Question 1

The first steps in protecting the privacy of personal information is to identify

Accepted Answer

A) what sensitive information is possessed by the organization. 
B) where sensitive information is stored. 
C) who has access to sensitive information. 
D) All of the above are first steps in protecting privacy. 
A) what sensitive information is possessed by the organization. 
B) where sensitive information is stored. 
C) who has access to sensitive information. 
D) All of the above are first steps in protecting privacy. D

Question 2

Identify the last step in protecting the confidentiality of intellectual property below.

Accepted Answer

A) Encrypt the information. 
B) Control access to the information. 
C) Train employees to properly handle the information. 
D) Identify and classify the information to be protected. 
A) Encrypt the information. 
B) Control access to the information. 
C) Train employees to properly handle the information. 
D) Identify and classify the information to be protected. C

Question 3

Data masking is also referred to as

Accepted Answer

A) encryption. 
B) tokenization. 
C) captcha. 
D) cookies. 
A) encryption. 
B) tokenization. 
C) captcha. 
D) cookies. B

Question 4

If an organization asks you to disclose your date of birth and your address,but fails to take any steps to protect your private information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A) Collection. 
B) Access. 
C) Security. 
D) Quality. 
A) Collection. 
B) Access. 
C) Security. 
D) Quality.

Question 5

Identify the first step in protecting the confidentiality of intellectual property below.

Accepted Answer

A) Identifying who has access to the intellectual property. 
B) Identifying the means necessary to protect the intellectual property. 
C) Identifying the weaknesses surrounding the creation of the intellectual property. 
D) Identifying what controls should be placed around the intellectual property. 
A) Identifying who has access to the intellectual property. 
B) Identifying the means necessary to protect the intellectual property. 
C) Identifying the weaknesses surrounding the creation of the intellectual property. 
D) Identifying what controls should be placed around the intellectual property.

Question 6

Which type of software blocks outgoing messages containing key words or phrases associated with an organization's sensitive data?

Accepted Answer

A) Anti-virus software. 
B) Data loss prevention software. 
C) A digital watermark. 
D) Information rights software. 
A) Anti-virus software. 
B) Data loss prevention software. 
C) A digital watermark. 
D) Information rights software.

Question 7

Encryption has a remarkably long and varied history.The invention of writing was apparently soon followed by a desire to conceal messages.One of the methods,was the simple substitution of numbers for letters,for example A = 1,B = 2,etc.This is an example of

Accepted Answer

A) a hashing algorithm. 
B) symmetric key encryption. 
C) asymmetric key encryption. 
D) a public key. 
A) a hashing algorithm. 
B) symmetric key encryption. 
C) asymmetric key encryption. 
D) a public key.

Question 8

Describe symmetric encryption and identify three limitations.

Accepted Answer

Symmetric encryption systems use the sam

Question 9

Which of the following is not one of the basic actions that an organization must take to preserve the confidentiality of sensitive information?

Accepted Answer

A) Identification of information to be protected. 
B) Backing up the information. 
C) Controlling access to the information. 
D) Training. 
A) Identification of information to be protected. 
B) Backing up the information. 
C) Controlling access to the information. 
D) Training.

Question 10

Identify the type of information below that is least likely to be considered confidential by an organization.

Accepted Answer

A) Audited financial statements. 
B) Legal documents. 
C) Top executives' salaries. 
D) New product development plans. 
A) Audited financial statements. 
B) Legal documents. 
C) Top executives' salaries. 
D) New product development plans.

Question 11

Identify one weakness of encryption below.

Accepted Answer

A) Encrypted packets cannot be examined by a firewall. 
B) Encryption provides for both authentication and non-repudiation. 
C) Encryption protects the privacy of information during transmission. 
D) Encryption protects the confidentiality of information while in storage. 
A) Encrypted packets cannot be examined by a firewall. 
B) Encryption provides for both authentication and non-repudiation. 
C) Encryption protects the privacy of information during transmission. 
D) Encryption protects the confidentiality of information while in storage.

Question 12

Which of the following is not true regarding virtual private networks (VPN)?

Accepted Answer

A) VPNs provide the functionality of a privately owned network using the Internet. 
B) Using VPN software to encrypt information while it is in transit over the Internet in effect creates private communication channels,often referred to as tunnels,which are accessible only to those parties possessing the appropriate encryption and decryption keys. 
C) It is more expensive to reconfigure VPNs to include new sites than it is to add or remove the corresponding physical connections in a privately owned network. 
D) The cost of the VPN software is much less than the cost of leasing or buying the infrastructure (telephone lines,satellite links,communications equipment,etc. )needed to create a privately owned secure communications network. 
A) VPNs provide the functionality of a privately owned network using the Internet. 
B) Using VPN software to encrypt information while it is in transit over the Internet in effect creates private communication channels,often referred to as tunnels,which are accessible only to those parties possessing the appropriate encryption and decryption keys. 
C) It is more expensive to reconfigure VPNs to include new sites than it is to add or remove the corresponding physical connections in a privately owned network. 
D) The cost of the VPN software is much less than the cost of leasing or buying the infrastructure (telephone lines,satellite links,communications equipment,etc. )needed to create a privately owned secure communications network.

Question 13

Identify the item below which is not a piece of legislation passed to protect individuals against identity theft or to secure individuals' privacy.

Accepted Answer

A) The Health Insurance Portability and Accountability Act (HIPA
A) . 
B) The Health Information Technology for Economic and Clinical Health Act (HITECH). 
C) The Gramm--Leach--Bliley Act. 
D) The Dodd-Frank Act. 
A) The Health Insurance Portability and Accountability Act (HIPA
A) . 
B) The Health Information Technology for Economic and Clinical Health Act (HITECH). 
C) The Gramm--Leach--Bliley Act. 
D) The Dodd-Frank Act.

