online banking software system

SHORT ANSWER QUESTIONS (please be very brief)

1.      Suppose the author of an online banking software system has programmed in a secret feature so that program emails him the account information for any account whose balance has just gone over $10,000. What kind of attack is this and what are some of its risks?

Answer:

2.      What restrictions are often found in shellcode, and how can they be voided.

 Answer:

1. Bobby says that a computer virus ate his homework, which was saved as a Word document. What kind of virus is the most likely culprit?

Answer:

4.      State some threats that result from a process running with administrative or root privileges on a system.

Answer:

5.      __________  applications is a control that limits the programs that can execute on the system to just those in an explicit list.

A.    Virtualizing

B.     White listing

C.    Logging

D.    Patching

Answer

6.      The range of logging data acquired should be determined _______.

A.    during security testing

B.     as a final step

C.     after monitoring average data flow volume

D.    during the system planning stage

Answer

FILL-IN THE BLANK QUESTIONS

7.      The major advantage of ________ is its simplicity and its freedom from assumptions about the expected input to any program, service, or function.

Answer:

8.      ______ is a reactive control that can only inform you about bad things that have already happened.

9.      _________ are a collection of string values inherited by each process from its parent     that can affect the way a running process behaves.

A.    Deadlock

B.     Privileges

C.     Environment variables

D.    Race condition