions as well as identifying
users' needs. Which of these generally recognized security positions has Ian been offered?
Ans: Security administrator
Question: Which tool is most commonly associated with nation state threat actors?
Ans: Advanced Persistent Threat (APT)
Question: What is a race condition?
Ans: When two concurrent threads of execution access a shared resource simultaneously,
resulting in unintended consequences.
Question: What is an objective of state-sponsored attackers?
Ans: To spy on citizens
Question: Signe wants to improve the security of the small business where she serves as a
security manager. She determines that the business needs to do a better job of not revealing
the type of computer, operating system, software, and network connections they use. What
security principle does Signe want to use?
Ans: Obscurity
Question: Alyona has been asked by her supervisor to give a presentation regarding reasons
why security attacks continue to be successful. She has decided to focus on the issue of
widespread vulnerabilities. Which of the following would Alyona NOT include in her
presentation?
Ans: Misconfigurations
Question: Which of the following is NOT a successive layer in which information security
is achieved?
ITN 260 Questions and Verified Answers
Question: What is the category of threat actors that sell their knowledge of vulnerabilities
to other attackers or governments?
Ans: Brokers
Question: Tatyana is discussing with her supervisor potential reasons why a recent attack
was successful against one of their systems. Which of the following configuration issues
would NOT be covered?
Ans: Vulnerable business processes
Question: Which of the following ensures that only authorized parties can view protected
information?
Ans: confidentiality
Question: Complete this definition of information security: That which protects the
integrity, confidentiality, and availability of information _____.
Ans: through products, people, and procedures on the devices that store, manipulate, and
transmit the information.
Question: Which of the following is an enterprise critical asset?
Ans: information
Question: Which the following is NOT a reason why it is difficult to defend against today's
attackers?
Ans: Greater sophistication of defense tools
Question: Adone is attempting to explain to his friend the relationship between security
and convenience. Which of the following statements would he use?
Ans: Security and convenience are inversely proportional.
Question: Which act requires banks and financial institutions to alert their customers of
their policies in disclosing customer information?
, Page | 2
Ans: Gramm-Leach-Bliley Act (GLBA)
Question: Why do cyberterrorists target power plants, air traffic control centers, and water
systems?
Ans: They can cause significant disruption by destroying only a few targets.
Question: Ian recently earned his security certification and has been offered a promotion to
a position that requires him to analyze and design security solutions as well as identifying
users' needs. Which of these generally recognized security positions has Ian been offered?
Ans: Security administrator
Question: Which tool is most commonly associated with nation state threat actors?
Ans: Advanced Persistent Threat (APT)
Question: What is a race condition?
Ans: When two concurrent threads of execution access a shared resource simultaneously,
resulting in unintended consequences.
Question: What is an objective of state-sponsored attackers?
Ans: To spy on citizens
Question: Signe wants to improve the security of the small business where she serves as a
security manager. She determines that the business needs to do a better job of not revealing
the type of computer, operating system, software, and network connections they use. What
security principle does Signe want to use?
Ans: Obscurity
Question: Alyona has been asked by her supervisor to give a presentation regarding reasons
why security attacks continue to be successful. She has decided to focus on the issue of
widespread vulnerabilities. Which of the following would Alyona NOT include in her
presentation?
Ans: Misconfigurations
Question: Which of the following is NOT a successive layer in which information security
is achieved?
