Browse Definitions :
Quiz

Quiz: Integrated threat management

1. In 2005, malware attacks increased by:
a. 32 percent
b. 48 percent
c. 75 percent
d. Trick question -- malware attacks actually decreased in 2005
Answer (in bulleted list)

2. A threat management policy might limit installation of greynet applications. Which of the following is a greynet application:
a.an instant messaging program
b. a peer-to-peer collaboration program
c. an RSS reader
d. a streaming media player
e. all of the above
Answer

3. Along with a virus/worm combo, an attacker might distribute this type of code that installs on the recipient's computer to be triggered by some future event. What is it?
Answer

4. In an integrated approach, security software is distributed to end-user devices but centrally managed. This approach is known as:
a. application security
b. physical security
c. endpoint security
Answer

5. A comprehensive approach to network security probably includes the capture, recording, and analysis of network events in order to discover the source of security attacks or other problem incidents. The term we use for these processes comes from criminology and the legal profession. What is it?
Answer

6. Someone who breaks into a computer system or network is often referred to, inappropriately, as a "hacker." What term is used more accurately?
Answer

7. One reason to deploy integrated threat management is the increased incidence of this "mixed cocktail" of malware. What is it?
Answer

8. In addition to protecting the end-user, integrated threat management emphasizes securing the _________, which is a network point that serves as an entrance to another network.
a. gateway
b. node
c. host
Answer

9. One benefit of integrated threat management is the simplification of acquiring, testing, and installing multiple code changes to administered computer systems. This area of system management is known as ___________.
Answer

10. This is like intrusion detection -- only more proactive. What is it?
Answer

This was last updated in August 2008

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

SearchCompliance

  • risk assessment

    Risk assessment is the identification of hazards that could negatively impact an organization's ability to conduct business.

  • PCI DSS (Payment Card Industry Data Security Standard)

    The Payment Card Industry Data Security Standard (PCI DSS) is a widely accepted set of policies and procedures intended to ...

  • risk management

    Risk management is the process of identifying, assessing and controlling threats to an organization's capital and earnings.

SearchSecurity

SearchHealthIT

SearchDisasterRecovery

  • call tree

    A call tree is a layered hierarchical communication model that is used to notify specific individuals of an event and coordinate ...

  • Disaster Recovery as a Service (DRaaS)

    Disaster recovery as a service (DRaaS) is the replication and hosting of physical or virtual servers by a third party to provide ...

  • cloud disaster recovery (cloud DR)

    Cloud disaster recovery (cloud DR) is a combination of strategies and services intended to back up data, applications and other ...

SearchStorage

Close