Exam 12: Managing Information Security and Privacy

PIPEDA gives individuals the right to know why an organization is ________ their personal information.

What is phishing?

Enforcement consists of three interdependent factors: (1) responsibility, (2) accountability and (3) ________.

What is a denial-of-service security problem? How does this result from actions by the various sources of security threats?

What is an unauthorized data disclosure?

Smart cards are convenient and easy to use since they don't require any PIN numbers for authentication.

A ________ is a remote processing centre run by a commercial disaster-recovery service that provides all the equipment needed to continue operations after a disaster.

Following a disaster, hot sites provide office space, but customers themselves must come and provide and install the equipment needed to continue operations.

About 90 percent of all viruses are spread via

Bloggers have not yet had much of an impact on the mainstream media.

The best safeguard against a natural disaster is to have a safe location.

________ programs can be installed on the user's computer without the user's knowledge or permission.

What is a technical safeguard? Describe two of these.

Data safeguards are designed to protect computer networks.

Users often resist biometric identification because they feel it is

Phishing is when someone sends an email pretending to be a legitimate company and asking for confidential data, such as account numbers.

________ occurs when an intruder uses another site's IP address as if it were their own.

A(n) ________ has a microchip, which is loaded with authenticating data.

Security policy establishment is the responsibility of

A(n) ________ is someone who pretends to be a legitimate company and sends email requesting confidential data.