Question 1

An "evil twin" in the context of computer security is:

Accepted Answer

A)  A virus-laden attachment that looks just like a sincere attachment 
B)  A duplicate badge that allows a nasty person entry into a data center 
C)  Someone who looks just like the Chief Information Officer, but steals data 
D)  An operating system that is not genuine 
E)  A counterfeit wifi connection in a hotel or coffee shop that appears to be genuine 
A)  A virus-laden attachment that looks just like a sincere attachment 
B)  A duplicate badge that allows a nasty person entry into a data center 
C)  Someone who looks just like the Chief Information Officer, but steals data 
D)  An operating system that is not genuine 
E)  A counterfeit wifi connection in a hotel or coffee shop that appears to be genuine E

Question 2

The Dark Web offers "as-a-service" with the technologies and tools cybercriminals purchasing, which can include help desk service.

Accepted Answer

A) True 
 B)False  True

Question 3

Taking action on a detected cybersecurity breach is part of the ____________function of the NIST Cybersecurity Framework.

Accepted Answer

respond

Question 4

Match the security tool to its security category.
 \[\begin{array} { | l | l | } 
\hline \text { Hardware system security and control } & \begin{array} { l } 
\text { Firewalls used to control access to } \
\text { a network }
\end{array} \
\hline \text { Hardware system security and control } & \begin{array} { l } 
\text { Encryption techniques to protect } \
\text { the content of transnitted } \
\text { messages }
\end{array} \
\hline \text { Network and software security control } & \begin{array} { l } 
\text { Server software to protect Web } \
\text { sites }
\end{array} \
\hline \text { Network and software security control } & \begin{array} { l } 
\text { Security information management } \
\text { schemes to protect against } \
\text { unauthorized access to computers } \
\text { and the network }
\end{array} \
\hline \begin{array} { l } 
\text { Broadcast mediun security and } \
\text { controls }
\end{array} & \begin{array} { l } 
\text { Filtering software that keeps } \
\text { "black listed" sites from } \
\text { displaying }
\end{array} \
\hline
\end{array}\]

Accepted Answer

The security tool categories and their c

Question 5

____________is a situation in which the thief counterfeits a different person's address

Accepted Answer

The answer of ____________is a situation in which the thief...

Question 6

Spoofing is:

Accepted Answer

A)  When someone makes fun of you for falling for a phishing scam 
B)  When the "from" address says the name/email address of a person different from who really sent it 
C)  When hackers snoop around in a system 
D)  When a person from IT unlocks your email account 
E)  When you receive a notice of an inheritance 
A)  When someone makes fun of you for falling for a phishing scam 
B)  When the "from" address says the name/email address of a person different from who really sent it 
C)  When hackers snoop around in a system 
D)  When a person from IT unlocks your email account 
E)  When you receive a notice of an inheritance

Question 7

The concept of having multiple layers of security policies and practices is known as:

Accepted Answer

A)  Cybersecurity culture 
B)  Multifactor authentication 
C)  Defense in depth 
D)  Biometrics 
E)  Zero-day threat 
A)  Cybersecurity culture 
B)  Multifactor authentication 
C)  Defense in depth 
D)  Biometrics 
E)  Zero-day threat

Question 8

____________is a highly targeted cyber attack that usually mimics a familiar relationship to the user.

Accepted Answer

The answer of ____________is a highly targeted cyber attack that...

Question 9

Many organizations and even consumers use what to control access to a network like the Internet, allowing only authorized traffic to pass?

Accepted Answer

A)  Encryption 
B)  VPN 
C)  Firewall 
D)  Anonymizing tools 
E)  Filtering 
A)  Encryption 
B)  VPN 
C)  Firewall 
D)  Anonymizing tools 
E)  Filtering

Question 10

In the Target breach, the HVAC systems were actually attached to the retail sales system.

Accepted Answer

A) True 
 B)False

Question 11

The two most common passwords of all in 2018 were:

Accepted Answer

A)  Your birth date and anniversary date 
B)  None at all-they most commonly skip passwords and just press ENTER to continue 
C)  "password" and "123456" 
D)  Spouse's name and oldest child's name 
E)  "Rihanna" and "Lizzo" 
A)  Your birth date and anniversary date 
B)  None at all-they most commonly skip passwords and just press ENTER to continue 
C)  "password" and "123456" 
D)  Spouse's name and oldest child's name 
E)  "Rihanna" and "Lizzo"

Question 12

What security and controls should a company use to protect its computer infrastructure? Why do managers need to be involved in the governance of security and control measures?

Accepted Answer

To protect its computer infrastructure,

Question 13

Cyberinsurance can be one way a company manages its technology measure on the cybersecurity balanced scorecard.

Accepted Answer

A) True 
 B)False

Question 14

Of the seven security policies noted in the (Figure 7.7), name and describe at least three.

