Exam 13: Information Security Management

The three main systems procedure types are ________.

Differentiate between a spyware and an adware program.

________ is a technique for intercepting computer communications.

An example of malicious human activity could include an employee who,in the course of backing up a database,inadvertently installs an old database on top of the current one.

Which of the following is not considered malicious human activity?

Drive-by spoofers take computers with wireless connections through an area and search for unprotected wireless networks.

________ encryption uses the same key for both parties.

Probable loss is the probability that a given asset will be compromised by a given threat,despite the safeguards.

A worm propagates by attaching itself to normal programs.

Phishing is when someone sends an email pretending to be a legitimate company and asking for confidential data,such as account numbers.

Following a disaster,hot sites provide office space,but customers themselves must come and provide and install the equipment needed to continue operations.

What are the three components of a security program?

Any action,device,procedure,technique,or other measure that reduces a system's vulnerability to a threat is a safeguard.

You are doing an online fund transfer through the Web site of a reputed bank.Which of the following displayed in your browser's address bar will let you know that the bank is using the SSL protocol?

The term ________ is a new catch-all term that refers to any type of program not installed and controlled by the computer's owner or manager.

Which of the following is a technique used to ensure that plain text messages are received without alteration?

The "bottom line" of risk assessment is termed probable loss.

________ refers to things we do not know that we do not know.

Which of the following is a critical security function of senior-management involvement?

Which of the following is an example of a data safeguard?