Exam 25: B: Extension: A Information Security

What is a technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses?

Provide an example of each of the three primary information security areas: (1) authentication and authorization, (2) prevention and resistance, and (3) detection and response.

What is an insider?

What requires the user to provide two means of authentication, what the user knows (password) and what the user has (security token)?

A voiceprint is a data file that identifies individuals or organizations online and is comparable to a digital signature.

What is multifactor authentication?

A pharming attack uses a zombie farm, often by an organized crime association, to launch a massive phishing attack.

The technique to gain personal information for the purpose of identity theft, often through fraudulent emails that look as though they came from legitimate businesses, is called phishing.

What is the identification of a user based on a physical characteristic, such as a fingerprint, iris, face, voice, or handwriting?

What is hardware or software that guards a private network by analyzing incoming and outgoing information for the correct markings?

What scrambles information into an alternative form that requires a key or password to decrypt?

What uses a zombie farm, often by an organized crime association, to launch a massive phishing attack?

eBay is an example of an online company that has been faced with numerous security issues.For example, imagine you purchase a digital camera on eBay.Three months later you might receive an email asking you to log in to the system to update your credit card or PayPal information.Of course, this email is not actually from eBay and as soon as you log in your information will be stolen.What type of information security breach would you consider this to be?