CIS4361 Chapter 1 Exam Study
Guide A+ Graded
A breach of possession always results in a breach of confidentiality. - ANSWER False
During the early years, information security was a straightforward process composed
predominantly of ____________________ security and simple document classification
schemes. - ANSWER Physical
Which of the following is a valid type of data ownership? - ANSWER Data Users, Data
Owners and Data Custodians
____ is the predecessor to the Internet. - ANSWER Arpanet
A(n) ____ attack is a hacker using a personal computer to break into a system. -
ANSWER Direct
In an organization, the value of ____________________ of information is especially high
when it involves personal information about employees, customers, or patients. -
ANSWER Confidentiality
The ____ model consists of six general phases. - ANSWER Waterfall
Key end users should be assigned to a developmental team, known as the united
application development team. - ANSWER False
A(n) _________________________ is a group of individuals who are united by similar
interests or values within an organization and who share a common goal of helping the
organization to meet its objectives. - ANSWER Community of Interest
The primary threats to security during the early years of computers were physical theft
of equipment, espionage against the products of the systems, and sabotage. - ANSWER
True
A data custodian works directly with data owners and is responsible for the storage,
maintenance, and protection of the information. - ANSWER True
The physical design is the blueprint for the desired solution. - ANSWER False
The ____________________ of information is the quality or state of ownership or control of
some object or item. - ANSWER Possession
The Internet brought connectivity to virtually all computers that could reach a phone line
or an Internet-connected local area ____________________. - ANSWER Network
, The history of information security begins with the history of ____________________
security. - ANSWER Computer
MULTICS stands for Multiple Information and Computing Service. - ANSWER False
During the ____________________ War, many mainframes were brought online to
accomplish more complex and sophisticated tasks so it became necessary to enable the
mainframes to communicate via a less cumbersome process than mailing magnetic
tapes between computer centers. - ANSWER Cold
Recently, many states have implemented legislation making certain computer-related
activities illegal. - ANSWER True
Information security can begin as a grassroots effort in which systems administrators
attempt to improve the security of their systems, which is often referred to as a
bottom-up approach. - ANSWER True
A famous study entitled "Protection Analysis: Final Report" was published in ____. -
ANSWER 1978
Risk evaluation is the process of identifying, assessing, and evaluating the levels of risk
facing the organization, specifically the threats to the organization's security and to the
information stored and processed by the organization. - ANSWER False
The implementation phase is the longest and most expensive phase of the systems
development life cycle (SDLC). - ANSWER False
Of the two approaches to information security implementation, the top-down approach
has a higher probability of success. - ANSWER True
____ presents a comprehensive information security model and has become a widely
accepted evaluation standard for the security of information systems. - ANSWER
NSTISSI No. 4011
An e-mail virus involves sending an e-mail message with a modified field. - ANSWER
False
Organizations are moving toward more ____-focused development approaches, seeking
to improve not only the functionality of the systems they have in place, but consumer
confidence in their product. - ANSWER Security
____ of information is the quality or state of being genuine or original. - ANSWER
Authenticity
In the ____________________ approach, the project is initiated by upper-level managers
who issue policy, procedures and processes, dictate the goals and expected outcomes,
and determine accountability for each required action. - ANSWER Top-Down
Guide A+ Graded
A breach of possession always results in a breach of confidentiality. - ANSWER False
During the early years, information security was a straightforward process composed
predominantly of ____________________ security and simple document classification
schemes. - ANSWER Physical
Which of the following is a valid type of data ownership? - ANSWER Data Users, Data
Owners and Data Custodians
____ is the predecessor to the Internet. - ANSWER Arpanet
A(n) ____ attack is a hacker using a personal computer to break into a system. -
ANSWER Direct
In an organization, the value of ____________________ of information is especially high
when it involves personal information about employees, customers, or patients. -
ANSWER Confidentiality
The ____ model consists of six general phases. - ANSWER Waterfall
Key end users should be assigned to a developmental team, known as the united
application development team. - ANSWER False
A(n) _________________________ is a group of individuals who are united by similar
interests or values within an organization and who share a common goal of helping the
organization to meet its objectives. - ANSWER Community of Interest
The primary threats to security during the early years of computers were physical theft
of equipment, espionage against the products of the systems, and sabotage. - ANSWER
True
A data custodian works directly with data owners and is responsible for the storage,
maintenance, and protection of the information. - ANSWER True
The physical design is the blueprint for the desired solution. - ANSWER False
The ____________________ of information is the quality or state of ownership or control of
some object or item. - ANSWER Possession
The Internet brought connectivity to virtually all computers that could reach a phone line
or an Internet-connected local area ____________________. - ANSWER Network
, The history of information security begins with the history of ____________________
security. - ANSWER Computer
MULTICS stands for Multiple Information and Computing Service. - ANSWER False
During the ____________________ War, many mainframes were brought online to
accomplish more complex and sophisticated tasks so it became necessary to enable the
mainframes to communicate via a less cumbersome process than mailing magnetic
tapes between computer centers. - ANSWER Cold
Recently, many states have implemented legislation making certain computer-related
activities illegal. - ANSWER True
Information security can begin as a grassroots effort in which systems administrators
attempt to improve the security of their systems, which is often referred to as a
bottom-up approach. - ANSWER True
A famous study entitled "Protection Analysis: Final Report" was published in ____. -
ANSWER 1978
Risk evaluation is the process of identifying, assessing, and evaluating the levels of risk
facing the organization, specifically the threats to the organization's security and to the
information stored and processed by the organization. - ANSWER False
The implementation phase is the longest and most expensive phase of the systems
development life cycle (SDLC). - ANSWER False
Of the two approaches to information security implementation, the top-down approach
has a higher probability of success. - ANSWER True
____ presents a comprehensive information security model and has become a widely
accepted evaluation standard for the security of information systems. - ANSWER
NSTISSI No. 4011
An e-mail virus involves sending an e-mail message with a modified field. - ANSWER
False
Organizations are moving toward more ____-focused development approaches, seeking
to improve not only the functionality of the systems they have in place, but consumer
confidence in their product. - ANSWER Security
____ of information is the quality or state of being genuine or original. - ANSWER
Authenticity
In the ____________________ approach, the project is initiated by upper-level managers
who issue policy, procedures and processes, dictate the goals and expected outcomes,
and determine accountability for each required action. - ANSWER Top-Down
