Question 1

Botnets function with the use of ________.

Accepted Answer

A) malware 
B) middleware 
C) application software 
D) firmware 
A) malware 
B) middleware 
C) application software 
D) firmware

Question 2

________ is a gateway service that permits users to log in once, with one specific user ID and password, to gain access to multiple software applications.

Accepted Answer

A) Single sign-on 
B) Canonical account 
C) Pre-shared key 
D) Shadow password 
A) Single sign-on 
B) Canonical account 
C) Pre-shared key 
D) Shadow password

Question 3

Which of the following administrative security controls is most likely to be adopted by a company which handles high-level sensitive information?

Accepted Answer

A) prohibiting downloading data to USB drives 
B) restricting employee access to official mails 
C) prohibiting public access to the company's website 
D) prohibiting entry of employees into shared workspaces 
A) prohibiting downloading data to USB drives 
B) restricting employee access to official mails 
C) prohibiting public access to the company's website 
D) prohibiting entry of employees into shared workspaces

Question 4

________ is a widely accepted ethical system that considers the greatest good for the greatest number and considers the consequences of an action, weighing its positive effects against its harmful ones.

Accepted Answer

A) Structuralism 
B) Individualism 
C) Utilitarianism 
D) Libertarianism 
A) Structuralism 
B) Individualism 
C) Utilitarianism 
D) Libertarianism

Question 5

________ makes it most difficult for a hacker to break into passwords.

Accepted Answer

A) Creating easy to remember passwords 
B) Reusing the same password in news and games sites through multiple systems 
C) Maintaining a single, secure password for all accounts 
D) Creating passwords with symbols, mixed cases, and characters 
A) Creating easy to remember passwords 
B) Reusing the same password in news and games sites through multiple systems 
C) Maintaining a single, secure password for all accounts 
D) Creating passwords with symbols, mixed cases, and characters

Question 6

Which of the following laws prohibits businesses from sending misleading or deceptive commercial emails, but denies recipients any legal recourse on their own?

Accepted Answer

A) CAN-SPAM Act 
B) Gramm-Leach-Bliley Act 
C) European Union's Data Protection Directive 
D) State Security Breach Notification Law 
A) CAN-SPAM Act 
B) Gramm-Leach-Bliley Act 
C) European Union's Data Protection Directive 
D) State Security Breach Notification Law

Question 7

A computer which is infected with malware and is added to a group's growing botnet is known as a zombie.

Accepted Answer

A) True 
 B)False

Question 8

What does the Family Educational Rights and Privacy Act stipulate?

Accepted Answer

A) protecting privacy rights of European students outside the continent 
B) establishing privacy rights over educational records 
C) prohibiting educational institutes from sending misleading or deceptive commercial emails to prospective students 
D) permitting transfer of private data to third parties to contribute toward educational processes 
A) protecting privacy rights of European students outside the continent 
B) establishing privacy rights over educational records 
C) prohibiting educational institutes from sending misleading or deceptive commercial emails to prospective students 
D) permitting transfer of private data to third parties to contribute toward educational processes

Question 9

A drawback of online anonymity is that it ________.

Accepted Answer

A) protects whistleblowers and oppressive governments 
B) increases inhibitions in online communication 
C) increases accountability of users 
D) protects spammers and imposters 
A) protects whistleblowers and oppressive governments 
B) increases inhibitions in online communication 
C) increases accountability of users 
D) protects spammers and imposters

Question 10

Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment of the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches?

Accepted Answer

A) understanding which information assets need protection 
B) evaluating controls and filling in security gaps 
C) predicting future risks and devising strategies to prevent them 
D) recovering existing assets from damage 
A) understanding which information assets need protection 
B) evaluating controls and filling in security gaps 
C) predicting future risks and devising strategies to prevent them 
D) recovering existing assets from damage

Question 11

The incidence response plan is used by organizational staff to categorize threats, determine the cause, preserve evidence, and get the systems back online.

Accepted Answer

A) True 
 B)False

Question 12

Which of the following authentication strategies is the easiest to compromise or crack?

Accepted Answer

A) iris configuration 
B) reliance on user knowledge 
C) fingerprint analysis 
D) voice pattern recognition 
A) iris configuration 
B) reliance on user knowledge 
C) fingerprint analysis 
D) voice pattern recognition

Question 13

The term ________ refers to a seemingly harmless or useful program that installs malicious code allowing remote access to a computer, as for a botnet.

Accepted Answer

A) honeypot 
B) Trojan horse 
C) firewall 
D) black swan 
A) honeypot 
B) Trojan horse 
C) firewall 
D) black swan

Question 14

Which of the following provisions does the Gramm-Leach-Bliley Act make?

Accepted Answer

A) limiting the disclosure of personally identifiable information that is maintained by state departments of motor vehicles 
B) stipulating how financial institutions are required to protect the privacy of consumers' financial information and notify them of their privacy policies 
C) prohibiting businesses from sending misleading or deceptive commercial emails but denying recipients any legal recourse on their own 
D) establishing provisions to protect the privacy and security of individually identifiable health information 
A) limiting the disclosure of personally identifiable information that is maintained by state departments of motor vehicles 
B) stipulating how financial institutions are required to protect the privacy of consumers' financial information and notify them of their privacy policies 
C) prohibiting businesses from sending misleading or deceptive commercial emails but denying recipients any legal recourse on their own 
D) establishing provisions to protect the privacy and security of individually identifiable health information

Question 15

A cognitive obstacle to strong passwords is the limited capacity of human memory.

Accepted Answer

A) True 
 B)False

Question 16

Honeypots are human-made threats that barrage servers and computers every day with automated attempts to install all types of malware.

