Question 1

Which of the following is an example of a sniffing technique?

Accepted Answer

A)  IP spoofing 
B)  caches 
C)  ad blockers 
D)  adware 
A)  IP spoofing 
B)  caches 
C)  ad blockers 
D)  adware

Question 2

Define threat, vulnerability, safeguard, and target.

Accepted Answer

A threat is a person or organization tha

Question 3

Which of the following observations concerning Secure Socket Layer (SSL)is true?

Accepted Answer

A)  It uses only asymmetric encryption. 
B)  It is a useful hybrid of symmetric and asymmetric encryption techniques. 
C)  It works between Levels 2 and 3 of the TCP-OSI architecture. 
D)  It is a stronger version of HTTPS. 
A)  It uses only asymmetric encryption. 
B)  It is a useful hybrid of symmetric and asymmetric encryption techniques. 
C)  It works between Levels 2 and 3 of the TCP-OSI architecture. 
D)  It is a stronger version of HTTPS.

Question 4

To obtain a measure of probable loss, companies ________.

Accepted Answer

A)  multiply likelihood by the probability of occurrence 
B)  multiply the vulnerability by the probability of occurrence 
C)  multiply likelihood by the cost of the consequences 
D)  multiply residual risk by the cost of the consequences 
A)  multiply likelihood by the probability of occurrence 
B)  multiply the vulnerability by the probability of occurrence 
C)  multiply likelihood by the cost of the consequences 
D)  multiply residual risk by the cost of the consequences

Question 5

________ are viruses that masquerade as useful programs or files.

Accepted Answer

A)  Adware 
B)  Firmware 
C)  Trojan horses 
D)  Payloads 
A)  Adware 
B)  Firmware 
C)  Trojan horses 
D)  Payloads

Question 6

Cookies enables one to access Web sites without having to sign in every time.

Accepted Answer

A) True 
 B)False

Question 7

________ are small files that your browser stores on your computer when you visit Web sites and enable you to access Web sites without having to sign in every time.

Accepted Answer

A)  Cookies 
B)  Registers 
C)  Pop-ups 
D)  Public keys 
A)  Cookies 
B)  Registers 
C)  Pop-ups 
D)  Public keys

Question 8

An example of a computer crime includes an employee who inadvertently installs an old database on top of the current one.

Accepted Answer

A) True 
 B)False

Question 9

A system called ________ authenticates users without sending their passwords across a computer network.

Accepted Answer

A)  Kerberos 
B)  WPA 
C)  pretexting 
D)  WEP 
A)  Kerberos 
B)  WPA 
C)  pretexting 
D)  WEP

Question 10

Unauthorized data disclosures are possible due to human error.

Accepted Answer

A) True 
 B)False

Question 11

________ occurs when someone deceives by pretending to be someone else.

Accepted Answer

A)  Hacking 
B)  Baiting 
C)  Sniffing 
D)  Pretexting 
A)  Hacking 
B)  Baiting 
C)  Sniffing 
D)  Pretexting

Question 12

Email spoofing is a synonym for phishing.

Accepted Answer

A) True 
 B)False

Question 13

Which of the following is a critical security function of senior management?

Accepted Answer

A)  safeguarding computer hardware and software 
B)  delegating responsibility for managing IS security 
C)  establishing the security policy and managing risk 
D)  managing security programs on a real-time basis 
A)  safeguarding computer hardware and software 
B)  delegating responsibility for managing IS security 
C)  establishing the security policy and managing risk 
D)  managing security programs on a real-time basis

Question 14

When a hacker floods a Web server with millions of bogus service requests so that it cannot service legitimate requests, it is called a denial-of-service attack.

Accepted Answer

A) True 
 B)False

Question 15

Email spoofing is a synonym for ________.

Accepted Answer

A)  hacking 
B)  phishing 
C)  usurping 
D)  sniffing 
A)  hacking 
B)  phishing 
C)  usurping 
D)  sniffing

Question 16

Which of the following is an example of a system-specific security policy?

Accepted Answer

A)  limiting the personal use of an organization's computer systems 
B)  deciding what customer data from the order-entry system will be shared with other organizations 
C)  designating a department for managing an organization's IS security 
D)  inspecting an employee's personal email for compliance with company policy 
A)  limiting the personal use of an organization's computer systems 
B)  deciding what customer data from the order-entry system will be shared with other organizations 
C)  designating a department for managing an organization's IS security 
D)  inspecting an employee's personal email for compliance with company policy

Question 17

Probable loss is concerned only with tangible consequences.