Accepted Answer

The seven security policies noted in Fig

Question 15

If you receive an email that says it is from Sam Johnson, your boss, with an odd EXE file as an attachment, it could be dangerous for all of the following reasons EXCEPT:

Accepted Answer

A)  The email might not really be from Sam. 
B)  The email might be from Sam's computer without his or her knowledge. 
C)  It could be dangerous even if it was sent knowingly because Sam didn't know a virus might be attached. 
D)  It could be dangerous because Sam gave someone his password once a long time ago 
E)  None of the above (indicating that all are true). 
A)  The email might not really be from Sam. 
B)  The email might be from Sam's computer without his or her knowledge. 
C)  It could be dangerous even if it was sent knowingly because Sam didn't know a virus might be attached. 
D)  It could be dangerous because Sam gave someone his password once a long time ago 
E)  None of the above (indicating that all are true).

Question 16

Examples of multi-factor authentication are:

Accepted Answer

A)  passwords and text messages. 
B)  passwords longer than one character. 
C)  a human will chat with you to see who you are. 
D)  using two badges to allow you into a building. 
E)  none of the above. 
A)  passwords and text messages. 
B)  passwords longer than one character. 
C)  a human will chat with you to see who you are. 
D)  using two badges to allow you into a building. 
E)  none of the above.

Question 17

Why is it important to measure how cybersecure we are and describe the purpose of the cybersecurity balanced scorecard?

Accepted Answer

It is important to measure how cybersecu

Question 18

Firewalls can be either in hardware or software form.

Accepted Answer

A) True 
 B)False

Question 19

A hacker who buys credit card information from hackers receives a short-term guarantee in case the card is declined.

Accepted Answer

A) True 
 B)False

Question 20

In the Target breach, the IT department was warned on or about the time the files were transferred.

Accepted Answer

A) True 
 B)False

An "evil twin" in the context of computer security is:

The Dark Web offers "as-a-service" with the technologies and tools cybercriminals purchasing, which can include help desk service.

Taking action on a detected cybersecurity breach is part of the ____________function of the NIST Cybersecurity Framework.

____________is a situation in which the thief counterfeits a different person's address

Spoofing is:

The concept of having multiple layers of security policies and practices is known as:

____________is a highly targeted cyber attack that usually mimics a familiar relationship to the user.

Many organizations and even consumers use what to control access to a network like the Internet, allowing only authorized traffic to pass?

In the Target breach, the HVAC systems were actually attached to the retail sales system.

The two most common passwords of all in 2018 were:

What security and controls should a company use to protect its computer infrastructure? Why do managers need to be involved in the governance of security and control measures?

Cyberinsurance can be one way a company manages its technology measure on the cybersecurity balanced scorecard.

Of the seven security policies noted in the (Figure 7.7), name and describe at least three.

If you receive an email that says it is from Sam Johnson, your boss, with an odd EXE file as an attachment, it could be dangerous for all of the following reasons EXCEPT:

Examples of multi-factor authentication are:

Why is it important to measure how cybersecure we are and describe the purpose of the cybersecurity balanced scorecard?

Firewalls can be either in hardware or software form.

A hacker who buys credit card information from hackers receives a short-term guarantee in case the card is declined.

In the Target breach, the IT department was warned on or about the time the files were transferred.

Introduction

The Information Systems Strategy Triangle

Strategic Use of Information Resources

Organizational Strategy and Information Systems

Digital Systems and the Design of Work

Information Systems and Digital Transformation

Architecture and Infrastructure

The Business of Information Technology

Governance of the Information Systems Organization

Information Systems Sourcing

Managing It Projects

Business Intelligence, Knowledge Management, and Analytics

Privacy and Ethical Considerations in Information Management

Filters

Exam 8: Security

An "evil twin" in the context of computer security is:

The Dark Web offers "as-a-service" with the technologies and tools cybercriminals purchasing, which can include help desk service.

Taking action on a detected cybersecurity breach is part of the ____________function of the NIST Cybersecurity Framework.

____________is a situation in which the thief counterfeits a different person's address

Spoofing is:

The concept of having multiple layers of security policies and practices is known as:

____________is a highly targeted cyber attack that usually mimics a familiar relationship to the user.

Many organizations and even consumers use what to control access to a network like the Internet, allowing only authorized traffic to pass?

In the Target breach, the HVAC systems were actually attached to the retail sales system.

The two most common passwords of all in 2018 were:

What security and controls should a company use to protect its computer infrastructure? Why do managers need to be involved in the governance of security and control measures?

Cyberinsurance can be one way a company manages its technology measure on the cybersecurity balanced scorecard.

Of the seven security policies noted in the (Figure 7.7), name and describe at least three.

If you receive an email that says it is from Sam Johnson, your boss, with an odd EXE file as an attachment, it could be dangerous for all of the following reasons EXCEPT:

Examples of multi-factor authentication are:

Why is it important to measure how cybersecure we are and describe the purpose of the cybersecurity balanced scorecard?

Firewalls can be either in hardware or software form.

A hacker who buys credit card information from hackers receives a short-term guarantee in case the card is declined.

In the Target breach, the IT department was warned on or about the time the files were transferred.

Introduction

The Information Systems Strategy Triangle

Strategic Use of Information Resources

Organizational Strategy and Information Systems

Digital Systems and the Design of Work

Information Systems and Digital Transformation

Architecture and Infrastructure

The Business of Information Technology

Governance of the Information Systems Organization

Information Systems Sourcing

Managing It Projects

Business Intelligence, Knowledge Management, and Analytics

Privacy and Ethical Considerations in Information Management

Filters