Exam 5: Security and Controls

A public key infrastructure relies on which of the following?

List the major components of a security policy.

How does drive-by hacking work?

A company can build its security platform on public key infrastructure.

All applications that a business uses require controls for input, processing, output, storage, and:

The most accurate description of a firewall would be:

A security policy for a firm should deal with:

Firewalls are only one component of an overall security program.

A potential problem with some Intrusion Detection Systems is the generation of a large volume of ________.

Digital certificates are used to:

An entity's security program must address all but the following:

The most basic privilege in a computerized business system is ________.

Explain the "principle of least privilege".

The primary purpose of a firewall is to:

The following statement best describes encryption on the internet:

The encryption of information is all that is needed to ensure that a network is safe from attacks.

Software development within a firm:

What pair of "keys" is used to encrypt and decrypt messages and other data transmissions?

Secure socket layer (SSL) is:

List six categories included in general controls.