Question 14

You are assisting a manager from your company's headquarters in New York.The manager needs to interact online in real time with one of your company's affiliate overseas.The manager wants to make sure that her communications with the overseas affiliate won't be intercepted.What should you suggest to the manager?

Accepted Answer

A) A virtual private network connection. 
B) A multifactor authentication network connection. 
C) A private cloud network connection. 
D) An asymmetric encryption system with digital signatures connection. 
A) A virtual private network connection. 
B) A multifactor authentication network connection. 
C) A private cloud network connection. 
D) An asymmetric encryption system with digital signatures connection.

Question 15

The creation of a digital signature is a two-step process.

Accepted Answer

A) True 
 B)False

Question 16

Using a combination of symmetric and asymmetric key encryption,Sofia sent a report to her home office in Indiana.She received an e-mail acknowledgement that her report had been received,but a few minutes later she received a second e-mail that contained a different hash total than the one associated with her report.This most likely explanation for this result is that

Accepted Answer

A) the public key had been compromised. 
B) the private key had been compromised. 
C) the symmetric encryption key had been compromised. 
D) the asymmetric encryption key had been compromised. 
A) the public key had been compromised. 
B) the private key had been compromised. 
C) the symmetric encryption key had been compromised. 
D) the asymmetric encryption key had been compromised.

Question 17

Encryption is a necessary part of which information security approach?

Accepted Answer

A) Defense in depth. 
B) Time based defense. 
C) Continuous monitoring. 
D) Synthetic based defense. 
A) Defense in depth. 
B) Time based defense. 
C) Continuous monitoring. 
D) Synthetic based defense.

Question 18

Discuss the most important control for protecting confidentiality.

Accepted Answer

Training is arguably the most important

Question 19

If an organization asks you to disclose your social security number,yet fails to properly dispose of your private information once it has fulfilled its purpose,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A) Management. 
B) Notice. 
C) Choice and consent. 
D) Use and retention. 
A) Management. 
B) Notice. 
C) Choice and consent. 
D) Use and retention.

Question 20

Abbie Johnson is a programmer at Healtheast network.Abbie has recently developed a new computer program for Healtheast.As part of the testing process,Abbie needs to use realistic patients data to ensure that the system is working properly.To protect privacy,management at Healtheast uses a program that replaces private patient information with fake values before sending the data to Abbie for testing.The program that replaces patient information with fake values is called

Accepted Answer

A) data encryptioning. 
B) data masking. 
C) data wiping. 
D) data redacting. 
A) data encryptioning. 
B) data masking. 
C) data wiping. 
D) data redacting.

The first steps in protecting the privacy of personal information is to identify

Identify the last step in protecting the confidentiality of intellectual property below.

Data masking is also referred to as

If an organization asks you to disclose your date of birth and your address,but fails to take any steps to protect your private information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Identify the first step in protecting the confidentiality of intellectual property below.

Which type of software blocks outgoing messages containing key words or phrases associated with an organization's sensitive data?

Encryption has a remarkably long and varied history.The invention of writing was apparently soon followed by a desire to conceal messages.One of the methods,was the simple substitution of numbers for letters,for example A = 1,B = 2,etc.This is an example of

Describe symmetric encryption and identify three limitations.

Which of the following is not one of the basic actions that an organization must take to preserve the confidentiality of sensitive information?

Identify the type of information below that is least likely to be considered confidential by an organization.

Identify one weakness of encryption below.

Which of the following is not true regarding virtual private networks (VPN)?

Identify the item below which is not a piece of legislation passed to protect individuals against identity theft or to secure individuals' privacy.

The creation of a digital signature is a two-step process.

Encryption is a necessary part of which information security approach?

Discuss the most important control for protecting confidentiality.

If an organization asks you to disclose your social security number,yet fails to properly dispose of your private information once it has fulfilled its purpose,the organization has likely violated which of the Generally Accepted Privacy Principles?

Conceptual Foundations of Accounting Information Systems

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Controls for Information Security

Processing Integrity and Availability Controls

Auditing Computer-Based Information Systems

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, implementation, and Operation

Filters

Exam 9: Confidentiality and Privacy Controls

The first steps in protecting the privacy of personal information is to identify

Identify the last step in protecting the confidentiality of intellectual property below.

Data masking is also referred to as

If an organization asks you to disclose your date of birth and your address,but fails to take any steps to protect your private information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Identify the first step in protecting the confidentiality of intellectual property below.

Which type of software blocks outgoing messages containing key words or phrases associated with an organization's sensitive data?

Encryption has a remarkably long and varied history.The invention of writing was apparently soon followed by a desire to conceal messages.One of the methods,was the simple substitution of numbers for letters,for example A = 1,B = 2,etc.This is an example of

Describe symmetric encryption and identify three limitations.

Which of the following is not one of the basic actions that an organization must take to preserve the confidentiality of sensitive information?

Identify the type of information below that is least likely to be considered confidential by an organization.

Identify one weakness of encryption below.

Which of the following is not true regarding virtual private networks (VPN)?

Identify the item below which is not a piece of legislation passed to protect individuals against identity theft or to secure individuals' privacy.

The creation of a digital signature is a two-step process.

Encryption is a necessary part of which information security approach?

Discuss the most important control for protecting confidentiality.

If an organization asks you to disclose your social security number,yet fails to properly dispose of your private information once it has fulfilled its purpose,the organization has likely violated which of the Generally Accepted Privacy Principles?

Conceptual Foundations of Accounting Information Systems

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Controls for Information Security

Processing Integrity and Availability Controls

Auditing Computer-Based Information Systems

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, implementation, and Operation

Filters