Crowdly
Add to Chrome
IT6011 - Introduction to Information Security
Looking for IT6011 - Introduction to Information Security test answers and solutions? Browse our comprehensive collection of verified answers for IT6011 - Introduction to Information Security at moodle.polytechnic.bh.
Get instant access to accurate answers and detailed explanations for your course questions. Our community-driven platform helps students succeed!
Which of the following best describes the main objective of an attacker?
❌
✅
❌
❌
View this question
During Host Discovery, which tool can be used to identify live hosts?
❌
✅
❌
❌
View this question
10. When GulfTech considers the cost of encryption versus the potential financial loss of a data breach, it is applying which principle of risk management?
0%
0%
0%
0%
View this question
3. To mitigate the SQL injection issue in GulfTech’s “search for services” function, which control is MOST appropriate?
0%
0%
0%
0%
View this question
5. In the GulfTech case, management must decide how to address risks. According to the slides, the step AFTER assessing risks (likelihood × impact) is to:
✅
❌
❌
❌
View this question
7. Which type of control would require GulfTech to implement a “password change every 90 days” policy?
❌
✅
❌
❌
View this question
2. The lack of cryptography in GulfTech’s customer database increases the severity of breaches. According to the risk matrix, this is an example of:
0%
0%
0%
0%
View this question
9. If GulfTech introduces security guards, CCTV, and biometric access at the data center, which control category is this?
0%
0%
0%
0%
View this question
6. If GulfTech classifies Cross-Site Scripting (XSS) as Medium Impact and High Likelihood, the risk level using the matrix would be:
✅
❌
❌
❌
View this question
1. GulfTech’s web portal was found vulnerable to SQL injection. Based on the risk matrix (Impact × Likelihood), how should this vulnerability be classified?
0%
0%
0%
0%
View this question