Accepted Answer

A) True 
 B)False

Question 17

Which of the following is a drawback of using a proxy server to ensure online anonymity?

Accepted Answer

A) the parasitic and unauthorized use of hundreds of computer systems owned by individuals for masking online identity 
B) the lack of uniform and binding legislation across different countries that determines the legality of using proxy servers 
C) the need to rely on the promise of the company that operates the proxy to protect its customers' identities 
D) the inability to consistently ensure online anonymity, especially when government agencies are among the parties involved 
A) the parasitic and unauthorized use of hundreds of computer systems owned by individuals for masking online identity 
B) the lack of uniform and binding legislation across different countries that determines the legality of using proxy servers 
C) the need to rely on the promise of the company that operates the proxy to protect its customers' identities 
D) the inability to consistently ensure online anonymity, especially when government agencies are among the parties involved

Question 18

Which of the following is an advantage of online anonymity?

Accepted Answer

A) It increases individuals' accountability and makes them feel responsible for their own actions. 
B) It helps in the prosecution of spammers, astroturfers, and other cyber criminals. 
C) It helps people participate in face-to-face meetings where they reveal personal details without fear of disclosure. 
D) It protects corporate whistleblowers and political activists in oppressive regimes. 
A) It increases individuals' accountability and makes them feel responsible for their own actions. 
B) It helps in the prosecution of spammers, astroturfers, and other cyber criminals. 
C) It helps people participate in face-to-face meetings where they reveal personal details without fear of disclosure. 
D) It protects corporate whistleblowers and political activists in oppressive regimes.

Question 19

Which of the following is a negative impact of surveillance in online communications?

Accepted Answer

A) lowered productivity of employees 
B) compromised company security 
C) increased levels of confidentiality 
D) increased pressure on corporate email systems 
A) lowered productivity of employees 
B) compromised company security 
C) increased levels of confidentiality 
D) increased pressure on corporate email systems

Question 20

Liability is a powerful driver for surveillance as employers are held responsible for employees' offensive emails or web-surfing habits.

Accepted Answer

A) True 
 B)False

Botnets function with the use of ________.

________ is a gateway service that permits users to log in once, with one specific user ID and password, to gain access to multiple software applications.

Which of the following administrative security controls is most likely to be adopted by a company which handles high-level sensitive information?

________ is a widely accepted ethical system that considers the greatest good for the greatest number and considers the consequences of an action, weighing its positive effects against its harmful ones.

________ makes it most difficult for a hacker to break into passwords.

Which of the following laws prohibits businesses from sending misleading or deceptive commercial emails, but denies recipients any legal recourse on their own?

A computer which is infected with malware and is added to a group's growing botnet is known as a zombie.

What does the Family Educational Rights and Privacy Act stipulate?

A drawback of online anonymity is that it ________.

Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment of the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches?

The incidence response plan is used by organizational staff to categorize threats, determine the cause, preserve evidence, and get the systems back online.

Which of the following authentication strategies is the easiest to compromise or crack?

The term ________ refers to a seemingly harmless or useful program that installs malicious code allowing remote access to a computer, as for a botnet.

Which of the following provisions does the Gramm-Leach-Bliley Act make?

A cognitive obstacle to strong passwords is the limited capacity of human memory.

Honeypots are human-made threats that barrage servers and computers every day with automated attempts to install all types of malware.

Which of the following is a drawback of using a proxy server to ensure online anonymity?

Which of the following is an advantage of online anonymity?

Which of the following is a negative impact of surveillance in online communications?

Liability is a powerful driver for surveillance as employers are held responsible for employees' offensive emails or web-surfing habits.

Information Systems and People

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Databases and Datawarehouses

Information Systems for the Enterprise

The Web, E-Commerce, and M-Commerce

Business Intelligence and Decision Making

Collaborating With Technology

Knowledge Management and E-Learning

Systems Development and Procurement

Project Management and Strategic Planning

Filters

Exam 10: Ethics, Privacy, and Security

Botnets function with the use of ________.

________ is a gateway service that permits users to log in once, with one specific user ID and password, to gain access to multiple software applications.

Which of the following administrative security controls is most likely to be adopted by a company which handles high-level sensitive information?

________ is a widely accepted ethical system that considers the greatest good for the greatest number and considers the consequences of an action, weighing its positive effects against its harmful ones.

________ makes it most difficult for a hacker to break into passwords.

Which of the following laws prohibits businesses from sending misleading or deceptive commercial emails, but denies recipients any legal recourse on their own?

A computer which is infected with malware and is added to a group's growing botnet is known as a zombie.

What does the Family Educational Rights and Privacy Act stipulate?

A drawback of online anonymity is that it ________.

Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment of the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches?

The incidence response plan is used by organizational staff to categorize threats, determine the cause, preserve evidence, and get the systems back online.

Which of the following authentication strategies is the easiest to compromise or crack?

The term ________ refers to a seemingly harmless or useful program that installs malicious code allowing remote access to a computer, as for a botnet.

Which of the following provisions does the Gramm-Leach-Bliley Act make?

A cognitive obstacle to strong passwords is the limited capacity of human memory.

Honeypots are human-made threats that barrage servers and computers every day with automated attempts to install all types of malware.

Which of the following is a drawback of using a proxy server to ensure online anonymity?

Which of the following is an advantage of online anonymity?

Which of the following is a negative impact of surveillance in online communications?

Liability is a powerful driver for surveillance as employers are held responsible for employees' offensive emails or web-surfing habits.

Information Systems and People

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Databases and Datawarehouses

Information Systems for the Enterprise

The Web, E-Commerce, and M-Commerce

Business Intelligence and Decision Making

Collaborating With Technology

Knowledge Management and E-Learning

Systems Development and Procurement

Project Management and Strategic Planning

Filters