Exam 10: Information Systems Security

________ a site means to take extraordinary measures to reduce a system's vulnerability.

Which of the following is a human safeguard against security threats?

Every information system today should require users to sign on with a user name and a password. In this case, which of the following functions is performed by the user's password?

The _________ can delete programs or data or even modify data in undetected ways.

As one of the safeguards against security threats, a person should preferably use the same password for different sites so as to avoid confusion.

A(n) ________ includes how employees should react to security problems, whom they should contact, the reports they should make, and steps they can take to reduce further loss.

Technical safeguards involve both software and hardware components of an information system.

After Equifax was hacked, they went through ________ process to reduced the system's vulnerability.

Thomas is responsible for creating backup copies of information in a system. He also works along with IT personnel to ensure that the backups are valid and that effective recovery procedures exist. Thomas is involved in establishing ________.

The procedure of entrusting a party with a copy of an encryption key that can be used in case the actual key is lost or destroyed is called ________.

A key is a number used with an encryption algorithm to encrypt data.

Which of the following is a primary means of authentication?

________ are viruses that masquerade as useful programs like a computer game, an MP3 file, or some other useful innocuous program.

All of the following are factors in incident response EXCEPT ________.

With https, data are encrypted using a protocol called the ________.

Spoofing is a technique for intercepting computer communications.

IP spoofing occurs when an intruder uses another site's IP address to masquerade as that other site.

A criticism of biometric authentication is that it provides weak authentication.

________ are small files that browsers store on users' computers when they visit Web sites.

Risk management is a critical security function addressed by an organization's senior management.