Chapter 3 Questions

1. The main goal of a hacker is to circumvent access controls and potentially steal data.

   • True

2. Which of the following best describes intellectual property?

    A. The items a business has copyrighted 
   
    B. Patents owned by a business 
   
    C. Sales and marketing plans 
   
    D. Customer lists 
   
    $E. All of the above$

3. Which of the following terms best describes a person with very little hacking skills?

    A. Hacker 
   
    $B. Script kiddie$ 
   
    C. Cracker 
   
    D. Wannabe
   
    E. All of the above

4. A(n) packet sniffer is a software tool that is used to capture packets from a network.

5. Which type of attack results in legitimate users not having access to a system resource?

    $A. Denial$ 
   
    B. Disclosure 
   
    C. Alteration 
   
    D. Spoofing

6. A qualitative risk assessment assigns a subjective risk rating to assess the risk.

   • True

7. Which of the following is an example of social engineering?

    A. SQL injection 
   
    B. XML injection 
   
    C. Security design 
   
    $D. Impersonation$ 
   
    E. All of the above

8. Which of the following is an example of an administrative security control?

    A. Antivirus/anti-malware protection 
   
    B. Data leakage prevention 
   
    C. Standardized workstation and laptop images 
   
    $D. Security awareness training$
   
    E. All of the above

9. Vulnerability assessment scanners look for software vulnerabilities in IP host devices.

   • True

10. Which of the following affects availability?

    A. Cross-site scripting 
    
    B. SQL injection 
    
    $C. Denial$ 
    
    D. Packet sniffing 
    
    E. None of the above

11. Which type of attack involves capturing data packets from a network and transmitting them later to produce an unauthorized effect?

    A. Man in the middle 
    
    B. Denial 
    
    $C. Replay$ 
    
    D. Phishing 
    
    E. SQL injection

12. The list of known software vulnerabilities maintained by MITRE is called:

    A. National Vulnerability Database (NVD)
    
    $B. Common Vulnerabilities and Exposures (CVE)$
    
    C. Zero-Day List (ZDL)
    
    D. Software Vulnerabilities List (SVL)