CISS 300 Final Exam 2025 Questions
and Answers
In the well-known ____ attack, an attacker monitors (or sniffs) packets from the network, modifies
them, and inserts them back into the network. - ANSWER✔️✔️-b. man-in-the-middle
____ is an integrated system of software, encryption methodologies, and legal agreements that can
be used to support the entire information infrastructure of an organization. - ANSWER✔️✔️-b.
PKI
Part of the logical design phase of the SecSDLC is planning for partial or catastrophic loss. ____
dictates what steps are taken when an attack occurs. - ANSWER✔️✔️-d. Incident response
One form of online vandalism is ____ operations, which interfere with or disrupt systems to protest
the operations, policies, or actions of an organization or government agency. - ANSWER✔️✔️-b.
hacktivist
The ____ data file contains the hashed representation of the user's password. - ANSWER✔️✔️-b.
SAM
The ____ hijacking attack uses IP spoofing to enable an attacker to impersonate another entity on
the network. - ANSWER✔️✔️-d. TCP
FOR STUDY PURPOSES ONLY COPYRIGHT © 2025 ALL RIGHTS RESERVED 1
, What is the subject of the Computer Security Act? - ANSWER✔️✔️-a. Federal Agency
Information Security
What is the subject of the Sarbanes-Oxley Act? - ANSWER✔️✔️-b. Financial Reporting
____ feasibility analysis examines user acceptance and support, management acceptance and
support, and the overall requirements of the organization's stakeholders. - ANSWER✔️✔️-a.
Operational
Management of classified data includes its storage and ____. - ANSWER✔️✔️-a. distribution
b. portability
c. All of the above
d. destruction
answer: All of the above
____ plans usually include all preparations for the recovery process, strategies to limit losses during
the disaster, and detailed steps to follow when the smoke clears, the dust settles, or the floodwaters
recede. - ANSWER✔️✔️-b. DR
____-based IDPSs look at patterns of network traffic and attempt to detect unusual activity based
on previous baselines. - ANSWER✔️✔️-b. Network
Effective management includes planning and ____. - ANSWER✔️✔️-a. organizing
b. controlling
FOR STUDY PURPOSES ONLY COPYRIGHT © 2025 ALL RIGHTS RESERVED 2
and Answers
In the well-known ____ attack, an attacker monitors (or sniffs) packets from the network, modifies
them, and inserts them back into the network. - ANSWER✔️✔️-b. man-in-the-middle
____ is an integrated system of software, encryption methodologies, and legal agreements that can
be used to support the entire information infrastructure of an organization. - ANSWER✔️✔️-b.
PKI
Part of the logical design phase of the SecSDLC is planning for partial or catastrophic loss. ____
dictates what steps are taken when an attack occurs. - ANSWER✔️✔️-d. Incident response
One form of online vandalism is ____ operations, which interfere with or disrupt systems to protest
the operations, policies, or actions of an organization or government agency. - ANSWER✔️✔️-b.
hacktivist
The ____ data file contains the hashed representation of the user's password. - ANSWER✔️✔️-b.
SAM
The ____ hijacking attack uses IP spoofing to enable an attacker to impersonate another entity on
the network. - ANSWER✔️✔️-d. TCP
FOR STUDY PURPOSES ONLY COPYRIGHT © 2025 ALL RIGHTS RESERVED 1
, What is the subject of the Computer Security Act? - ANSWER✔️✔️-a. Federal Agency
Information Security
What is the subject of the Sarbanes-Oxley Act? - ANSWER✔️✔️-b. Financial Reporting
____ feasibility analysis examines user acceptance and support, management acceptance and
support, and the overall requirements of the organization's stakeholders. - ANSWER✔️✔️-a.
Operational
Management of classified data includes its storage and ____. - ANSWER✔️✔️-a. distribution
b. portability
c. All of the above
d. destruction
answer: All of the above
____ plans usually include all preparations for the recovery process, strategies to limit losses during
the disaster, and detailed steps to follow when the smoke clears, the dust settles, or the floodwaters
recede. - ANSWER✔️✔️-b. DR
____-based IDPSs look at patterns of network traffic and attempt to detect unusual activity based
on previous baselines. - ANSWER✔️✔️-b. Network
Effective management includes planning and ____. - ANSWER✔️✔️-a. organizing
b. controlling
FOR STUDY PURPOSES ONLY COPYRIGHT © 2025 ALL RIGHTS RESERVED 2
