Question 1

What is spyware?

Accepted Answer

A) A special class of adware that collects data about the user and transmits it over the Internet without the user's knowledge or permission. 
B) Experts in technology who use their knowledge to break into computers and computer networks, either for profit or just motivated by the challenge. 
C) A computer attack where an attacker accesses a wireless computer network, intercepts data, uses network services, and/or sends attack instructions without entering the office or organization that owns the network. 
D) Software that, while purporting to serve some useful function and often fulfilling that function, also allows Internet advertisers to display advertisements without the consent of the computer user. 
A) A special class of adware that collects data about the user and transmits it over the Internet without the user's knowledge or permission. 
B) Experts in technology who use their knowledge to break into computers and computer networks, either for profit or just motivated by the challenge. 
C) A computer attack where an attacker accesses a wireless computer network, intercepts data, uses network services, and/or sends attack instructions without entering the office or organization that owns the network. 
D) Software that, while purporting to serve some useful function and often fulfilling that function, also allows Internet advertisers to display advertisements without the consent of the computer user.

Question 2

What gathers an organization's computer network traffic patterns to identify unusual or suspicious operations?

Accepted Answer

A) Network behavior analysis. 
B) Cyber-vigilantes 
C) Cyberterrorism 
D) Cyber-espionage 
A) Network behavior analysis. 
B) Cyber-vigilantes 
C) Cyberterrorism 
D) Cyber-espionage

Question 3

Rule 41 is the part of the United States Federal Rules of Criminal Procedure that covers the search and seizure of physical and digital evidence.

Accepted Answer

A) True 
 B)False

Question 4

What is a device that is around the same size as a credit card, containing embedded technologies that can store information and small amounts of software to perform some limited processing?

Accepted Answer

A) Token 
B) Password 
C) Smart card 
D) Biometrics 
A) Token 
B) Password 
C) Smart card 
D) Biometrics

Question 5

Describe the relationship between information security policies and an information security plan.

Accepted Answer

Information security policies identify t

Question 6

What is the unauthorized use, duplication, distribution, or sale of copyrighted software?

Accepted Answer

A) Ediscovery 
B) Child Online Protection Act 
C) Digital rights management 
D) Pirated software 
A) Ediscovery 
B) Child Online Protection Act 
C) Digital rights management 
D) Pirated software

Question 7

Backdoor programs change their form as they propagate.

Accepted Answer

A) True 
 B)False

Question 8

What includes governments that are after some form of information about other governments?

Accepted Answer

A) Network behavior analysis. 
B) Cyber-vigilantes 
C) Cyberterrorism 
D) Cyber-espionage 
A) Network behavior analysis. 
B) Cyber-vigilantes 
C) Cyberterrorism 
D) Cyber-espionage

Question 9

Which of the following clauses is typically contained in an acceptable use policy?

Accepted Answer

A) A nonrepudiation clause 
B) A repudiation clause 
C) A confidentiality clause 
D) An employee use clause 
A) A nonrepudiation clause 
B) A repudiation clause 
C) A confidentiality clause 
D) An employee use clause

Question 10

Janet is a financial aid counselor at a local community college and she shares an office with her three coworkers. Janet feels safe in her office environment and frequently leaves her username and password on a sticky note next to her computer. Without realizing it Janet is creating the potential for which type of information security breach to occur?

Accepted Answer

A) Insiders to hack into the college system 
B) Dumpster diving to find usernames and passwords 
C) Viruses and worms to spread through the college system 
D) All of the above 
A) Insiders to hack into the college system 
B) Dumpster diving to find usernames and passwords 
C) Viruses and worms to spread through the college system 
D) All of the above

Question 11

A hacker weapon called a splog (spam blog)is a fake blog created solely to raise the search engine rank of affiliated websites.

Accepted Answer

A) True 
 B)False

Question 12

To find out your company policy regarding such websites as YouTube, Facebook, and Twitter you would have to refer to the ________ policy.

Accepted Answer

A) Internet use policy 
B) Social media policy 
C) Information use policy 
D) Employee monitoring policy 
A) Internet use policy 
B) Social media policy 
C) Information use policy 
D) Employee monitoring policy

Question 13

With so much information and moving parts within a company, technology has made it possible for employers to monitor many aspects of employee jobs and duties. What is a system that can track employee's activities by measures as keystrokes, error rate, and number of transaction processed?

Accepted Answer

A) Anti-spam system 
B) Information intelligence system 
C) Workplace MIS monitoring 
D) Company technology monitoring 
A) Anti-spam system 
B) Information intelligence system 
C) Workplace MIS monitoring 
D) Company technology monitoring

Question 14

What is the difference between phishing and pharming?

Accepted Answer

A) Phishing is not illegal, pharming is illegal 
B) Phishing is the right of the company, where pharming is the right of the individual 
C) Phishing is a technique to gain personal information for the purpose of identity theft, and pharming reroutes requests for legitimate websites to false websites 
D) All of the above 
A) Phishing is not illegal, pharming is illegal 
B) Phishing is the right of the company, where pharming is the right of the individual 
C) Phishing is a technique to gain personal information for the purpose of identity theft, and pharming reroutes requests for legitimate websites to false websites 
D) All of the above

Question 15

Multi-factor authentication is the traditional security process, which requires a user name and password.

Accepted Answer

A) True 
 B)False

Question 16

What is ransomware?

