TRUE/FALSE QUESTIONS:
The first step in devising security services and mechanisms is to develop a security policy.
Cryptanalytic attacks try every possible key on a piece of ciphertext until an intelligible translation into plaintext is obtained.
Identification is the means of establishing the validity of a claimed identity provided by a user.
A user may belong to multiple groups.
Security labels indicate which system entities are eligible to access certain resources.
Because the responsibility for IT security is shared across the organization, there is a risk of inconsistent implementation of security and a loss of central monitoring and control.
The IT security management process ends with the implementation of controls and the training of personnel.

MULTIPLE CHOICES QUESTIONS
An assault on system security that derives from an intelligent act that is a deliberate attempt to evade security services and violate the security policy of a system is a(n) __________.
Risk
Attack
Asset
Vulnerability
Answer
Masquerade, falsification, and repudiation are threat actions that cause __________ threat consequences.
Unauthorized disclosure
Disruption
Deception
Usurpation
Answer
The purpose of a __________ is to produce a “fingerprint” of a file, message, or other block of data.
Secret key
Digital signature
keystream
hash function
Answer
Combined one byte at a time with the plaintext stream using the XOR operation, a __________ is the output of the pseudorandom bit generator.
keystream
digital signature
secure hash
message authentication code
Answer
Presenting or generating authentication information that corroborates the binding between the entity and the identifier is the ___________.
identification step
authentication step
verification step
corroboration step
Answer
A concept that evolved out of requirements for military information security is ______ .
reliable input
mandatory access control
open and closed…