CMPS4251 Exam Multiple Choice

Which one is not a benefit of security awareness, training, and education?

Which the following is NOT an example of a DoS attack that is popular among hackers?

Unauthorized logins and privilege abuse are what kind of trespasses?

The firewall topology typically used for large businesses and government organizations is:

Among the most difficult to detect and prevent cyber-attacks are?

Which one is not a reason for partitioning complex programs into smaller modules of least privilege?

Which of the following is not a buffer overflow defense?

Which is not a phase a typical virus goes through?

Which one is not a key software security concern associated writing safe program?

Which are the three basic elements of Access Control? (choose one)

When a system resource becomes leaky it means there is

In addition to the three concepts that form the CIA Triad, one of the following is a commonly mentioned concept.

How does an IPS differ from a firewall?

E-mail and Internet use policies are not due to concerns regarding:

Virus, Worm, and Trojan Horses are what kind of trespasses?

The firewall Topologywherea singlerewall is between internal and ext. routers, and has thirdnetworkinterface to a DMZ is

Which type of rewall creates a directory of outbound TCP connections?

Security Awareness is:

Which is not an essential ingredient of a symmetric cipher? (choose one)

Which programming language is least vulnerable to buffer overflows? (choose one)

Which is not true about Defensive Programming? (choose one)

In order for a DoS/DDoS attack to be effective, which one of the following elements needs to be used?

Which is not true about fuzzing?

Which of the following is not a threat consequence?

A ________ occurs any time a program writes more information into the temporary space it has allocated in the memory

Which malware is a program fragment that needs a host program? (choose one)

Personnel Security practices and policies does not include: (choose one)

What can help counter Hackers? (More than One)

Which one of the following is NOT a characteristic of a firewall?

Which is not an element of information systems security?

Which two malware replicate?

Which DoS attack is not an attack on network bandwidth? (choose one)

Which of these does NOT describe Snort?

Which one is not a firewall topology?

Which is not a virus classification by concealment?

Which is not an Access Control category? (choose one)

Which DoS attack is not an attack on network bandwidth?

Which is a public key algorithm? (choose one)

Which is not an Access Control category? (choose one)

Which buffer location is not affected by buffer overflow attacks?

an outsider not authorized to use the computer whopenetrates a system's controls to exploit a legitimate user acc

An Organizational Security Policy does not define

Which concept is not a part of the CIA triad? (choose one)

Which is the most widely used encryption scheme? (choose one)

Which is not an essential ingredient of a symmetric cipher? (choose one)

In a reflection attack, the attacker sends network packets: (choose one)

Which of the following steps is not typically includedindeveloping a planfor threat Prevention, mitigation and recovery?

The diagram below is an example of which type of flood attack? (choose one)

In a reflection attack, the attacker sends network packets:

Which of the following is not defined by the OSI security architecture? (choose one)

Validation of input syntax does not:

The primary defense against many DoS attacks is to: (choose one)

Compile time defenses:

Security training that involves risk management goals, measurement, and leadership is provided for:

Which one is not a threat related to electrical power

Which of the following is a line of defense after a DoS attack?

Which element of IS Security protects computer-based data from software-based and communications-based threats?