Question 1

Which of the following is an example of a human safeguard?

Accepted Answer

A) procedure design 
B) firewalls 
C) malware protection 
D) application design 
A) procedure design 
B) firewalls 
C) malware protection 
D) application design

Question 2

Hardened sites use special versions of the operating system,and they lock down or eliminate operating systems features and functions that are not required by the application.

Accepted Answer

A) True 
 B)False

Question 3

People who intentionally gain unauthorized access to computer systems are called hackers.

Accepted Answer

A) True 
 B)False

Question 4

About 90 percent of all viruses are spread via ________.

Accepted Answer

A) free antivirus utilities 
B) spreadsheets 
C) email attachments 
D) file sharing sites 
A) free antivirus utilities 
B) spreadsheets 
C) email attachments 
D) file sharing sites

Question 5

No safeguard is ironclad;there is always a ________ that the safeguard will not protect the assets in all circumstances.

Accepted Answer

A) residual risk 
B) diversifiable risk 
C) portfolio risk 
D) process risk 
A) residual risk 
B) diversifiable risk 
C) portfolio risk 
D) process risk

Question 6

Tangible consequences include such things as loss of customer goodwill due to an outage.

Accepted Answer

A) True 
 B)False

Question 7

A system called ________ authenticates users without sending their passwords across the computer network.

Accepted Answer

A) Kerberos 
B) WPA 
C) Chimera 
D) DUN 
A) Kerberos 
B) WPA 
C) Chimera 
D) DUN

Question 8

Which element of the security policy specifies how the organization will ensure enforcement of security programs and policies?

Accepted Answer

A) general statement of the security program 
B) issue-specific policy 
C) network policy 
D) system-specific policy 
A) general statement of the security program 
B) issue-specific policy 
C) network policy 
D) system-specific policy

Question 9

Email spoofing is a synonym for ________.

Accepted Answer

A) spoofing 
B) phishing 
C) pretexting 
D) sniffing 
A) spoofing 
B) phishing 
C) pretexting 
D) sniffing

Question 10

Which of the following is covered by the Gramm-Leach-Bliley Act of 1999?

Accepted Answer

A) financial information stored by the SEC 
B) records maintained by the U.S.government 
C) consumer financial data stored by financial institutions 
D) health data created by doctors and other health-care providers 
A) financial information stored by the SEC 
B) records maintained by the U.S.government 
C) consumer financial data stored by financial institutions 
D) health data created by doctors and other health-care providers

Question 11

________ is a later version of SSL,with more problems fixed.

Accepted Answer

A) Transport Layer Security 
B) Advanced Socket Layer 
C) Digital signatures 
D) Asymmetric Socket Layer 
A) Transport Layer Security 
B) Advanced Socket Layer 
C) Digital signatures 
D) Asymmetric Socket Layer

Question 12

A CA verifies the legitimacy of the business sending the digital certificate.

Accepted Answer

A) True 
 B)False

Question 13

A program that asks a sender to transmit its public key could be fooled.To solve this problem,trusted,independent third-party companies,called ________,supply public keys.

Accepted Answer

A) certificate authorities 
B) 3Pk firms 
C) key makers 
D) key holding companies 
A) certificate authorities 
B) 3Pk firms 
C) key makers 
D) key holding companies

Question 14

The different systems procedure types are: normal operations,review,control,and recovery.

Accepted Answer

A) True 
 B)False

Question 15

A retina scan would be considered a biometric authentication technique.

Accepted Answer

A) True 
 B)False

Question 16

One should never send sensitive data over the Internet unless they see "https://" in the browser's address bar.

Accepted Answer

A) True 
 B)False

Question 17

The ________ pretends to be a legitimate company and sends an email requesting confidential data,such as account numbers,Social Security numbers,account passwords,and so forth.

Accepted Answer

A) hawker 
B) phisher 
C) spoofer 
D) sniffer 
A) hawker 
B) phisher 
C) spoofer 
D) sniffer

Question 18

According to the elements of company security outlined in the NIST Handbook,computer security should not be constrained by societal factors.

Accepted Answer

A) True 
 B)False

Question 19

A survey conducted by the Computer Security Institute revealed that the number of virus attacks has steadily increased during the last ten years.

Accepted Answer

A) True 
 B)False

Question 20

Which factor of risk assessment refers to the probability that a given asset will be compromised by a given threat,despite the safeguards?

