Exam 12: Managing Information Security and Privacy

Users often resist biometric identification because they feel it is

In order to prioritize their activities and protect an organization from possible risk and loss,security personnel must document the position ________ of all employees.

Because encryption keys can be lost or destroyed,a copy of the key should be stored with a trusted third party called a(n)

________ to (for)the physical computers that run the DBMS and all devices that store database data should be carefully controlled.

What is sniffing?

It is possible for some malware to install itself on your computer by you doing nothing more than opening a(n)

Biometric authentication has been around for some time,and because of weaknesses is not likely to see much usage in the future.

In order to intercept communications on ________ networks,drive-by sniffers simply drive or walk around with computers with wireless connections.

Any action,device,procedure,technique,or other measure that reduces a system's vulnerability to a threat is a safeguard.

Phishing is when someone sends an e-mail pretending to be a legitimate company and asking for confidential data,such as account numbers.

According to PIPEDA every organization needs to identify anyone in the organization who is responsible for ___________ personal information.

To protect against lost or sabotaged encryption keys,a trusted party should keep a copy of the key.

The web site _______________________ lists simple things to do to lower your risk of identity theft.

Smart cards are convenient and easy to use since they don't require any PIN numbers for authentication.

When an employee is terminated,system administrators should receive advance notice so they can

Drive-by sniffers take computers with wireless connections through an area and search for unprotected wireless networks.

________ safeguards involve the people and procedure components of information systems.

If you ever receive notification that your password has been reset when you did not request a reset,immediately contact your IS department.

When an employee notices a virus on his machine,the ________ plan should specify what to do.

Malware protection is an example of a technical safeguard.