Exam 13: Information Security Management

HIPAA sets limits on who can receive your health information.

Which of the following is used to eliminate spoofing?

Technical safeguards involve the hardware and software components of an information system.

When an employee is terminated,system administrators should receive advance notice so they can ________.

What is a major difference between spyware and adware?

________ is the likelihood of an adverse occurrence.

Public keys are supplied by third parties called certificate authorities.

What is key escrow?

Which of the following is an example of a sniffing technique?

What is SSL and how does it operate?

An example of a human mistake is an employee entering the wrong data into an account.

Everyone in the department must adequately safeguard company assets.This statement is in accordance with the elements of company security outlined in the NIST Handbook.

Which of the following presents the largest risk for infrastructure loss?

Secure Socket Layer (SSL)is a protocol that is restricted to asymmetric encryption.

Organizations need a rehearsed incident-response plan in place.

Because encryption keys can be lost or destroyed,a copy of the key should stored with a trusted third party.This procedure is called ________.

Maintaining the DBMS on computers in a locked room is part of the ________.