Question 1

Which of the following is an example of intellectual property owned by an IT firm?

Accepted Answer

A) software code 
B) real estate 
C) office stationery 
D) legal documents 
A) software code 
B) real estate 
C) office stationery 
D) legal documents

Question 2

Digitization of intellectual property (IP)results in better enforcement of IP laws.

Accepted Answer

A) True 
 B)False

Question 3

Which of the following is an accurate definition of multifactor authentication?

Accepted Answer

A) the process of assessing authentication of reports and manuals to prevent duplication 
B) the process of combining two or more authentication strategies 
C) the process of assessing authentication of multiple groups using a single strategy 
D) the process of assigning unique authentication information to copyrighted content in order to prevent resale 
A) the process of assessing authentication of reports and manuals to prevent duplication 
B) the process of combining two or more authentication strategies 
C) the process of assessing authentication of multiple groups using a single strategy 
D) the process of assigning unique authentication information to copyrighted content in order to prevent resale

Question 4

Single sign-on is implemented by organizations for the purpose of ________.

Accepted Answer

A) ensuring that unique passwords are used to securely access single software applications any number of times 
B) reducing the cognitive load associated with multiple passwords 
C) helping a user sign on through the process of fingerprint identification 
D) defining which IP addresses and domain names can be accessed from an organization's computers 
A) ensuring that unique passwords are used to securely access single software applications any number of times 
B) reducing the cognitive load associated with multiple passwords 
C) helping a user sign on through the process of fingerprint identification 
D) defining which IP addresses and domain names can be accessed from an organization's computers

Question 5

________ is a process which transforms data using mathematical formulas, so that no one can read the data unless they know the key to unscrambling it.

Accepted Answer

A) Wear leveling 
B) Write amplification 
C) Decipherment 
D) Encryption 
A) Wear leveling 
B) Write amplification 
C) Decipherment 
D) Encryption

Question 6

Which of the following is an accurate definition of scareware?

Accepted Answer

A) It is a kind of anti-spam process which relies on the human desire to use malware. 
B) It is a kind of social engineering used to persuade people that a computer is infected when it is not. 
C) It is a type of software that prevents users from downloading malware by displaying warnings. 
D) It is software which provides a shield against spam and mirrors it back into the network. 
A) It is a kind of anti-spam process which relies on the human desire to use malware. 
B) It is a kind of social engineering used to persuade people that a computer is infected when it is not. 
C) It is a type of software that prevents users from downloading malware by displaying warnings. 
D) It is software which provides a shield against spam and mirrors it back into the network.

Question 7

Which of the following is an accurate definition of malware?

Accepted Answer

A) software for end-user applications such as word processors and ERP software 
B) software used to test a hardware or software package 
C) software used to track and prevent malicious attacks on systems 
D) software designed to attack computer systems 
A) software for end-user applications such as word processors and ERP software 
B) software used to test a hardware or software package 
C) software used to track and prevent malicious attacks on systems 
D) software designed to attack computer systems

Question 8

Plagiarism refers to borrowing the words of another and crediting the source.

Accepted Answer

A) True 
 B)False

Question 9

Which of the following statements is true of natural laws and rights?

Accepted Answer

A) Natural laws and rights does not consider the actual consequences of an action when judging its morality. 
B) Natural laws and rights is an ethical framework that takes into account the effects of an action, weighing its good effects against its harmful ones. 
C) Natural laws and rights involves judging what action would create the greatest good for the greatest number of people. 
D) Natural laws and rights is a framework based on the central tenet that states, "The needs of the many outweigh the needs of the few." 
A) Natural laws and rights does not consider the actual consequences of an action when judging its morality. 
B) Natural laws and rights is an ethical framework that takes into account the effects of an action, weighing its good effects against its harmful ones. 
C) Natural laws and rights involves judging what action would create the greatest good for the greatest number of people. 
D) Natural laws and rights is a framework based on the central tenet that states, "The needs of the many outweigh the needs of the few."

Question 10

The term ________ refers to a collection of computers that have been compromised by malware, often through some vulnerability in their software or operating system.

Accepted Answer

A) honeypot 
B) botnet 
C) Trojan horse 
D) black swan 
A) honeypot 
B) botnet 
C) Trojan horse 
D) black swan

Question 11

Which of the following is an accurate description of the Privacy Act of 1974?

Accepted Answer

A) It prohibits businesses from sending misleading or deceptive commercial emails but denies recipients any legal recourse on their own. 
B) It stipulates how financial institutions are required to protect the privacy of consumers' personal financial information and notify them of their privacy policies annually. 
C) It establishes requirements that govern how personally identifiable information on individuals is collected, used, and disseminated by federal agencies. 
D) It requires organizations to notify state residents if sensitive data are released. 
A) It prohibits businesses from sending misleading or deceptive commercial emails but denies recipients any legal recourse on their own. 
B) It stipulates how financial institutions are required to protect the privacy of consumers' personal financial information and notify them of their privacy policies annually. 
C) It establishes requirements that govern how personally identifiable information on individuals is collected, used, and disseminated by federal agencies. 
D) It requires organizations to notify state residents if sensitive data are released.

Question 12

Laws always result from the pushes and pulls of lobbying efforts and political pressures and have nothing to do with ethics.

Accepted Answer

A) True 
 B)False

Question 13

Which of the following principles is consistent with the utilitarian ethical framework?

Accepted Answer

A) First, do no harm 
B) Thou shalt not kill 
C) Protect free speech 
D) Liberté, égalité, fraternité 
A) First, do no harm 
B) Thou shalt not kill 
C) Protect free speech 
D) Liberté, égalité, fraternité

Question 14

Janet received an email that contained a link to a website that imitated the authentic website of her bank. The email requested her to key in her credit card number, her Social Security number, and her date of birth. She later found that her credit card was fraudulently charged for transactions she never made. It is inferred from this case that Janet is a victim of ________.

