Question 1

Nonword passwords are vulnerable to a ________ attack, in which the password cracker tries every possible combination of characters.

Accepted Answer

A)  denial-of-service 
B)  side channel 
C)  brute force 
D)  obfuscation 
A)  denial-of-service 
B)  side channel 
C)  brute force 
D)  obfuscation

Question 2

Uncertainty is different from risk.

Accepted Answer

A) True 
 B)False

Question 3

________ occurs through human error when employees do not follow proper procedures or when procedures have not been well designed.

Accepted Answer

A)  Unauthorized data disclosure 
B)  Incorrect data modification 
C)  Denial of service 
D)  Loss of infrastructure 
A)  Unauthorized data disclosure 
B)  Incorrect data modification 
C)  Denial of service 
D)  Loss of infrastructure

Question 4

Which factor of risk assessment refers to the probability that a given asset will be compromised by a given threat, despite the safeguards?

Accepted Answer

A)  likelihood 
B)  uncertainty 
C)  consequence 
D)  vulnerability 
A)  likelihood 
B)  uncertainty 
C)  consequence 
D)  vulnerability

Question 5

If a backup is made, the database is secure.

Accepted Answer

A) True 
 B)False

Question 6

What are spyware and adware programs?

Accepted Answer

Spyware programs are installed on the us

Question 7

A virus is a computer program that replicates itself.The program code that causes unwanted activity is called the ________.

Accepted Answer

A)  payload 
B)  Trojan 
C)  bot herder 
D)  key escrow 
A)  payload 
B)  Trojan 
C)  bot herder 
D)  key escrow

Question 8

Viruses and worms are examples of malware.

Accepted Answer

A) True 
 B)False

Question 9

Incident response procedures should provide decentralized reporting of all security incidents.

Accepted Answer

A) True 
 B)False

Question 10

Define encryption and explain symmetric and asymmetric encryption for computer systems.

Accepted Answer

Encryption is the process of transformin

Question 11

Intangible consequences are those whose financial impact can be measured.

Accepted Answer

A) True 
 B)False

Question 12

Employees resent physical searches when arriving at and departing from work.Which aspect of computer security described in the NIST Handbook is reflected here?

Accepted Answer

A)  Computer security is an integral element of sound management. 
B)  Computer security should be cost-effective. 
C)  Computer security is constrained by societal factors. 
D)  Computer security should be periodically reassessed. 
A)  Computer security is an integral element of sound management. 
B)  Computer security should be cost-effective. 
C)  Computer security is constrained by societal factors. 
D)  Computer security should be periodically reassessed.

Question 13

Encryption is an example of a technical safeguard.

Accepted Answer

A) True 
 B)False

Question 14

When referring to security threats, pretexting, sniffing, spoofing, and phishing are all examples of ________.

Accepted Answer

A)  unauthorized data disclosure 
B)  incorrect data modification 
C)  faulty services 
D)  loss of infrastructure 
A)  unauthorized data disclosure 
B)  incorrect data modification 
C)  faulty services 
D)  loss of infrastructure

Question 15

The term ________ refers to any type of program that is surreptitiously installed and that takes actions unknown and uncontrolled by the computer's owner or administrator.

Accepted Answer

A)  proxy 
B)  payload 
C)  bot 
D)  string 
A)  proxy 
B)  payload 
C)  bot 
D)  string

Question 16

________ is a technique for intercepting computer communications, either through a physical connection to a network or, in the case of wireless networks, with no physical connection.

Accepted Answer

A)  Spoofing 
B)  Phishing 
C)  Sniffing 
D)  Pretexting 
A)  Spoofing 
B)  Phishing 
C)  Sniffing 
D)  Pretexting

Question 17

Which of the following is covered by the Gramm-Leach-Bliley Act of 1999?

Accepted Answer

A)  information related to national security 
B)  records maintained by the U.S.government 
C)  consumer financial data stored by financial institutions 
D)  health data collected by doctors and other health-care providers 
A)  information related to national security 
B)  records maintained by the U.S.government 
C)  consumer financial data stored by financial institutions 
D)  health data collected by doctors and other health-care providers

Question 18

Probable loss is the probability that a given asset will be compromised by a given threat, despite the safeguards.

Accepted Answer

A) True 
 B)False

Question 19

________ occurs when a person breaks into a network to steal data such as customer lists, product inventory data, employee data, and other proprietary and confidential data.

