1. The term national infrastructure can refer to
a. mobile telecommunications.
b. law enforcement databases.
c. military support services.
*d. all of the above.

2. Adversaries can initiate cyber attacks on infrastructure using
a. worms.
b. viruses.
c. leaks.
*d. all of the above.

3. In regards to large-scale cyber security, which of the following is a true statement?
a. Analysis of data is focused.
b. There is a small volume of data collected.
*c. Emergency management is process-based.
d. It relies on local experts.

4. Which of the following is not one of the three types of adversary that needs to be included in a national infrastructure security model?
a. external adversary
*b. custodial adversary
c. supplier adversary
d. internal adversary

5. Which of the following are possible motivations for an infrastructure attack?
a. country-sponsored warfare
b. looking to build a rep in the hacker community
c. terrorist attack
*d. all of the above

6. Which of the following is not a common security concern?
a. confidentiality
b. theft
c. integrity
*d. supply-chain error

7. A botnet attack
a. involves tiny robots sent to record physical computing environments with the intent of gathering passwords and other information that would help an adversary.
b. is a defensive tactic used by security professionals to trap adversarial bots.
*c. involves a large number of compromised end-user machines, usually broadband-connected PCs, to launch coordinated attacks.
d. can be detected by the signature “net” it casts over a system, collecting vast amounts of data for recognizance purposes.

8. Which of the following is not true of distributed denial of service attacks?
a. They reveal the unique risk posed by botnets.
*b. They stymie a system by systematically denying it access to other networks.
c. They use bots to create a “cyber logjam,” of sorts.
d. They may involve bots on PCs whose users are unaware of the bots’ existence.

9. Most national services are provided directly by the government.
a. True
*b. False

10. The conventional approach to computer security is sufficient for national infrastructure.
a. True
*b. False

11. Financial gain is one motivation for infrastructure attack.
*a. True
b. False

12. A botnet attack involves many home PCs and laptops.
*a. True
b. False

13. Home PC users are usually aware that they are participating in a botnet attack.
a. True
*b. False