CS200-Chapter10-Homework

Transcription

1 Class: Date: CS200-Chapter10-Homework Multiple Choice Identify the choice that best completes the statement or answers the question. 1. A(n) is any event or action that could cause a loss of or damage to computer hardware, software, data, information, or processing capability. a. security c. terrorism b. liability d. network 2. Any illegal act involving a computer generally is referred to as a. a. cyberthreat c. malware b. computer crime d. hoax 3. The term refers to online or Internet-based illegal acts. a. malware c. cybercrime b. cyberthreat d. cyberextortion 4. A(n) has the same intent as a cracker but does not have the technical skills and knowledge. a. hacker c. cyberextortionist b. script kiddie d. cyberterrorist 5. A(n) is someone who uses as a vehicle for extortion. a. hacker c. cyberextortionist b. script kiddie d. cyberterrorist 6. A(n) is someone who uses the Internet or network to destroy or damage computers for political reasons. a. hacker c. cyberextortionist b. script kiddie d. cyberterrorist 7. A(n) is the destructive event or prank malware is intended to deliver. a. payload c. spoof b. hoax d. rebuke 8. All of the following are common ways computers become infected with malware, except. a. opening infected files b. running an infected program c. booting the computer with infected removable media inserted in a drive or plugged in a port d. installing a software package from a CD 9. Currently, more than known viruses, worms, and Trojan horse programs exist. a. 11,000 c. 151,000 b. 22,000 d. 180, In applications that allow users to write, the security level should be set so the application warns users that a document they are attempting to open contains a macro. a. Javascript c. antivirus definitions b. macros d. antispyware definitions 1

2 11. protects a computer against viruses by identifying and removing any computer viruses found in memory, on storage media, or on incoming files. a. An anti-spam program c. An antivirus program b. encryption d. filtering 12. If an antivirus program cannot remove an infection, it often. a. quarantines the infected file c. disables the drive the file is on b. reports the user computer d. removes the user from its registry 13. A virus hoax often is in the form of a(n). a. photo attachment c. chain letter b. newsletter d. advertisement 14. is a technique intruders use to make their network or Internet transmission appear legitimate to a victim computer or network. a. Rebuking c. Transmitting b. Spoofing d. Victimizing 15. All networked and online computer users should implement a like the one shown in the accompanying figure. a. firewall solution c. DoS attack b. back door d. all of the above 16. As shown in the accompanying figure, a is hardware and/or software that protects a network s resources from intrusion by users on another network such as the Internet. a. quarantine c. firewall b. biometric device d. router 2

3 17. detection software automatically analyzes all network traffic, assesses system vulnerabilities, identifies any unauthorized access (intrusions), and notifies network administrators of suspicious behavior patterns or system breaches, including violations of firewalls like the ones in the accompanying figure. a. Violation c. Intrusion b. Password d. Traffic 18. is a server outside a company s network that controls which communications pass into the company s network. a. A firewall c. A proxy server b. Intrusion detection software d. An audit trail 19. Which of the following is not true of intrusion detection software? a. It is complex. c. It is inexpensive. b. It is difficult to interpret. d. It is not designed for home use. 20. Many systems implement access controls using a two-phase process called. a. access or deny c. access and approval b. identification and authentication d. identification and approval 21. If a password used on a site like the one shown in the accompanying figure is 4 characters long, the average time it would take a computer to discover the password is. a. 1 second c. 7 minutes b. 30 seconds d. 2 hours 22. As shown in the accompanying figure, many Web sites require a user to enter a user, which is a unique combination of characters, such as letters of the alphabet or numbers, that identifies one specific user. a. term c. name b. link d. key 3

4 23. As shown in the accompanying figure, many Web sites require a user to enter a(n), which is a private combination of characters associated with a user name that allows access to certain computer resources. a. PIN c. secure key b. password d. passterm 24. Which of the following is an example of a possessed object? a. user name and password c. badges and keys b. face recognition systems d. fingerprint scanner 25. Which of the following is not an example of a biometric device? a. smart card c. hand geometry system b. face recognition system d. fingerprint scanner 4