Accepted Answer

A) True 
 B)False

Question 18

Employee termination is a potential security threat for an organization.

Accepted Answer

A) True 
 B)False

Question 19

Discuss some human safeguards for employees that can ensure the security of information systems.

Accepted Answer

Human safeguards involve the people and

Question 20

Many companies create ________, which are false targets for computer criminals to attack.To an intruder, it would look like a particularly valuable resource, such as an unprotected Web site, but in actuality the only site content is a program that determines the attacker's IP address.

Accepted Answer

A)  bot herders 
B)  hot sites 
C)  honeypots 
D)  beacons 
A)  bot herders 
B)  hot sites 
C)  honeypots 
D)  beacons

Which of the following is an example of a sniffing technique?

Define threat, vulnerability, safeguard, and target.

Which of the following observations concerning Secure Socket Layer (SSL)is true?

To obtain a measure of probable loss, companies ________.

________ are viruses that masquerade as useful programs or files.

Cookies enables one to access Web sites without having to sign in every time.

________ are small files that your browser stores on your computer when you visit Web sites and enable you to access Web sites without having to sign in every time.

An example of a computer crime includes an employee who inadvertently installs an old database on top of the current one.

A system called ________ authenticates users without sending their passwords across a computer network.

Unauthorized data disclosures are possible due to human error.

________ occurs when someone deceives by pretending to be someone else.

Email spoofing is a synonym for phishing.

Which of the following is a critical security function of senior management?

When a hacker floods a Web server with millions of bogus service requests so that it cannot service legitimate requests, it is called a denial-of-service attack.

Email spoofing is a synonym for ________.

Which of the following is an example of a system-specific security policy?

Probable loss is concerned only with tangible consequences.

Employee termination is a potential security threat for an organization.

Discuss some human safeguards for employees that can ensure the security of information systems.

Many companies create ________, which are false targets for computer criminals to attack.To an intruder, it would look like a particularly valuable resource, such as an unprotected Web site, but in actuality the only site content is a program that determines the attacker's IP address.

The Importance of MIS

Collaboration Information Systems

Strategy and Information Systems

Hardware and Software

Database Processing

Data Communication and the Cloud

Structured Processes and Information Systems

Social Media Information Systems

Business Intelligence Systems

Business Process and Information Systems Development

Information Systems Management

The International Dimension

Filters

Exam 12: Information Security Management

Which of the following is an example of a sniffing technique?

Define threat, vulnerability, safeguard, and target.

Which of the following observations concerning Secure Socket Layer (SSL)is true?

To obtain a measure of probable loss, companies ________.

________ are viruses that masquerade as useful programs or files.

Cookies enables one to access Web sites without having to sign in every time.

________ are small files that your browser stores on your computer when you visit Web sites and enable you to access Web sites without having to sign in every time.

An example of a computer crime includes an employee who inadvertently installs an old database on top of the current one.

A system called ________ authenticates users without sending their passwords across a computer network.

Unauthorized data disclosures are possible due to human error.

________ occurs when someone deceives by pretending to be someone else.

Email spoofing is a synonym for phishing.

Which of the following is a critical security function of senior management?

When a hacker floods a Web server with millions of bogus service requests so that it cannot service legitimate requests, it is called a denial-of-service attack.

Email spoofing is a synonym for ________.

Which of the following is an example of a system-specific security policy?

Probable loss is concerned only with tangible consequences.

Employee termination is a potential security threat for an organization.

Discuss some human safeguards for employees that can ensure the security of information systems.

Many companies create ________, which are false targets for computer criminals to attack.To an intruder, it would look like a particularly valuable resource, such as an unprotected Web site, but in actuality the only site content is a program that determines the attacker's IP address.

The Importance of MIS

Collaboration Information Systems

Strategy and Information Systems

Hardware and Software

Database Processing

Data Communication and the Cloud

Structured Processes and Information Systems

Social Media Information Systems

Business Intelligence Systems

Business Process and Information Systems Development

Information Systems Management

The International Dimension

Filters