Exam 12: Information Security Management

Which of the following uses an individual's personal physical characteristics such as fingerprints,facial features,and retinal scans for verification purposes?

The loss of encryption keys by employees is referred to as key escrow.

Which of the following is a human safeguard against security threats?

Pretexting occurs when someone deceives by pretending to be someone else.

Backup and physical security are ________ against computer security threats.

Which of the following types of security loss is WikiLeaks an example of?

Explain how defining positions in an organization can safeguard against security threats.

Studies on the cost of computer crimes are mostly based on surveys.

Technical safeguards involve both software and hardware components of an information system.

A password ________ a user.

Financial institutions must invest heavily in security safeguards because they are obvious targets for theft.

Incident-response plans should provide centralized reporting of all security incidents.

Discuss briefly the pros and cons of biometric authentication.

An Advanced Persistent Threat (APT)is a sophisticated computer hack that is perpetrated by large,well-funded organizations like governments.

Mark receives an email from his bank asking him to update and verify his credit card details: He replies to the mail with all the requested details: Mark later learns that the mail was not actually sent by his bank and that the information he had shared has been misused: Mark is a victim of ________.

Which of the following statements is true of symmetric encryption?

________ take computers with wireless connections through an area and search for unprotected wireless networks.

Typically,a help-desk information system has answers to questions that only a true user would know: Which of the following statements is true of this information?

Risk management is a critical security function of an organization's senior management.

Explain the two critical security functions that an organization's senior management needs to address.