IT Security Fundamentals
Test your knowledge of IT security concepts including malicious code, security attacks, protection mechanisms, and security policies
Questions
Which of the following categories of active attack takes place when one entity pretends to be a different entity?
- Message confidentiality
- Vulnerability
- Masquerade
- Replay
- Interception
Which of the following types of malicious code is a class of malicious code that goes off when a specified condition occurs?
- Logic bomb
- Virus
- Worm
- Threat
- Non repudiation
Which of the following security mechanisms is a collection of security protocols and format allowing consumers secure usage in the present credit card payment infrastructure over an exposed network, like the internet?
- Stateful inspection firewall
- Secure electronic transaction
- Transport layer security
- Message authentication code
- Sender authentication
Which of the following security techniques is an application program that can complement the work of a conventional firewall by screening the kind of data, a single computer will accept?
- Transport layer security
- ProtectedData
- Message integrity check
- Personal firewall
- Stateful inspection firewall
Which of the following categories of the active attacks simply means that messages are delayed or recorded to produce an unauthorized effect?
- Modification of message
- Replay
- Message confidentiality
- Message integrity check
- Vulnerability
In which of the following security policies, every fragment of data and information is categorized meticulously at a specific sensitivity level which typically range from unclassified, classified, etc.
- Ease of use
- Lattice model of access security
- Commercial security policy
- Security policy
- Military security policy
Which of the following types of malicious code is a feature in a program by which someone can access the program other than by the obvious, perhaps with special privileges?
- Protected memory
- Backdoor
- Virus
- Worm
- Interception
Which of the following security mechanisms provides the services such as fragmentation, confidentiality, framing, etc?
- Stateful inspection firewall
- The certificate scheme
- Secure socket layer
- Transport layer security
- Key-Info
Which of the following security features of trusted operating system, as its name implies, leaves a certain amount of access control to the discretion of the object's owner?
- Ease of use
- Complete mediation
- Identification and authentication
- Mandatory access control
- Discretionary access control
Which of the following types of malicious code is a malicious code that, in addition to its primary effect, has a second, non- obvious malicious effect?
- ProtectedMemory
- Trojan horse
- Virus
- Worm
- Threat
In which of the following security models, we would want to fabricate a model to embody variety of sensitivities and to portray the need to isolate subjects strictly from objects?
- Least privilege
- Security policy
- Bell-La padula confidentiality model
- Multilevel security model
- Lattice model of access security
Which of the following categories of the active attack prevents or exhibit's the normal use or management of communication facilities?
- Denial of service
- Replay
- Interception
- Vulnerability
- ProtectedMemory
In which of the following security policies, every object fits to a distinct company group and every group is enclosed in a unique conflict category?
- Protection of memory
- Chinese wall security policy
- Commercial security policy
- Security policy
- Lattice model of access security
Which of the security standards performs some or all of the actions such as hash of the message, sign the hash by encrypting it with the sender's private key for the message integrity and authenticity etc?
- Pretty good privacy
- The certificate scheme
- DEK-Info
- Sender authenticity
- Stateful inspection firewall
Which of the following types of threat occurs when an asset of the system becomes lost, unavailable or unusable?
- ProtectdData
- Interception
- Interruption
- Replay
- Vulnerability