5 26. A(n) device like the one in the accompanying figure authenticates a person s identity by translating a personal characteristic, such as a fingerprint, into a digital code that then is compared with a digital code stored in the computer verifying a physical or behavioral characteristic. a. authentication c. identification b. personal d. biometric 27. theft is the act of stealing computer equipment. a. Hardware c. SMS b. Cyber d. Software 28. Software occurs when someone steals software media, intentionally erases programs, or illegally copies a program. a. theft c. piracy b. extortion d. terrorism 5

6 29. To protect themselves from software piracy, software manufacturers issue a(n) agreement like the one shown in the accompanying figure, which gives users the right to use the software. a. intellectual property c. access b. license d. copyright 30. occurs when someone steals personal or confidential information. a. Plagiarism c. Information theft b. Decryption d. Cyberpiracy 31. Which method of encryption inserts characters between existing characters? a. transposition c. expansion b. substitution d. compaction 6

7 32. can lead to system failure. a. Aging hardware b. Natural disasters, such as fires, floods, or hurricanes c. Errors in computer programs d. All of the above 33. A(n) is the prolonged malfunction of a computer. a. hardware vandalism c. unauthorized access b. system failure d. software theft 34. A(n) protector uses special electrical components to provide a stable current flow to the computer and other electronic equipment. a. Joule c. surge b. spike d. hash 35. A(n) is an injury or disorder of the muscles, nerves, tendons, ligaments, and joints. a. TSR c. RIT b. RSI d. TRI 36. Computer are the moral guidelines that govern the use of computers and information systems. a. logistics c. ethics b. mechanics d. rights 37. Information refers to the right of individuals and companies to deny or restrict the collection and use of information about them. a. rights c. restrictions b. acceptable use d. privacy 7

8 38. As shown in the accompanying figure, an unsolicited message or newsgroup posting sent to multiple recipients or newsgroups at once is called. a. spyware c. cookies b. spam d. adware 39. Social engineers can obtain information by. a. snooping around computers looking for openly displayed confidential information b. watching or filming people dialing telephone numbers or using ATMs c. sifting through company dumpsters d. all of the above 40. As related to the use of computers, is defined as gaining unauthorized access or obtaining confidential information by taking advantage of the trusting human nature of some victims and the naivety of others. a. DoS c. DRM b. social engineering d. scamming True/False Indicate whether the statement is true or false. 41. Computer crime refers to online or Internet-based illegal acts. 42. The term, cracker, originally was a complimentary word for a computer enthusiast. 8

9 43. Once a Trojan horse is installed, its author can execute programs, change settings, monitor activity, and access files on the remote computer. 44. Most antivirus programs do not provide updated virus signature files for users. 45. Shrink-wrapped software from major developers does not need to be scanned for infections. 46. A DoS attack is a technique intruders use to make their network or Internet transmission appear legitimate to a victim computer or network. 47. The term, unauthorized access, refers to the use of a computer or its data for unapproved or possibly illegal activities. 48. Some operating systems, such as Windows, include personal firewalls like the ones shown in the accompanying figure. 49. Companies should review successful access attempts for irregularities. 9

10 50. Most systems require that users select their own passwords, to be entered in forms such as the one shown in the accompanying figure. 51. Hackers use computer automated tools to assist them with guessing passwords like the one shown in the accompanying figure. 52. If a shorter password were in use in the accompanying figure, it would provide greater security than a longer one. 53. Physical access controls, such as locked doors and windows, usually are adequatre to protect computer equipment from hardware theft. 54. For visually impaired users, the CAPTCHA text can be read aloud. 10

11 55. With a license agreement like the one shown in the accompanying figure, the user becomes the owner of the software. 56. Software users with a EULA like the one in the accompanying figure may make as many backup copies of the software as they want. 57. An encryption key often uses a combination of encryption methods. 58. Electrical power variation is one of the least common causes of system failure. 59. If computer equipment is networked, a single power disturbance can damage multiple systems. 60. With a selective backup, users decide which folders and files to include in a backup. 61. Wireless access poses additional security risks. 11

12 62. To access a wireless network, perpetrators must be in the range of the wireless network. 63. Copyright law gives the public fair use to copyrighted material. 64. If you disable cookie use, you will not be able to use many of the e-commerce Web sites. 65. Spam is a program placed on a computer without the user s knowledge that secretly collects information about the user. 12