stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Ppls of Cybersecurity Final Exam Review Flashcards | StudBud
Explore
/
Ppls of Cybersecurity Final Exam Review
Ppls of Cybersecurity Final Exam Review
38 terms
·
StudBud Administration
·
50 plays
Imported from external platform
Flashcards
38 cards
F
Practice quiz
P
Host live
L
Questions
38
Answers
1
__________ is an integrated system of software, encryption, protocols, & third-party services for secure communication.
DES
MAC
AES
PKI
2
Class __________ fires are safely extinguished with non-conducting agents only.
A
C
B
D
3
Info Security function is commonly placed in the _________ dept in large organizations.
IT
Legal
Operations
Finance
4
If employees have been observed keeping passwords on notes stuck to their monitors, organizations cannot warn them.
True
False
5
The model commonly used by large org. places the information security department within the __________ department.
financial
information technology
production
management
6
A completed doc that can serve as the starting point for a later task or become an element in the finished project...
resource
RFP
milestone
deliverable
7
__________ is the effort (in hours) needed to decode an encrypted message when the key or algorithm are both unknown.
code
key
algorithm
work factor
8
__________ involves computing sites outside the organization's primary facility and includes all forms of telecommuting.
telecommuting
hot site working
remote working
remote site computing
9
Tasks or action steps that come after the task at hand are called __________.
parents
children
successors
predecessors
10
The CISA credential is touted by ISACA as the certification that is appropriate for all but which type of professionals?
IT
Networking
Accounting
Security
11
A device that assures the delivery of electric power without interruption is a(n) __________.
HVAC
GPS
GFCI
UPS
12
Some cases of __________ are simple, such as requiring employees to begin using a new password on an announced date.
wrap-up
pilots
phased implementation
direct changeover
13
The CompTIA Securityþ certification tests for expert-level security knowledge.
False
True
14
The details covered in each of the domains makes the __________ one of the most difficult-to-attain certifications.
NSA
CISO
ISEP
CISSP
15
Temporary employees’ access to information should be limited to...
it should not be limited
everthing assigned to them
what is necessary for them to perform their duties
16
Many information security professionals come from law enforcement.
True
False
17
Work to be accomplished is shown in the WBS as .....
activities and deliverables
effort
work effort
strategy
18
Fire __________ systems are devices installed to detect and respond to a fire, potential fire, or combustion danger.
detection
suppression
protection
prevention
19
Continuous monitoring of a security assessment program, is an essential component of any security program.
False
True
20
A method of encryption that requires the same secret key to encipher and decipher message is __________ encryption.
asymmetric
public
private
symmetric
21
__________, is a set of security tests and evaluations that simulate attacks by a malicious external source.
attack testing
pen simulation
attack simulation
pen testing
22
__________ is a cornerstone in the protection of information assets and in the prevention of financial loss.
Collusion
Business separation
Fire suppression
Separation of duties
23
__________ is the requirement that every employee be able to perform the work of another employee.
Duty exchanged
Two-man control
Task rotation
Collusion
24
CISO is usually not executive-level position, and frequently reports to the chief information officer.
True
False
25
__________ is the entire range of values that can possibly be used to construct an individual key.
Algorithm
Key space
Cryptogram
Code
26
A __________ is the recorded condition of a particular revision of a software or hardware configuration item.
configuration
state
version
baseline
27
To evaluate the performance of a security system, administrators must establish system performance __________.
maxima
baselines
means
profiles
28
The FCRA prohibits employers from obtaining credit reports unless the candidate is informed in writing.
True
False
29
__________ locks allow for key changes without a locksmith and also alow owner to change access method to upgrade sec.
programmable
biometric
manual
electronic
30
Risk management, is a one time activity, performed at the beginning of a project.
True
False
31
A __________ is a key-dependent, one-way hash function that allows only specific recipients to access the message digest
digest
fingerprint
MAC/HMAC
signature
32
A(n) __________ item is a hardware or software item that is to be modified and revised throughout its life cycle.
configuration
revision
update
change
33
SDLC refers to...
student dev life cycle
software dev life cycle
systems dev life cycle
scrum dev life cycle
34
Security personnel need to always keep technology before business in the field of cybersecurity.
False
True
35
__________ are a component of the "security triple."
Assets
All of the above
Vulnerabilities
Threats
36
Electronic monitoring includes __________ systems.
blocked video
local video
open-circuit television
closed-circuit television
37
Cybersecurity personnel do not generally need to be good at working with people and end users.
True
False
38
Interconnecting information systems can help participating organizations to avoid risk.
True
False