Accepted Answer

A)  Pretexting 
B)  Phishing 
C)  Hacking 
D)  Spoofing 
A)  Pretexting 
B)  Phishing 
C)  Hacking 
D)  Spoofing

Question 20

In disaster-preparedness terminology, a ________ is a utility company that can take over another company's processing with no forewarning.

Accepted Answer

A)  Web farm 
B)  cold site 
C)  development site 
D)  hot site 
A)  Web farm 
B)  cold site 
C)  development site 
D)  hot site

Nonword passwords are vulnerable to a ________ attack, in which the password cracker tries every possible combination of characters.

Uncertainty is different from risk.

________ occurs through human error when employees do not follow proper procedures or when procedures have not been well designed.

Which factor of risk assessment refers to the probability that a given asset will be compromised by a given threat, despite the safeguards?

If a backup is made, the database is secure.

What are spyware and adware programs?

A virus is a computer program that replicates itself.The program code that causes unwanted activity is called the ________.

Viruses and worms are examples of malware.

Incident response procedures should provide decentralized reporting of all security incidents.

Define encryption and explain symmetric and asymmetric encryption for computer systems.

Intangible consequences are those whose financial impact can be measured.

Employees resent physical searches when arriving at and departing from work.Which aspect of computer security described in the NIST Handbook is reflected here?

Encryption is an example of a technical safeguard.

When referring to security threats, pretexting, sniffing, spoofing, and phishing are all examples of ________.

The term ________ refers to any type of program that is surreptitiously installed and that takes actions unknown and uncontrolled by the computer's owner or administrator.

________ is a technique for intercepting computer communications, either through a physical connection to a network or, in the case of wireless networks, with no physical connection.

Which of the following is covered by the Gramm-Leach-Bliley Act of 1999?

Probable loss is the probability that a given asset will be compromised by a given threat, despite the safeguards.

________ occurs when a person breaks into a network to steal data such as customer lists, product inventory data, employee data, and other proprietary and confidential data.

In disaster-preparedness terminology, a ________ is a utility company that can take over another company's processing with no forewarning.

The Importance of MIS

Collaboration Information Systems

Strategy and Information Systems

Hardware and Software

Database Processing

Data Communication and the Cloud

Structured Processes and Information Systems

Social Media Information Systems

Business Intelligence Systems

Business Process and Information Systems Development

Information Systems Management

The International Dimension

Filters

Exam 12: Information Security Management

Nonword passwords are vulnerable to a ________ attack, in which the password cracker tries every possible combination of characters.

Uncertainty is different from risk.

________ occurs through human error when employees do not follow proper procedures or when procedures have not been well designed.

Which factor of risk assessment refers to the probability that a given asset will be compromised by a given threat, despite the safeguards?

If a backup is made, the database is secure.

What are spyware and adware programs?

A virus is a computer program that replicates itself.The program code that causes unwanted activity is called the ________.

Viruses and worms are examples of malware.

Incident response procedures should provide decentralized reporting of all security incidents.

Define encryption and explain symmetric and asymmetric encryption for computer systems.

Intangible consequences are those whose financial impact can be measured.

Employees resent physical searches when arriving at and departing from work.Which aspect of computer security described in the NIST Handbook is reflected here?

Encryption is an example of a technical safeguard.

When referring to security threats, pretexting, sniffing, spoofing, and phishing are all examples of ________.

The term ________ refers to any type of program that is surreptitiously installed and that takes actions unknown and uncontrolled by the computer's owner or administrator.

________ is a technique for intercepting computer communications, either through a physical connection to a network or, in the case of wireless networks, with no physical connection.

Which of the following is covered by the Gramm-Leach-Bliley Act of 1999?

Probable loss is the probability that a given asset will be compromised by a given threat, despite the safeguards.

________ occurs when a person breaks into a network to steal data such as customer lists, product inventory data, employee data, and other proprietary and confidential data.

In disaster-preparedness terminology, a ________ is a utility company that can take over another company's processing with no forewarning.

The Importance of MIS

Collaboration Information Systems

Strategy and Information Systems

Hardware and Software

Database Processing

Data Communication and the Cloud

Structured Processes and Information Systems

Social Media Information Systems

Business Intelligence Systems

Business Process and Information Systems Development

Information Systems Management

The International Dimension

Filters