Question 1

What are the 10 security- related practices that Visa expects its retailers to follow?

Accepted Answer

1) Install and maintain a firewall. 
2)

Question 2

The information security objective of confidentiality means that the firm seeks to protect its data and information from disclosure to unauthorized persons.

Accepted Answer

A) True 
 B)False

Question 3

Which statement based on a survey by the Computer Security Institute is false?

Accepted Answer

A) Employees commit 81% of computer crimes. 
B) Controls that are put in place to address external threats typically go into action when an effort to breach security is detected. 
C) Forty- nine percent of the respondents faced security incidents brought on by actions of legitimate users. 
D) External threats are considered to present potentially more serious damage than do internal threats. 
A) Employees commit 81% of computer crimes. 
B) Controls that are put in place to address external threats typically go into action when an effort to breach security is detected. 
C) Forty- nine percent of the respondents faced security incidents brought on by actions of legitimate users. 
D) External threats are considered to present potentially more serious damage than do internal threats.

Question 4

Which type of information security risk can be caused by a hacker?

Accepted Answer

A) unauthorized modification 
B) unauthorized disclosure and theft 
C) unauthorized use 
D) unauthorized destruction and denial of service 
A) unauthorized modification 
B) unauthorized disclosure and theft 
C) unauthorized use 
D) unauthorized destruction and denial of service

Question 5

When all of the information systems should provide an accurate representation of the physical systems that they represent, the information security objective is:

Accepted Answer

A) integrity. 
B) accuracy. 
C) availability. 
D) confidentiality. 
A) integrity. 
B) accuracy. 
C) availability. 
D) confidentiality.

Question 6

When the impact severity is classified as significant and the vulnerability is judged to be medium, what should happen to controls?

Accepted Answer

A) Controls should be improved. 
B) Controls should be kept intact. 
C) Controls must be improved. 
D) Nothing should happen. 
A) Controls should be improved. 
B) Controls should be kept intact. 
C) Controls must be improved. 
D) Nothing should happen.

Question 7

Which of the following is the final section of the risk analysis report?

Accepted Answer

A) recommended action to address the risk 
B) the owner(s)of the risk 
C) what was done to mitigate the risk 
D) recommended time frame for addressing the risk 
A) recommended action to address the risk 
B) the owner(s)of the risk 
C) what was done to mitigate the risk 
D) recommended time frame for addressing the risk

Question 8

GASSP is a product of the International Standards Organization and it provides a list of the information security policy topics that should be included in an organization's standards.

Accepted Answer

A) True 
 B)False

Question 9

Which type of threat is a computer program that can replicate itself without being observable to the user, and embed copies of itself in other programs and boot sectors?

Accepted Answer

A) Trojan horse 
B) virus 
C) malware 
D) worm 
A) Trojan horse 
B) virus 
C) malware 
D) worm

Question 10

An___________ is a potential undesirable outcome of a breach of information security by an information security threat.

Accepted Answer

informatio

Question 11

The Computer Security Institute found that 49% of computer crimes are committed by employees.

Accepted Answer

A) True 
 B)False

Question 12

The set of guidelines that devotes considerable attention to the user behavior that is expected if the program is to be successful is named:

Accepted Answer

A) COBIT. 
B) BSI IT Baseline Protection Manual. 
C) ISF Standard of Good Practice. 
D) United Kingdom's BS7799. 
A) COBIT. 
B) BSI IT Baseline Protection Manual. 
C) ISF Standard of Good Practice. 
D) United Kingdom's BS7799.

Question 13

Which one of the following is not an expected security- related practice for retailers that Visa has established?

Accepted Answer

A) Install and maintain a firewall. 
B) Screen employees who have access to data. 
C) Use and update antivirus software. 
D) Encrypt stored data. 
A) Install and maintain a firewall. 
B) Screen employees who have access to data. 
C) Use and update antivirus software. 
D) Encrypt stored data.

Question 14

___________are those that are built into systems by the system developers during the systems development life cycle.

Accepted Answer

The answer of ___________are those that are built into systems...

