Exam 4: Information Security

_________ is a remote attack requiring no user action.

Ransomware negatively affected the city of Atlanta in many ways. Which vulnerability was the main cause of the problems?

___ controls secure the movement of data across networks.

Carelessness using unmanaged devices is _________ and is an _________ mistake.

_________ is an attack by a programmer developing a system.

A(n) _________ is a system that prevents a specific type of information from moving between untrusted networks and private networks.

What is TRUE of the DarkHotel Group attacks?

_______ is designed to erase information permanently, not to hold it ransom.

Whitelisting allows nothing to run unless it is on the whitelist.

Authentication occurs after authorization.

A _________ is an intellectual work that is not based on public information.

If a hacker enters a building with an official-looking ID badge. This is considered social engineering.

Social engineers will often pose as real employees or contractors such as exterminators or fire marshals.

Organizations spend a great deal of time and money protecting their information resources. To figure out what needs to be protected and how they are going to protect it, they need to perform risk management. What is the goal of risk management? List and describe the three processes of risk management. How can organizations mitigate risk? Describe a company that has adopted each risk mitigation strategy.

If you accept the potential risk, continue operating with no controls, and absorb any damages that occur, you have adopted a risk _________ strategy.

Dyn is a cloud-based internet performance management company that provides virtual private networks for internet websites.

_________ occur(s) when an attacker either threatens to steal, or actually steals, information from a company and then demands payment for not carrying out a particular act.

___ is a process in which a company identifies the software that it will allow to run on its computers.

The 2017 Equifax data breach was more damaging to lenders than to consumers.

Keystroke loggers and screen scrapers are examples of _________.