Exam 8: Securing Information Systems

Large amounts of data stored in electronic form are ________ than the same data in manual form.

DoS attacks are used to destroy information and access restricted areas of a company's information system.

________ attacks are the largest malware threat,their attacks take advantage of vulnerabilities in poorly coded Web application software to introduce malicious program code into a company's systems and networks.

How is the security of a firm's information system and data affected by its people,organization,and technology? Is the contribution of one of these dimensions any more important than the other? Why?

________ defects cannot be achieved in larger programs.

An ________ defines acceptable uses of the firm's information resources and computing equipment,including desktop and laptop computers,wireless devices,telephones,and the Internet.

A ________ includes statements ranking information risks,identifying acceptable security goals,and identifying the mechanisms for achieving these goals.

________ is the process of transforming plain text or data into cipher text that cannot be read by anyone other than the sender and the intended receiver.

A ________ is a type of eavesdropping program that monitors information travelling over a network.

Which of the following is NOT an example of a computer used as a target of crime?

Robert is in charge of security and control at his financial trading firm.He needs to approach management about investing large sums of money to the area of security and control.He knows that it will be a hard sell to this group because they are very focused on sales revenue and this is not directly related to that.Give Robert some arguments that he might use to convince the board to invest these funds in security and control.

________ occurs when an individual or computer program fraudulently clicks on an online ad without any intention of learning more about the advertiser or making a purchase.

An MIS audit examines the firm's overall security environment as well as controls governing individual information systems.

A digital certificate system

________ are methods,policies,and organizational procedures ensuring the safety of the organization's assets,the accuracy and reliability of its records,and operational adherence to management standards.

________ controls ensure that valuable business data files on either disk or tape are not subject to unauthorized access,change,or destruction while they are in use or in storage.

A risk audit includes statements ranking information risks,identifying acceptable security goals,and identifying the mechanisms for achieving these goals.

Many Wi-Fi networks can be penetrated easily by intruders using sniffer programs to obtain an address to access the resources of a network without authorization.

FLQ injection attacks are the largest malware threat,their attacks take advantage of vulnerabilities in poorly coded Web application software to introduce malicious program code into a company's systems and networks.

________ is designed to check computer systems and drives for the presence of computer viruses.