Exam 12: Information Security Management

Every organization should have a(n)________ as part of the security program,which should include how employees are to react to security problems,whom they should contact,the reports they should make,and steps they can take to reduce further loss.

Most spyware is benign in that it does not perform malicious acts or steal data.

Which of the following is an example of a data safeguard?

The existence of spyware is generally unknown to the user.

The existence of accounts that are no longer necessary do not pose a serious security threat.

Viruses,worms,and Trojan horses are types of firewalls.

In terms of password management,when an account is created,users should ________.

Explain account management.

Typically,a help-desk information system has answers to questions that only a true user would know,such as the user's birthplace,mother's maiden name,or last four digits of an important account number.This information ________.

Smart cards are convenient and easy to use since they don't require a PIN number for authentication.

Malware protection is an example of a technical safeguard.

Organizations should protect sensitive data by storing it in ________ form.

System errors are not caused by human error.

In the context of human safeguards against security threats,the security sensitivity for each position should be documented.

Technical safeguards involve just the software components of an information system.

Mark recently received an email from what appeared to be a legitimate company,asking him to update and verify his credit card details.Unknowingly,he obliged and later realized that the information had been misused.Mark is a victim of ________.

________ are the patterns that should be downloaded and updated frequently.

________ occurs when a person gains unauthorized access to a computer system.

________ firewalls can prohibit outsiders from starting a session with any user behind the firewall.

An Advanced Persistent Threat (APT)is a sophisticated,possibly long-running,computer hack that is perpetrated by large,well-funded organizations like governments.