True$/$False

Inaticate whether the statement is true or false.

Approximately two out of three malicious Web attacks have been developed using one of four popular attack toolkits.

Like a virus, a worm needs the user to perform an action such as starting a program or opening an e$-$mail attachment to start the infection.

Removing a rootkit from an infected computer is extremely difficult.

$q,4.$ Software keyloggers are programs that silently capture all keystrokes, including passwords and sensitive information.

$q,5.$ Although traditional network security devices can block traditional network attacks, they cannot always block Web application attacks.

ARP poisoning is successful because there are few authentication procedures to verify ARP requests and replies.

Because of the minor role it plays, DNS is never the focus of attacks.

$q,8.$ If port $20$ is available, then an attacker can assume that FTP is being used.

Vulnerability scans are usually performed from outside the security perimeter.

A healthy security posture results from a sound and workable strategy toward managing risks.

$q,11.$ Securing the host involves protecting the physical device itself, securing the operating system software on the system, using security$-$based software applications, and monitoring logs$.$

$q,12.$ Keyed entry locks are much more difficult to defeat than deadbolt locks.

Cipher locks are the same as combination padlocks.

When a policy violation is detected by the DLP agent, it is reported back to the DLP server.

A basic level of security can be achieved through using the security features found in network hardware.

Security is enhanced by subnetting a single network into multiple smaller subnets in order to isolate groups of hosts.

Steganography can use image files, audio files, or even video files to contain hidden information.

A hash that is created from a set of data can be reversed.

Cryptography cannot be applied to entire disks.