Question 15

The term that refers to a plan that specifies those measures that ensure the safety of employees when disaster strikes is referred to as a(n):

Accepted Answer

A) backup plan. 
B) vital records plan. 
C) contingency plan. 
D) emergency plan. 
A) backup plan. 
B) vital records plan. 
C) contingency plan. 
D) emergency plan.

Question 16

The certification that requires a completed exam, adherence to a code of ethics, and work experience in information security is the:

Accepted Answer

A) SysAdmin, Audit, Network, Security Certification. 
B) Certification Information System Security Professional. 
C) Certified Information Security Manager. 
D) Global Information Assurance Certification. 
A) SysAdmin, Audit, Network, Security Certification. 
B) Certification Information System Security Professional. 
C) Certified Information Security Manager. 
D) Global Information Assurance Certification.

Question 17

The activities aimed at continuing operations after an information system disruption are called___________ .

Accepted Answer

business c

Question 18

The type of firewall that allows a higher amount of authentication and filtering than does a router is referred to as a(n):

Accepted Answer

A) IP spoofing firewall. 
B) application- level firewall. 
C) circuit- level firewall. 
D) packet- filtering firewall. 
A) IP spoofing firewall. 
B) application- level firewall. 
C) circuit- level firewall. 
D) packet- filtering firewall.

Question 19

___________have been developed that consider such characteristics as the person's position in the firm, access to sensitive data, ability to alter hardware components, the types of applications used, the files owned, and the usage of certain network protocols.

Accepted Answer

Insider th

Question 20

COBIT focuses on the process that a firm can follow in developing standards, paying special attention to the writing and maintaining of the documentation.

Accepted Answer

A) True 
 B)False

Exam 9: Information Security

What are the 10 security- related practices that Visa expects its retailers to follow?

The information security objective of confidentiality means that the firm seeks to protect its data and information from disclosure to unauthorized persons.

Which statement based on a survey by the Computer Security Institute is false?

Which type of information security risk can be caused by a hacker?

When all of the information systems should provide an accurate representation of the physical systems that they represent, the information security objective is:

When the impact severity is classified as significant and the vulnerability is judged to be medium, what should happen to controls?

Which of the following is the final section of the risk analysis report?

GASSP is a product of the International Standards Organization and it provides a list of the information security policy topics that should be included in an organization's standards.

Which type of threat is a computer program that can replicate itself without being observable to the user, and embed copies of itself in other programs and boot sectors?

An___________ is a potential undesirable outcome of a breach of information security by an information security threat.

The Computer Security Institute found that 49% of computer crimes are committed by employees.

The set of guidelines that devotes considerable attention to the user behavior that is expected if the program is to be successful is named:

Which one of the following is not an expected security- related practice for retailers that Visa has established?

___________are those that are built into systems by the system developers during the systems development life cycle.

The term that refers to a plan that specifies those measures that ensure the safety of employees when disaster strikes is referred to as a(n):

The certification that requires a completed exam, adherence to a code of ethics, and work experience in information security is the:

The activities aimed at continuing operations after an information system disruption are called___________ .

The type of firewall that allows a higher amount of authentication and filtering than does a router is referred to as a(n):

___________have been developed that consider such characteristics as the person's position in the firm, access to sensitive data, ability to alter hardware components, the types of applications used, the files owned, and the usage of certain network protocols.

COBIT focuses on the process that a firm can follow in developing standards, paying special attention to the writing and maintaining of the documentation.

Introduction to Information Systems

Information Systems for Competitive Advantage

Using Information Technology to Engage in Electronic Commerce

System Users and Developers

Computing and Communications Resources

Database Management Systems

Systems Development

Information in Action

Ethical Implications of Information Technology

Decision Support Systems

Everyday Technology Skills

Web/HTML Project Using Microsoft FrontPage

Web/HTML Project Using Notepad

Web/HTML Student Survey

Web/HTML Book Purchase

Spreadsheet Basics

Spreadsheets with Data Capture - Vacation Choice

Spreadsheets with Data Capture - Movie Ticket Purchase

Database Forms and Reports

Database Queries - Customer Database

Database Queries - Inventory Database

Reports Based on Queries

Filters