Accepted Answer

A) likelihood 
B) uncertainty 
C) consequence 
D) vulnerability 
A) likelihood 
B) uncertainty 
C) consequence 
D) vulnerability

Which of the following is an example of a human safeguard?

Hardened sites use special versions of the operating system,and they lock down or eliminate operating systems features and functions that are not required by the application.

People who intentionally gain unauthorized access to computer systems are called hackers.

About 90 percent of all viruses are spread via ________.

No safeguard is ironclad;there is always a ________ that the safeguard will not protect the assets in all circumstances.

Tangible consequences include such things as loss of customer goodwill due to an outage.

A system called ________ authenticates users without sending their passwords across the computer network.

Which element of the security policy specifies how the organization will ensure enforcement of security programs and policies?

Email spoofing is a synonym for ________.

Which of the following is covered by the Gramm-Leach-Bliley Act of 1999?

________ is a later version of SSL,with more problems fixed.

A CA verifies the legitimacy of the business sending the digital certificate.

A program that asks a sender to transmit its public key could be fooled.To solve this problem,trusted,independent third-party companies,called ________,supply public keys.

The different systems procedure types are: normal operations,review,control,and recovery.

A retina scan would be considered a biometric authentication technique.

One should never send sensitive data over the Internet unless they see "https://" in the browser's address bar.

The ________ pretends to be a legitimate company and sends an email requesting confidential data,such as account numbers,Social Security numbers,account passwords,and so forth.

According to the elements of company security outlined in the NIST Handbook,computer security should not be constrained by societal factors.

A survey conducted by the Computer Security Institute revealed that the number of virus attacks has steadily increased during the last ten years.

Which factor of risk assessment refers to the probability that a given asset will be compromised by a given threat,despite the safeguards?

The Importance of Mis

Collaboration Information Systems

Information Systems for Competitive Advantage

Hardware and Software

Database Processing

Data Communications

How the Internet Works

Business Process Management

E-Commerce and Web 2.0

Business Intelligence Systems

Managing Development

Information Systems Management

International Dimension 1 - the Global Economy

International Dimension 2 - Global Communication

International Dimension 3 - Global Is and the Value Chain

International Dimension 4 - International It Management and Development

Filters

Exam 13: Information Security Management

Which of the following is an example of a human safeguard?

Hardened sites use special versions of the operating system,and they lock down or eliminate operating systems features and functions that are not required by the application.

People who intentionally gain unauthorized access to computer systems are called hackers.

About 90 percent of all viruses are spread via ________.

No safeguard is ironclad;there is always a ________ that the safeguard will not protect the assets in all circumstances.

Tangible consequences include such things as loss of customer goodwill due to an outage.

A system called ________ authenticates users without sending their passwords across the computer network.

Which element of the security policy specifies how the organization will ensure enforcement of security programs and policies?

Email spoofing is a synonym for ________.

Which of the following is covered by the Gramm-Leach-Bliley Act of 1999?

________ is a later version of SSL,with more problems fixed.

A CA verifies the legitimacy of the business sending the digital certificate.

A program that asks a sender to transmit its public key could be fooled.To solve this problem,trusted,independent third-party companies,called ________,supply public keys.

The different systems procedure types are: normal operations,review,control,and recovery.

A retina scan would be considered a biometric authentication technique.

One should never send sensitive data over the Internet unless they see "https://" in the browser's address bar.

The ________ pretends to be a legitimate company and sends an email requesting confidential data,such as account numbers,Social Security numbers,account passwords,and so forth.

According to the elements of company security outlined in the NIST Handbook,computer security should not be constrained by societal factors.

A survey conducted by the Computer Security Institute revealed that the number of virus attacks has steadily increased during the last ten years.

Which factor of risk assessment refers to the probability that a given asset will be compromised by a given threat,despite the safeguards?

The Importance of Mis

Collaboration Information Systems

Information Systems for Competitive Advantage

Hardware and Software

Database Processing

Data Communications

How the Internet Works

Business Process Management

E-Commerce and Web 2.0

Business Intelligence Systems

Managing Development

Information Systems Management

International Dimension 1 - the Global Economy

International Dimension 2 - Global Communication

International Dimension 3 - Global Is and the Value Chain

International Dimension 4 - International It Management and Development

Filters