Information Security Final Exam Review

This virus attacks the anti-virus software designed to delete it.

This determines how covered entities must protect the privacy of PHI.

Substitution Ciphers rearrange characters or bits of data.

Trojan horses are the largest class of malware.

Any school or library receiving federal funding from the E-Rate program must comply with CIPA.

This is any program that masquerades as a useful program while hiding its malicious intent

Attempts to prevent calls from being successfully initiated or received by some person or organization.

This binds the identity of an entity to a particular message or piece of information and requires asymmetric key crypto.

Malware that modifies or replaces one or more existing programs to hide the fact that a computer has been compromised.

This layer of the OSI Reference Model performs the end-to-end communication maintenance function.

Uses various mechanisms to avoid detection by antivirus software. It hides itself in memory.

Their mission is to protect investors and maintain the integrity of the securities industry.

The Department of Health and Human Services (HHS) is responsible for rules and compliance of what act?

Programs that execute a malicious function of some kind when they detect certain conditions.

What organization is responsible for FISMA compliance?

Develops protocols and guidelines that unify the Web and ensure its long-term growth.

Programs that execute a malicious function of some kind when they detect certain conditions.

Attempts to prevent calls from being successfully initiated or received by some person or organization.

One of the first ransomware programs was Crypt0L0cker

With this act, institutions that violate it can be subject to both criminal and civil penalties.

An unsolicited background process that installs itself and collects information about the user’s browsing habits.

This layer of the OSI Reference Model performs the process-to-process communication function.

The American National Standards Institute (ANSI) strives to ensure the safety & health of consumers & enviro protection

Uses test methods that aren’t based directly on knowledge of a program’s architecture or design

Robotically controlled networks where attackers infect vulnerable machines with agents that perform various functions.

This triggers nuisances such as pop-up ads and banners when a user visits certain websites.

What is the port number for Hypertext Transport Protocol (HTTP)?

This is a difficult virus to detect because it only modifies and infects files when they have been modified and copied.

Nongovernmental International Organization. Goal is to develop & publish international standards for most industries.

The Committee on National Security Systems (CNSS) oversees FISMA activities.

This layer of the OSI Reference Model is the user interface.

Attacks a computer and limits the user’s ability to access the computer’s data

These devices automatically retransmit packets to all ports. No intelligent filtering is done.

What is the port number for FTP control?

This diverts IT personnel from activities more critical to network security& is a potential carrier of malicious code.

HIPAA contains data protection rules that address security and privacy of personally identifiable health information.

This is a Federal agency within the U.S. Department of Commerce.

What is the port number for the Domain Name System (DNS)?

If a school doesn’t receive federal funds, it still has to comply with FERPA.

A Benchmark is the standard to which your system is compared to determine whether it is securely configured

Helps merchants and financial institutions understand and implement standards that protect their payment systems.

Signaling is this layer's basic function of the OSI Reference Model.

The National Institute of Standards and Technology creates guidance for federal agencies to use for infosec programs.

These devices perform intelligent filtering and know the MAC addresses of the systems connected to each port.

Active content refers to dynamic objects that do nothing when the user opens a webpage.

This virus attempts to attack and infect both the boot sector and executable files at the same time.

International nonprofit organization focusing on developing & distributing standards for electricity and electronics.

Requires certain schools and libraries to filter offensive Internet content so that anyone under 17 can’t access it.

Is based on knowledge of the application’s design and source code.

What is the port number for FTP data transfer?