CS507 Quiz Dated 30-07-2010
1. Which of the following systems need a comprehensive definition of the known
and expected behavior of systems?
Select correct option:
Firewalls
Network-based IDS
Signature-based IDS
Statistical-based IDS
Ref: Statistical-based: These systems need a comprehensive definition of the known and
expected behavior of systems.
2. Risk impact assessment should focus on consequences affecting _____
Select correct option:
Planning, resources, cost, schedule
Marketing, costing, staffing
Performance, cost, schedule
Business, technology, process
Reference
3. An intruder carry out unauthorized activity by impersonating a legitimate user of
the system incase of________________.
Select correct option:
Eavesdropping
Masquerading
Piggybacking
Spoofing
Ref: Masquerading – involves carrying out unauthorized activity by impersonating a
legitimate user of the system.
4. ________ are installed at the point where network connections enter a site.
Select correct option:
Antivirus
Bridges
Routers
Firewalls
Ref: Firewalls are defined as a device installed at the point where network connections
enter a site; they apply rules to control the type of networking traffic flowing in and out.
5. Incase of __________, an intruder fools a user into thinking they are interacting
with the operating system.
Select correct option:
Spoofing
Piggybacking
Eavesdropping
Trojan horse
Ref: Spoofing – A penetrator fools users into thinking they are interacting with the
operating system. He duplicates logon procedure and captures pass word.
6. Which of the following when together, break down the geographical and time
barriers?
Select correct option:
Mobility and Speed
Reachability and Accessibility
Mobility and reachability
Remote access and Speed
Ref: Mobility implies that the Internet access travels with the customers. M-commerce is
appealing because wireless offers customers information from any location. This enables
employees to contact the office from anywhere they happen to be or customer.
Reachability means that people can be contacted at any time, which most people see as a
convenience of modern life. These two characteristics – mobility and reachability break
the geographical and time barriers.
7. Internet is vulnerable to attacks because of its ___________
Select correct option:
scope
nature
global access
speed
Ref: The nature of the internet makes it vulnerable to attack.
8. What would affect the impact’s scope if a risk does occur?
Select correct option:
Risk cost
Risk timing
Risk scope
Risk resources
9. Under which of the following agreement, two or more organizations agree to
provide backup facilities to each other in case of one suffering from a disaster.
Select correct option:
Mutual
Cooperative
Reciprocal
Joint
Ref: Reciprocal Agreement_ Two or more organization might agree to provide backup
facilities to each other in the event of one suffering a disaster. This backup option is
relatively cheap, but each participate must maintain sufficient capacity to operate
another’s critical systems. Reciprocal agreements are often informal in nature.
10. Risks are rated by ____
Select correct option:
Probability and impact
Probability and cost
Probability and size
Probability and exposure
Reference
11. Which of the following apply rules to control the type of networking traffic
flowing in and out?
Select correct option:
Data analyzers
Firewall
Antivirus
Modem
Ref: Firewalls are defined as a device installed at the point where network connections
enter a site; they apply rules to control the type of networking traffic flowing in and out.
The purpose is to protect the Web server by controlling all traffic between the Internet
and the Web server.
12. Automated tools can be used to
Select correct option:
On site reviews
Information elicitation
Threat identification
Maintain system integrity
13. Which of the following is applicable to environments with stable demand
patterns?
Select correct option:
Built to order supply chain
JIT
Made to store supply chain
Continuous replenishment supply chain
Ref: Continuous Replenishment – focuses on constant replacement of inventory by
working closely with suppliers. Applicable to environments with stable demand patterns.
14. Data packets are routed across a network with the help of_______________.
Select correct option:
FTP protocol
HTTP protocol
TCP protocol
Internet Protocol
Ref: The Internet Protocol is designed solely for the addressing and routing of data
packets across a network.
15. Which of the following involves intercepting communications between the
operating system and the user?
