Title: EXAM THREE
Course: CET 2660 Network Security Fundamentals > Section: Module Six - Business Continuity

Q: A ____ is a snapshot of the current state of the computer that contains all current settings and data.
- system standard
- system view
- system image
- system baseline
A: system image

Q: A ____ cipher rearranges letters without changing them.
- substitution
- block
- loop
- transposition
A: transposition

Q: A ____ is a component or entity in a system which, if it no longer functions, will disable the entire system.
- recovery site
- recovery point
- single point of failure
- cascade point of failure
A: single point of failure

Q: A ____ is a document that outlines specific requirements or rules that must be met.
- procedure
- standard
- guideline
- policy
A: policy

Q: A ____ is a secret combination of letters, numbers, and/or characters that only the user should know.
- token
- password
- biometric detail
- challenge
A: password

Q: ____ are values that are attributed to a system of beliefs that help the individual distinguish right from wrong.
- Morals
- Ethics
- Standards
- Morays
A: Morals

Q: A ____ trust refers to a situation in which two individuals trust each other because each trusts a third party.
- web of
- mutual
- third-party
- distributed
A: third-party

Q: A ____ typically begins by identifying threats through a risk assessment.
- BRA
- BAA
- BPA
- BIA
A: BIA

Q: A(n) ____ approach is the art of helping an adult learn.
- andragogical
- pedagogical
- deontological
- metagogical
A: andragogical

Q: A(n) ____ backup is an evidence-grade backup because its accuracy meets evidence standards.
- baseline
- mirror image
- logical image
- thin image
A: mirror image

Q: A(n) ____ can also capture transmissions that contain passwords.
- application analyzer
- system analyzer
- function analyzer
- protocol analyzer
A: protocol analyzer

Q: A(n) ____ is a device that maintains power to equipment in the event of an interruption in the primary electrical power source.
- uninterruptible power supply
- redundant power supply
- uninterruptible system supply
- replica power supply
A: uninterruptible power supply

Q: A(n) ____ policy is designed to produce a standardized framework for classifying information assets.
- VPN
- acceptable use
- privacy
- classification of information
A: classification of information

Q: A(n) ____ serves as the trusted third-party agency that is responsible for issuing the digital certificates.
- RA
- DA
- CA
- PA
A: CA

Q: Although brute force and dictionary attacks were once the primary tools used by attackers to crack an encrypted password, today attackers usually prefer ____.
- rainbow tables
- online cracking
- offline cracking
- cascade tables
A: rainbow tables

Q: At the ____ stage of the certificate life cycle, the certificate can no longer be used.
- creation
- suspension
- revocation
- expiration
A: expiration

Q: At the ____ stage of the certificate life cycle, the certificate is no longer valid.
- creation
- suspension
- revocation
- expiration
A: revocation

Q: In a(n) ____ cluster, a standby server exists only to take over for another server in the event of its failure.
- symmetric network
- symmetric server
- asymmetric network
- asymmetric server
A: asymmetric server

Q: It is predicted that ____ could become a key element in authentication in the future.
- cognitive biometrics
- standard biometrics
- reactive biometrics
- affective biometrics
A: cognitive biometrics

Q: Key ____ refers to a process in which keys are managed by a third party, such as a trusted CA.
- escrow
- destruction
- renewal
- management
A: escrow

Q: Key ____ removes all private and public keys along with the user’s identification information in the CA.
- renewal
- escrow
- generation
- destruction
A: destruction

Q: One of the most famous ancient cryptographers was ____.
- Albert Einstein
- Isaac Newton
- Julius Caesar
- Caesar Augustus
A: Julius Caesar

Q: Symmetric encryption is also called ____ cryptography.
- private key
- public key
- symmetric key
- shared key
A: private key

Q: The Web sites that facilitate linking individuals with common interests like hobbies, religion, politics, or school contacts are called ____ sites.
- social networking
- social engineering
- social management
- social control
A: social networking

Q: The ____ documents that the evidence was under strict control at all times and no unauthorized person was given the opportunity to corrupt the evidence.
- chain of value
- chain of use
- chain of property
- chain of custody
A: chain of custody

Q: The ____ is essentially a chip on the motherboard of the computer that provides cryptographic services.
- TPM
- SCM
- reference monitor
- ODS
A: TPM

