Question 1

An incidence response plan is created for the purpose of ________.

Accepted Answer

A) managing discussion forums efficiently 
B) responding to customers' feedback 
C) avoiding chaos and missteps 
D) improving communication modes 
A) managing discussion forums efficiently 
B) responding to customers' feedback 
C) avoiding chaos and missteps 
D) improving communication modes

Question 2

Which of the following is true of phishing?

Accepted Answer

A) It is the process of stealing personal data from a victim by convincing him to disclose information. 
B) It is useful in monitoring the web traffic into and out of an unsecured computer network. 
C) It involves the use of several thousand computers to launch malicious attacks that can cripple websites. 
D) It uses small pieces of code inserted into a browser that track an Internet user's activity and transmit the data to third parties. 
A) It is the process of stealing personal data from a victim by convincing him to disclose information. 
B) It is useful in monitoring the web traffic into and out of an unsecured computer network. 
C) It involves the use of several thousand computers to launch malicious attacks that can cripple websites. 
D) It uses small pieces of code inserted into a browser that track an Internet user's activity and transmit the data to third parties.

Question 3

Which of the following is true of public key encryption?

Accepted Answer

A) The encryption formulas used for creating the keys are simple in nature and identical at both ends. 
B) The encryption key is widely shared with everyone, while the decryption key is known only to the recipient. 
C) The private key is used for encryption and is known only to the sender, while the public key is freely distributed among everyone and is used for decryption. 
D) The public key encryption scheme uses a single key to encrypt data that can later be decrypted by using the encrypted data as the key. 
A) The encryption formulas used for creating the keys are simple in nature and identical at both ends. 
B) The encryption key is widely shared with everyone, while the decryption key is known only to the recipient. 
C) The private key is used for encryption and is known only to the sender, while the public key is freely distributed among everyone and is used for decryption. 
D) The public key encryption scheme uses a single key to encrypt data that can later be decrypted by using the encrypted data as the key.

Question 4

Which of the following principles is consistent with the natural laws and rights ethical framework?

Accepted Answer

A) First, do no harm 
B) Thou shalt not kill 
C) The greatest good for the greatest number 
D) The needs of the many outweigh the needs of the few 
A) First, do no harm 
B) Thou shalt not kill 
C) The greatest good for the greatest number 
D) The needs of the many outweigh the needs of the few

Question 5

What is intellectual property and what significance does it hold in an organization?

Accepted Answer

Intellectual property is a bedrock of an

Question 6

________ is an ethical framework that judges the morality of an action based on how well it adheres to broadly accepted rules, regardless of the action's actual consequences.

Accepted Answer

A) Utilitarianism 
B) Legal positivism 
C) Natural laws and rights 
D) Rationalism 
A) Utilitarianism 
B) Legal positivism 
C) Natural laws and rights 
D) Rationalism

Question 7

Which of the following is an accurate definition of a keylogger?

Accepted Answer

A) a process which helps a user increase productivity by deleting spam emails before they reach him 
B) a monitoring software that records a user's keystrokes 
C) software that prevents fraudsters from hacking into email accounts 
D) a program that controls permissions for web traffic into and out of a computer network 
A) a process which helps a user increase productivity by deleting spam emails before they reach him 
B) a monitoring software that records a user's keystrokes 
C) software that prevents fraudsters from hacking into email accounts 
D) a program that controls permissions for web traffic into and out of a computer network

Question 8

For which of the following purposes are botnets most likely to be used?

Accepted Answer

A) capturing Internet users' sensitive information 
B) attracting different types of malware to track their origins 
C) encrypting critical information to protect it from loss or corruption 
D) tracking and eliminating computer worms and viruses 
A) capturing Internet users' sensitive information 
B) attracting different types of malware to track their origins 
C) encrypting critical information to protect it from loss or corruption 
D) tracking and eliminating computer worms and viruses

Question 9

Which of the following is an accurate definition of digital rights management?

Accepted Answer

A) It deals with provisions that protect the privacy and security of individually identifiable health information. 
B) It refers to technologies that intellectual property owners use to control access to their digital content. 
C) It prohibits businesses from sending misleading or deceptive commercial emails, but denies recipients any legal digital recourse on their own. 
D) It establishes privacy rights over educational records. 
A) It deals with provisions that protect the privacy and security of individually identifiable health information. 
B) It refers to technologies that intellectual property owners use to control access to their digital content. 
C) It prohibits businesses from sending misleading or deceptive commercial emails, but denies recipients any legal digital recourse on their own. 
D) It establishes privacy rights over educational records.

Question 10

Social engineering refers to extracting confidential information from information systems through legal procedures.

Accepted Answer

A) True 
 B)False

Question 11

How does a firewall help in preventing intrusion into information systems?

Accepted Answer

Firewall is a technical control in an or

Question 12

________ are used to monitor email, web surfing, and other online communications in organizations.

Accepted Answer

A) Proxy servers 
B) Surveillance technologies 
C) Trojan horses 
D) Subnetworks 
A) Proxy servers 
B) Surveillance technologies 
C) Trojan horses 
D) Subnetworks

Question 13

What is digital rights management? Explain some challenges faced while using DRM schemes.

Accepted Answer

Digital rights management (DRM)refers to

Question 14

Discuss the pros and cons of anonymity in the online world.