Select correct option:
Eavesdropping
Masquerading
Piggybacking
Spoofing
Ref: Piggybacking – involves intercepting communications between the operating
system and the user and modifying them or substituting new messages.
16. ________ site backup is an appropriate choice for organizations if fast recovery is
critical.
Select correct option:
Hot
Cold
Cool
Warm
Ref: Hot sites
If fast recovery is critical, an organization might need hot-site backup. All hardware and
operations facilities will be available at the hot site. In some cases, software, data, and
supplies might also be stored there. Hot sites are expensive to maintain. They usually are
shared with other organizations that have same hot site needs.
17. Which of the following phase determines the adverse impact resulting from a
successful threat exercise of vulnerability?
Select correct option:
Risk resilience
Monitoring threats
Likelihood determination
Impact analysis
Ref: Impact analysis
The next major step in measuring level of risk is to determine the adverse impact
resulting into a successful,exercise of vulnerability.
18. Threat likelihood is determined to use in____
Select correct option:
Impact analysis
Assessment process
Control recommendation
Vulnerability identification
19. __________ supply chain segment includes all the processes to transform inputs
to outputs.
Select correct option:
Downstream
Internal
Upstream
Middle stream
Ref: Upstream supply chain segment – includes the organization’s first-tier suppliers
(manufacturers and assemblers). The major activities are purchasing and shipping.
• Internal supply chain segment – includes all the processes to transform inputs to
outputs.
• Downstream supply chain segment – includes distributing, delivering to customer and
final consumption of the product.
20. Threat identification can be verified using
Select correct option:
Threat statement
Threat source
Threat action plan
Threat impact analysis
Ref: Information is used as an input to determine and identify what kind of threats the
system is exposed to history of system attack, data from intelligence agencies. The out
put of this phase is a threat statement identifying and defining threats.
21. ______________ refers to the structured transmission of data between
organizations via electronic means.
Select correct option:
DEI
EDI
CDI
IDE
Ref: EDI is a set of standards for structuring information to be electronically exchanged
between and within businesses, organizations, government entities and other groups.
22. ___________ refers to the constant replacement of inventory by working closely
with suppliers.
Select correct option:
Continuous replenishment
Made to store
JIT
Built to order
Ref: Continuous Replenishment – focuses on constant replacement of inventory by
working closely with suppliers. Applicable to environments with stable demand patterns.
23. Firewalls ________ data packets which are sent between different physical
locations within an organization.
Select correct option:
facilitate
Encrypt
restrict
allow
Ref: Firewalls encrypt packets that are sent between different physical locations within
an organization by creating a VPN over the Internet.(Page NO.178)
24. An effective risk management strategy will need to address _____
Select correct option:
Business continuity planning
Risk avoidance
Risk monitoring
All of these
Reference
25. Which of the following is the act of secretly listening to the private conversation
of others without their consent?
Select correct option:
Eavesdropping
Spoofing
Masquerading
Piggybacking
Reference
26. Which of the following is not simply redesigning of certain input forms but also
includes changing of working practices?
Select correct option:
BPR
ERP
BRP
ERD
Ref: BPR was not simply of redesigning certain input forms but involved changed
practices of working. It involved change in human thought and approaches to their
routine, mundane tasks. This raised issues of Change Management.
27. Which of the following is in fact the risk mitigation process?
Select correct option:
Risk determination
Control recommendations
Control measures
Risk pliability
Ref: The control recommendations are the results of the risk assessment
process. The control recommendations is actually the risk mitigation process.
28. Which of the following refers to the online delivery of information for the
purpose of education, training and knowledge management etc?
Select correct option:
E-Banking
E-Commerce
E-Business
E-Learning
Ref: It is a web - enabled system that makes knowledge accessible to those who need it,
when they need it – anytime, anywhere. E-learning is useful for facilitating learning at
schools.
