Ch6 Test Bank Resilience Infrastructure Prot

Chapter 6: Test Bank

Multiple Choice

1. A system disruption which then propagates to other systems due to their proximity is known as what?
   1. Cascading failure
   2. Complex network
   3. Critical infrastructure
   4. ransomware
2. Which of the following assets is not an example of something that would be included in the communications critical infrastructure sector?
   1. Mobile phone towers
   2. Internet service providers
   3. Research facilities
   4. Radio stations
3. _____________ is the ability to prepare for, adapt to, and recover from disruptions.
   1. Inspection
   2. Mitigation
   3. Resilience
   4. Risk management
4. How many sectors does the Department of Homeland Security (DHS) consider to be critical?
   1. 8
   2. 12
   3. 16
   4. 20
5. Three critical infrastructure sectors in particular—energy, communications, and information technology—can be thought of as “ ” sectors.
   1. high yield
   2. enabling
   3. problematic
   4. sustainable
6. Which of the following things cannot be managed with the use of Supervisory Control and Data Acquisition (SCADA) systems?
   1. Cell phone towers
   2. Water flow out of dams
   3. Production of electricity at nuclear power plants
   4. Screening cargo

True/False

1. The transportation sector has evolved a great deal since the 9/11 terrorist attacks.
   1. True
   2. False
2. Many SCADA systems continue to suffer from security vulnerabilities.
   1. True
   2. False
3. Hospitals, clinics, outpatient facilities are all examples of assets found in the chemical sector of critical infrastructures.
   1. True
   2. False
4. Approximately 15% of all critical infrastructure is privately controlled.
   1. True
   2. False
5. Under the DHS system of classification, 16 specific sectors of the U.S. economy form part of the universe of critical infrastructure.
   1. True
   2. False
6. Perhaps the most desirable end state in critical infrastructure protection today is resilience.
   1. True
   2. False
7. The effectiveness of PPP for critical infrastructure protection can vary.
   1. True
   2. False
8. Ground-based communications transmission systems do not include Internet Service Providers (ISPs).
   1. True
   2. False

Short Answer

1. Explain why Wannacry was so successful at impacting hundreds of thousands of users.
   1. One of the chief reasons that the Wannacry ransomware was able to spread so far, and so fast, is because it exploited a software vulnerability in older versions of the Windows operating system. Since Windows has been so popular for such a long period of time, it is little surprise that Wannacry was able to propagate globally. In this case, we see how a vulnerability in a U.S.-produced software product impacted critical infrastructure worldwide. Far from being merely an inconvenience, the Wannacry ransomware also had a genuine impact on the well-being of persons in the United Kingdom, since it prompted the NHS to cancel medical appointments and discourage individuals from visiting NHS clinics affected by the ransomware.
2. Explain why the 2014 Aurora FAA facility incident caused such a high financial loss.
   1. The fire and damage to the equipment inside the Aurora FAA facility had a powerful ripple effect on the U.S. transportation sector. The fire forced an evacuation of the facility, which led to all flights being grounded at O’Hare in Chicago, one of the busiest airports in the world. Those grounded flights in turn triggered additional flight cancellations across the country. Howard’s actions resulted in the Aurora facility being unable to direct air traffic for two weeks. The total cost to replace the damaged equipment and clean up after the incident was estimated to be over $5 million. Aviation stakeholders, such as airlines themselves, lost some $350 million in total because of Howard’s actions.
3. Name and list examples for at least four critical infrastructure sectors.
   1. Students answer will vary, but should come from table 6.1 in the text
4. Explain the three key debates in critical infrastructure.
   1. Answers should include the definition of critical infrastructure, the amount of critical infrastructure in private sector hands, and the specific role of governments in critical infrastructure protection.
5. What is the President’s Commission on Critical Infrastructure Protection?
   1. a group of high-ranking government and private sector officials charged with identifying vulnerabilities in critical infrastructure and developing recommendations to protect critical infrastructure in the future. In its 1997 final report, the PCCIP, for the first time, linked U.S. national security concerns and critical infrastructure.

Short Essay

1. Which critical infrastructure sectors do you think are the most vulnerable? Why?
2. Explain your definition of critical infrastructure.