Exam 12: Information Security Management

A ________ pretends to be a legitimate company and sends an email requesting confidential data, such as account numbers, Social Security numbers, account passwords, and so forth.

According to the NIST Handbook, computer security responsibilities and accountability should not be made explicit.

Which of the following was passed to give individuals the right to access their own health data created by doctors and other health-care providers?

Data safeguards are measures used to protect computer hardware from external threat.

Which of the following observations is true of a cold site?

Phishing is a technique for intercepting computer communications.

Due to increased security in operating systems and other software, and improved security procedures and employee training, it will be impossible for hackers to find vulnerabilities to exploit in the future.

The IEEE 802.11 Committee, the group that develops and maintains wireless standards, first developed a wireless security standard called ________.

Pretexting occurs when a person receives a confidential text message by mistake and pretends to be the intended recipient.

Uncertainty is the likelihood of an adverse occurrence.

________ a site means to take extraordinary measures to reduce a system's vulnerability, using special versions of the operating system, and eliminating operating systems features and functions that are not required by the application.

To gain access to a wired network, a potential intruder must obtain physical access to the network.

Which of the following is the first step in risk management?

As problems caused by human errors are accidental and not malicious, they are not security threats.

Security, like BPM, is a process that requires process management.

Wireless networks are more secure than wired networks.

A(n)________ card has a microchip in it to hold data.

A ________ is a person or organization that seeks to obtain data or other assets illegally, without the owner's permission and often without the owner's knowledge.

Secure Socket Layer (SSL)is a protocol that is restricted to asymmetric encryption.

A(n)________ is a type of virus that propagates using the Internet or other computer networks.