Exam 25: B: Extension: A Information Security

Charles Mott works for a company called VeriSign that acts a trusted third party to verify information.One of Charles's largest clients is CheckMd, which holds and authenticates customer reviews of doctors and dentists online.Having a third party validating the reviews is critical to CheckMd's success.What type of authentication technique is VeriSign providing for CheckMd?

What is the difference between phishing and pharming?

What are computer viruses that wait for a specific date before executing their instructions?

Identity theft is the category of computer security that addresses the protection of data from unauthorized disclosure and confirmation of data source authenticity.

What is two-factor authentication?

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident are called insiders.

Two-factor authentication requires the user to provide two means of authentication, what the user knows (password) and what the user has (security token).

Applications allowed to be placed on the corporate network, like IM software, and corporate computer equipment used for personal reason on personal networks are two areas that should be addressed by managers in which of the following company policies?

Which of the following protection techniques scans and searches hard drives to prevent, detect, and remove known viruses, adware, and spyware?

A zombie farm is a group of computers on which a hacker has planted zombie programs.

What is a device that is around the same size as a credit card, containing embedded technologies that can store information and small amounts of software to perform some limited processing?

Which of the following represents the biggest problem of information security breaches?

What is the most secure type of authentication?

What is a destructive agent?

Through social engineering, hackers use their social skills to trick people into revealing access credentials or other valuable information.

Which of the following is an example of a way to maintain information security that a company should include in its information security policies?

What is a masquerading attack that combines spam with spoofing?

What is a form of social engineering in which one individual lies to obtain confidential data about another individual?

Worms are computer viruses that wait for a specific date before executing their instructions.

A process of providing a user with permission including access levels and abilities such as file access, hours of access, and amount of allocated storage space is called authentication.