Exam 4: Information Security

_________ is an attack in which the perpetrator uses social skills to trick or manipulate legitimate employees into providing confidential company information such as passwords.

Spam costs US companies _________ of dollars per year.

In public-key encryption, the _________ key is used for locking and the _________ key is used for unlocking.

People tend to violate security procedures because the procedures are inconvenient.

A(n) _________ to an information resource is any danger to which a system may be exposed.

A CPA firm typically performs an internal business audit.

If you choose to spend as much as you can to protect your information systems, you have adopted a risk transference strategy.

Weak passwords can be addressed through multi-factor authentication.

___ controls restrict unauthorized individuals from using information resources.

IT security is the business of everyone in an organization.

A _________ site is the most expensive option.

A _________ site is the least expensive option.

___ posits that users be granted the privilege for an activity only if there is a justifiable need for them to perform that activity.

Whaling attacks are easier to detect than typical phishing attacks because they are so highly personalized and targeted.

Cybercrime is typically nonviolent but lucrative.

The recent trend indicates that CEOs lose their jobs after data breaches. In theory, this should impact the "lack of management support" factor that increases the vulnerability of organizational information resources.

You lose the company's USB with your sales spreadsheets on it. This is _________ and is an _________ mistake.

Sarah received an email that claimed to be from her bank. The email asked her to provide her password. Sarah later found out that the email was not from her bank and that she had given sensitive information to someone who gained access to her accounts. This is an example of a ____________.

_________ controls prevent unauthorized individuals from gaining access to a company's facilities.

_________ controls restrict unauthorized individuals from using information resources.