Accepted Answer

A) distributed denial of service 
B) keylogging 
C) phishing 
D) cache poisoning 
A) distributed denial of service 
B) keylogging 
C) phishing 
D) cache poisoning

Question 15

Write a brief note on encryption of digital information.

Accepted Answer

A powerful technical control that protec

Question 16

According to the incidence response plan, which of the following would be most useful in containing any damage caused by a security threat?

Accepted Answer

A) preserve evidence of damage done 
B) reevaluate risk matrix 
C) restrict system access 
D) investigate system logs for evidence 
A) preserve evidence of damage done 
B) reevaluate risk matrix 
C) restrict system access 
D) investigate system logs for evidence

Question 17

Which of the laws stipulates how financial institutions are required to protect the privacy of consumers' personal financial information and notify them of their privacy policies annually?

Accepted Answer

A) the CAN-SPAM Act 
B) the State Security Breach Notification Laws 
C) the Privacy Act of 1974 
D) the Gramm-Leach-Bliley Act 
A) the CAN-SPAM Act 
B) the State Security Breach Notification Laws 
C) the Privacy Act of 1974 
D) the Gramm-Leach-Bliley Act

Question 18

Which of the following authentication strategies is the most difficult to forge, crack, or copy and is hence used for physical security?

Accepted Answer

A) password 
B) RFID chip 
C) fingerprint scanner 
D) credit card 
A) password 
B) RFID chip 
C) fingerprint scanner 
D) credit card

Question 19

The term ________ refers to software that monitors a user's activity on a computer and on the Internet, often installed without the user's knowledge.

Accepted Answer

A) honeypot 
B) browser 
C) black swan 
D) spyware 
A) honeypot 
B) browser 
C) black swan 
D) spyware

Question 20

What is the first step involved in risk management?

Accepted Answer

A) determining the cause of damage 
B) evaluating controls and filling in security gaps 
C) understanding what information assets need protection 
D) recovering the system from damage 
A) determining the cause of damage 
B) evaluating controls and filling in security gaps 
C) understanding what information assets need protection 
D) recovering the system from damage

Which of the following is an example of intellectual property owned by an IT firm?

Digitization of intellectual property (IP)results in better enforcement of IP laws.

Which of the following is an accurate definition of multifactor authentication?

Single sign-on is implemented by organizations for the purpose of ________.

________ is a process which transforms data using mathematical formulas, so that no one can read the data unless they know the key to unscrambling it.

Which of the following is an accurate definition of scareware?

Which of the following is an accurate definition of malware?

Plagiarism refers to borrowing the words of another and crediting the source.

Which of the following statements is true of natural laws and rights?

The term ________ refers to a collection of computers that have been compromised by malware, often through some vulnerability in their software or operating system.

Which of the following is an accurate description of the Privacy Act of 1974?

Laws always result from the pushes and pulls of lobbying efforts and political pressures and have nothing to do with ethics.

Which of the following principles is consistent with the utilitarian ethical framework?

Write a brief note on encryption of digital information.

According to the incidence response plan, which of the following would be most useful in containing any damage caused by a security threat?

Which of the laws stipulates how financial institutions are required to protect the privacy of consumers' personal financial information and notify them of their privacy policies annually?

Which of the following authentication strategies is the most difficult to forge, crack, or copy and is hence used for physical security?

The term ________ refers to software that monitors a user's activity on a computer and on the Internet, often installed without the user's knowledge.

What is the first step involved in risk management?

Information Systems and People

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Databases and Datawarehouses

Information Systems for the Enterprise

The Web, E-Commerce, and M-Commerce

Business Intelligence and Decision Making

Collaborating With Technology

Knowledge Management and E-Learning

Systems Development and Procurement

Project Management and Strategic Planning

Filters

Exam 10: Ethics, Privacy, and Security

Which of the following is an example of intellectual property owned by an IT firm?

Digitization of intellectual property (IP)results in better enforcement of IP laws.

Which of the following is an accurate definition of multifactor authentication?

Single sign-on is implemented by organizations for the purpose of ________.

________ is a process which transforms data using mathematical formulas, so that no one can read the data unless they know the key to unscrambling it.

Which of the following is an accurate definition of scareware?

Which of the following is an accurate definition of malware?

Plagiarism refers to borrowing the words of another and crediting the source.

Which of the following statements is true of natural laws and rights?

The term ________ refers to a collection of computers that have been compromised by malware, often through some vulnerability in their software or operating system.

Which of the following is an accurate description of the Privacy Act of 1974?

Laws always result from the pushes and pulls of lobbying efforts and political pressures and have nothing to do with ethics.

Which of the following principles is consistent with the utilitarian ethical framework?

Write a brief note on encryption of digital information.

According to the incidence response plan, which of the following would be most useful in containing any damage caused by a security threat?

Which of the laws stipulates how financial institutions are required to protect the privacy of consumers' personal financial information and notify them of their privacy policies annually?

Which of the following authentication strategies is the most difficult to forge, crack, or copy and is hence used for physical security?

The term ________ refers to software that monitors a user's activity on a computer and on the Internet, often installed without the user's knowledge.

What is the first step involved in risk management?

Information Systems and People

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Databases and Datawarehouses

Information Systems for the Enterprise

The Web, E-Commerce, and M-Commerce

Business Intelligence and Decision Making

Collaborating With Technology

Knowledge Management and E-Learning

Systems Development and Procurement

Project Management and Strategic Planning

Filters