Midterm Test Questions

Question 1

This is the most common method used to conceal small blocks of data, such as encryption keys and hash function values, which are used in digital signatures.

Answer 1

Asymmetric encryption

Question 2

2. A common technique for masking contents of messages or other information traffic so that opponents can not extract the information from the message is

Answer 2

Encryption

Question 3

involves the passive capture of a data unit and its subsequent re-transmission to produce an unauthorized effect

Answer 3

Replay Attack

Question 4

4. The three concepts that form what is often referred to as the CIA triad are ________ . These three concepts embody the fundamental security objectives for both data and for information and computing services.

Answer 4

confidentiality, integrity and availability

Question 5

A loss of __________ is the unauthorized disclosure of information

Answer 5

Confidentiality

Question 6

Verifying that users are who they say they are and that each input arriving at the system came from a trusted source is _________

Answer 6

Authenticity

Question 7

A _________ level breach of security could cause a significant degradation in mission capability to an extent and duration that the organization is able to perform its primary functions, but the effectiveness of the functions is significantly reduced.

Answer 7

Moderate

Question 8

A __________ is any action that compromises the security of information owned by an organization.

Answer 8

Security Attack

Question 9

A __________ takes place when one entity pretends to be a different entity.

Answer 9

Masquerade

Question 10

__________ is the protection of transmitted data from passive attacks

Answer 10

Confidentiality

Question 11

A(n) __________ service is one that protects a system to ensure its availability and addresses the security concerns raised by denial- of- service attacks

Answer 11

Availability

Question 12

__________ threats exploit service flaws in computers to inhibit use by legitimate users.

Answer 12

Service

Question 13

A(n) __________ is a potential for violation of security, which exists when there is a circumstance, capability, action or event that could breach security and cause harm.

Answer 13

A Threat

Question 14

The protection of the information that might be derived from observation of traffic flows is _________ .

Answer 14

traffic- flow confidentiality

Question 15

15. Data appended to, or a cryptographic transformation of, a data unit that allows a recipient of the data unit to prove the source and integrity of the data unit and protect against forgery is a(n) ___________

Answer 15

Digital Signature