29. Internet protocol ____________ provide evidence on the delivery of messages.
Select correct option:
mostly
does not
does
up to some extent
Ref: The Internet Protocol is designed solely for the addressing and routing of data
packets across a network. It does not guarantee or provide evidence on the delivery of
messages. There is no verification of an address. The sender will not know if the message
reaches its destination at the time it is required.
30. An IT enabled organization that involves the radical re-conceptualization of the
business needs ___ for possible threat invasion
Select correct option:
Impact analysis plan
Business continuity plan
Data backup
Control recommendation
31. Which of the following is the main reason of B2C thriving in technologically
advanced societies?
Select correct option:
Vast scope and acceptability
Reachability
Break down of physical barriers
Low costs
Ref: The real reason that B2C is flourishing in technologically advanced societies is that
it has broken down ‘physical’ barriers to doing business.
32. Which of the following IDS will not be able to detect all types of intrusions due to
limitations of detection rules?
Select correct option:
Network-based
Node-based
Signature-based
Statistical-based
Ref: Signature-based IDSs will not be able to detect all types of intrusions due to the
limitations of detection rules. On the other hand, statistical-based systems may report
many events outside of the defined normal activity but which are normal activities on the
network.
33. Effective Business continuity plans can not be executed without proper
Select correct option:
Control recommendation
Control implementation
Control management
Control monitoring
34. What could be the first step in any corporate risk strategy?
Select correct option:
Risk identification
Control implementation
Characterization
Documentation
35. Which of the following supply chain segment includes the organization’s first tier
suppliers?
Select correct option:
Internal
Downstream
Middle stream
Upstream
Ref: Upstream supply chain segment – includes the organization’s first-tier suppliers
(manufacturers and assemblers). The major activities are purchasing and shipping.
36. People can be contacted at any time, refers to:
Select correct option:
Mobility
Instant access
Remote access
Reachability
Ref: Reachability means that people can be contacted at any time, which most people see
as a convenience of modern life.
37. Which of the following network attacks involves probing for network
information?
Select correct option:
Passive attacks
Active attacks
Masquerading
Spoofing
Explanation: By probing for network information, the intruder obtains network
information as that can be used to target a particular system or set of systems during an
actual attack.
38. Which of the following uses internet and online technologies to create operating
efficiencies and therefore increase value to the customer?
Select correct option:
Internet
E-business
IDS
CRM
Ref: E-business means using the internet and online technologies to create operating
efficiencies, and therefore increase value to the customer. All e-commerce is part of e-
business. Not all e-business is e-commerce.
39. Which of the following works in conjunction with routers and firewalls by
monitoring network usage anomalies?
Select correct option:
SDLC
IDS
ISD
DCS
Ref: An IDS works in conjunction with routers and firewalls by monitoring
network usage anomalies. It protects a company’s information systems resources from
external as well as internal misuse.
40. _________ controls the most vulnerable point between a corporate network and
the internet.
Select correct option:
Firewall
Sensors
Data analyzers
Spoofing
Ref: Firewalls are hardware and software combinations that are built using routers,
servers and variety of software. They should control the most vulnerable point between a
corporate network and the Internet.
41. _________ refers to the ability of a system to handle growing amounts of work in
a graceful manner.
Select correct option:
Scalability
Consistency
Security
Clustering
Ref from wikipedia: scalability is a desirable property of a system, a network, or a
process, which indicates its ability to either handle growing amounts of work in a
graceful manner or to be readily enlarged.
42. Impact needs to be measured to
Select correct option:
Identify threat
Record thread history
Worse scenarios of impact
Define the data criticality
Ref: Impact needs to be measured by defining certain levels. E.g. high medium low as
qualitative categories or quantifying the impact by using probability distribution.
• Mission Impact Analysis
• Assess criticality assessment
• Data criticality
• Data sensitivity
43. __________ is a program which undertakes unauthorized activities but looks
legitimate. Select correct option:
Trojan horse (Not Sure)
Virus
Worms
Spyware