Accepted Answer

Anonymity in the online world has severa

Question 15

________ helps in determining the cause of a security threat in an incidence response plan.

Accepted Answer

A) Reevaluating the risk matrix 
B) Investigating system logs 
C) Taking systems offline 
D) Restricting system access 
A) Reevaluating the risk matrix 
B) Investigating system logs 
C) Taking systems offline 
D) Restricting system access

Question 16

Which of the following administrative control actions helps enforce access controls in an organization?

Accepted Answer

A) The organization requires appropriate approvals for requests to establish accounts. 
B) The organization defines the security policy that determines what events require human review. 
C) The organization defines the information to be encrypted or stored offline in a secure location. 
D) The organization separates duties of individuals as necessary to prevent malevolent activity without collusion. 
A) The organization requires appropriate approvals for requests to establish accounts. 
B) The organization defines the security policy that determines what events require human review. 
C) The organization defines the information to be encrypted or stored offline in a secure location. 
D) The organization separates duties of individuals as necessary to prevent malevolent activity without collusion.

Question 17

Which of the following technologies serves as a biometric identifier for physical security?

Accepted Answer

A) iris configuration 
B) RFID chip 
C) credit card 
D) user ID-password combination 
A) iris configuration 
B) RFID chip 
C) credit card 
D) user ID-password combination

Question 18

Enforcing intellectual property laws becomes difficult when ________.

Accepted Answer

A) it is used for commercial purposes 
B) the protection of intellectual property involves immovable assets 
C) it is digitized 
D) it comprises tangible assets 
A) it is used for commercial purposes 
B) the protection of intellectual property involves immovable assets 
C) it is digitized 
D) it comprises tangible assets

Question 19

Which of the following is a reason why employers adopt surveillance technologies to track online communications?

Accepted Answer

A) to increase employee productivity 
B) to enable efficient data mining 
C) to prevent data redundancy 
D) to facilitate faster communication 
A) to increase employee productivity 
B) to enable efficient data mining 
C) to prevent data redundancy 
D) to facilitate faster communication

Question 20

Discuss social engineering and explain why humans are soft targets for social engineers.

Accepted Answer

Social engineering is the art of manipul

An incidence response plan is created for the purpose of ________.

Which of the following is true of phishing?

Which of the following is true of public key encryption?

Which of the following principles is consistent with the natural laws and rights ethical framework?

What is intellectual property and what significance does it hold in an organization?

________ is an ethical framework that judges the morality of an action based on how well it adheres to broadly accepted rules, regardless of the action's actual consequences.

Which of the following is an accurate definition of a keylogger?

For which of the following purposes are botnets most likely to be used?

Which of the following is an accurate definition of digital rights management?

Social engineering refers to extracting confidential information from information systems through legal procedures.

How does a firewall help in preventing intrusion into information systems?

________ are used to monitor email, web surfing, and other online communications in organizations.

What is digital rights management? Explain some challenges faced while using DRM schemes.

Discuss the pros and cons of anonymity in the online world.

________ helps in determining the cause of a security threat in an incidence response plan.

Which of the following administrative control actions helps enforce access controls in an organization?

Which of the following technologies serves as a biometric identifier for physical security?

Enforcing intellectual property laws becomes difficult when ________.

Which of the following is a reason why employers adopt surveillance technologies to track online communications?

Discuss social engineering and explain why humans are soft targets for social engineers.

Information Systems and People

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Databases and Datawarehouses

Information Systems for the Enterprise

The Web, E-Commerce, and M-Commerce

Business Intelligence and Decision Making

Collaborating With Technology

Knowledge Management and E-Learning

Systems Development and Procurement

Project Management and Strategic Planning

Filters

Exam 10: Ethics, Privacy, and Security

An incidence response plan is created for the purpose of ________.

Which of the following is true of phishing?

Which of the following is true of public key encryption?

Which of the following principles is consistent with the natural laws and rights ethical framework?

What is intellectual property and what significance does it hold in an organization?

________ is an ethical framework that judges the morality of an action based on how well it adheres to broadly accepted rules, regardless of the action's actual consequences.

Which of the following is an accurate definition of a keylogger?

For which of the following purposes are botnets most likely to be used?

Which of the following is an accurate definition of digital rights management?

Social engineering refers to extracting confidential information from information systems through legal procedures.

How does a firewall help in preventing intrusion into information systems?

________ are used to monitor email, web surfing, and other online communications in organizations.

What is digital rights management? Explain some challenges faced while using DRM schemes.

Discuss the pros and cons of anonymity in the online world.

________ helps in determining the cause of a security threat in an incidence response plan.

Which of the following administrative control actions helps enforce access controls in an organization?

Which of the following technologies serves as a biometric identifier for physical security?

Enforcing intellectual property laws becomes difficult when ________.

Which of the following is a reason why employers adopt surveillance technologies to track online communications?

Discuss social engineering and explain why humans are soft targets for social engineers.

Information Systems and People

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Databases and Datawarehouses

Information Systems for the Enterprise

The Web, E-Commerce, and M-Commerce

Business Intelligence and Decision Making

Collaborating With Technology

Knowledge Management and E-Learning

Systems Development and Procurement

Project Management and Strategic Planning

Filters