Accepted Answer

A) A crowdsourcing initiative that rewards individuals for discovering and reporting software bugs. 
B) Software that is intended to damage or disable computers and computer systems. 
C) A type of malware designed to trick victims into giving up personal information to purchase or download useless and potentially dangerous software. 
D) A form of malicious software that infects your computer and asks for money. 
A) A crowdsourcing initiative that rewards individuals for discovering and reporting software bugs. 
B) Software that is intended to damage or disable computers and computer systems. 
C) A type of malware designed to trick victims into giving up personal information to purchase or download useless and potentially dangerous software. 
D) A form of malicious software that infects your computer and asks for money.

Question 17

Bring your own device is a policy that allows employees to use their personal mobile devices and computers to access enterprise data and applications.

Accepted Answer

A) True 
 B)False

Question 18

What is pretexting?

Accepted Answer

A) A form of social engineering in which one individual lies to obtain confidential data about another individual. 
B) A hacker looks through your trash to find personal information. 
C) Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident. 
D) Malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines. 
A) A form of social engineering in which one individual lies to obtain confidential data about another individual. 
B) A hacker looks through your trash to find personal information. 
C) Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident. 
D) Malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines.

Question 19

Copyright is an exclusive right to make, use, and sell an invention and is granted by a government to the inventor.

Accepted Answer

A) True 
 B)False

Question 20

Which of the following types of viruses spread themselves, not just from file to file, but also from computer to computer?

Accepted Answer

A) Polymorphic virus 
B) Worm 
C) Trojan-horse virus 
D) Backdoor programs 
A) Polymorphic virus 
B) Worm 
C) Trojan-horse virus 
D) Backdoor programs

What is spyware?

What gathers an organization's computer network traffic patterns to identify unusual or suspicious operations?

Rule 41 is the part of the United States Federal Rules of Criminal Procedure that covers the search and seizure of physical and digital evidence.

What is a device that is around the same size as a credit card, containing embedded technologies that can store information and small amounts of software to perform some limited processing?

Describe the relationship between information security policies and an information security plan.

What is the unauthorized use, duplication, distribution, or sale of copyrighted software?

Backdoor programs change their form as they propagate.

What includes governments that are after some form of information about other governments?

Which of the following clauses is typically contained in an acceptable use policy?

A hacker weapon called a splog (spam blog)is a fake blog created solely to raise the search engine rank of affiliated websites.

To find out your company policy regarding such websites as YouTube, Facebook, and Twitter you would have to refer to the ________ policy.

With so much information and moving parts within a company, technology has made it possible for employers to monitor many aspects of employee jobs and duties. What is a system that can track employee's activities by measures as keystrokes, error rate, and number of transaction processed?

What is the difference between phishing and pharming?

Multi-factor authentication is the traditional security process, which requires a user name and password.

What is ransomware?

Bring your own device is a policy that allows employees to use their personal mobile devices and computers to access enterprise data and applications.

What is pretexting?

Copyright is an exclusive right to make, use, and sell an invention and is granted by a government to the inventor.

Which of the following types of viruses spread themselves, not just from file to file, but also from computer to computer?

Management Information Systems: Business Driven MIS

Decisions and Processes: Value Driven Business

Ebusiness: Electronic Business Value

Infrastructures: Sustainable Technologies

Data: Business Intelligence

Networks: Mobile Business

Enterprise Applications: Business Communications

Systems Development and Project Management: Corporate Responsibility

Hardware and Software Basics

Networks and Telecommunications

Designing Databases

Emerging Trends and Technologies

Filters

Exam 4: Ethics and Information Security: MIS Business Concerns

What is spyware?

What gathers an organization's computer network traffic patterns to identify unusual or suspicious operations?

Rule 41 is the part of the United States Federal Rules of Criminal Procedure that covers the search and seizure of physical and digital evidence.

What is a device that is around the same size as a credit card, containing embedded technologies that can store information and small amounts of software to perform some limited processing?

Describe the relationship between information security policies and an information security plan.

What is the unauthorized use, duplication, distribution, or sale of copyrighted software?

Backdoor programs change their form as they propagate.

What includes governments that are after some form of information about other governments?

Which of the following clauses is typically contained in an acceptable use policy?

A hacker weapon called a splog (spam blog)is a fake blog created solely to raise the search engine rank of affiliated websites.

To find out your company policy regarding such websites as YouTube, Facebook, and Twitter you would have to refer to the ________ policy.

With so much information and moving parts within a company, technology has made it possible for employers to monitor many aspects of employee jobs and duties. What is a system that can track employee's activities by measures as keystrokes, error rate, and number of transaction processed?

What is the difference between phishing and pharming?

Multi-factor authentication is the traditional security process, which requires a user name and password.

What is ransomware?

Bring your own device is a policy that allows employees to use their personal mobile devices and computers to access enterprise data and applications.

What is pretexting?

Copyright is an exclusive right to make, use, and sell an invention and is granted by a government to the inventor.

Which of the following types of viruses spread themselves, not just from file to file, but also from computer to computer?

Management Information Systems: Business Driven MIS

Decisions and Processes: Value Driven Business

Ebusiness: Electronic Business Value

Infrastructures: Sustainable Technologies

Data: Business Intelligence

Networks: Mobile Business

Enterprise Applications: Business Communications

Systems Development and Project Management: Corporate Responsibility

Hardware and Software Basics

Networks and Telecommunications

Designing Databases

Emerging Trends and Technologies

Filters