Q: The ____ response team serves as first responders whenever digital evidence needs to be preserved.
- incident
- computer forensics
- risk
- emergency
A: computer forensics

Q: The algorithm ____ is a block cipher that operates on 64-bit blocks and can have a key length from 32 to 448 bits.
- RSA
- AES
- Blowfish
- 3DES
A: Blowfish

Q: The most basic type of cryptographic algorithm is a ____ algorithm.
- hash
- key
- digest
- block
A: hash

Q: The set of letters, symbols, and characters that make up the password are known as a ____ set.
- result
- problem
- character
- search
A: character

Q: The simplest type of stream cipher is a ____ cipher.
- shift
- substitution
- lock
- loop
A: substitution

Q: The____  is a symmetric cipher that was approved by the NIST in late 2000 as a replacement for DES.
- AES
- 3DES
- RSA
- Twofish
A: AES

Q: ____ accepts spoken words for input as if they had been typed on the keyboard.
- Text recognition
- Speech differentiation
- Linguistic recognition
- Speech recognition
A: Speech recognition

Q: ____ allows clients and the server to negotiate independently encryption, authentication, and digital signature methods, in any combination, in both directions.
- SFTP
- SHTTP
- HTTPS
- Telnets
A: SHTTP

Q: ____ can use fingerprints or other unique characteristics of a person’s face, hands, or eyes (irises and retinas) to authenticate a user.
- Cognitive biometrics
- Reactive biometrics
- Standard biometrics
- Affective biometrics
A: Standard biometrics

Q: ____ attack is where every possible combination of letters, numbers, and characters is used to create encrypted passwords.
- Space division
- Brute force
- Known ciphertext
- Known plaintext
A: Brute force

Q: ____ attempts to use the unusual and unique behavior of microscopic objects to enable users to securely develop and share keys as well as to detect eavesdropping.
- Reactive cryptography
- Symmetric cryptography
- Analog cryptography
- Quantum cryptography
A: Quantum cryptography

Q: ____ can be defined as the “framework” and functions required to enable incident response and incident handling within an organization.
- Incident reporting
- Incident management
- Incident handling
- Incident planning
A: Incident management

Q: ____ can be defined as the study of what a group of people understand to be good and right behavior and how people make those judgments.
- Values
- Morals
- Ethics
- Standards
A: Ethics

Q: ____ is a protocol developed by Netscape for securely transmitting documents over the Internet.
- SSL
- TLS
- PEAP
- EAP
A: SSL

Q: ____ data is the most difficult type of data to capture.
- Volatile
- Static
- Non-volatile
- Persistent
A: Volatile

Q: ____ encryption uses two keys instead of only one and these keys are mathematically related.
- Symmetric
- Asymmetric
- Shared
- Public key
A: Asymmetric

Q: ____ ensures that the information is correct and no unauthorized person or malicious software has altered that data.
- Confidentiality
- Availability
- Encryption
- Integrity
A: Integrity

Q: ____ involves public-key cryptography standards, trust models, and key management.
- Public key infrastructure
- Network key infrastructure
- Private key infrastructure
- Shared key infrastructure
A: Public key infrastructure

Q: ____ is a form of eavesdropping in which special equipment is used to pick up telecommunication signals or data within a computer device by monitoring the electromagnetic fields.
- Newton phreaking
- Van Eck phreaking
- Van Zek hacking
- EMF phreaking
A: Van Eck phreaking

Q: ____ is designed to replace DES.
- AES
- Twofish
- 3DES
- RSA
A: 3DES

Q: ____ is designed to ensure that an organization can continue to function in the event of a natural or man-made disaster.
- Business continuity planning and testing
- Disaster planning
- Business management planning and testing
- Enterprise disaster planning
A: Business continuity planning and testing

Q: ____ plans typically include procedures to address redundancy and fault tolerance as well as data backups.
- Enterprise recovery
- Disaster recovery
- Business recovery
- Emergency recovery
A: Disaster recovery

Q: ____ learners learn through a lab environment or other hands-on approaches.
- Visual
- Auditory
- Kinesthetic
- Spatial
A: Kinesthetic

Q: ____ learners learn through taking notes, being at the front of the class, and watching presentations.
- Kinesthetic
- Auditory
- Spatial
- Visual
A: Visual