Question 1

________ are used to create digital signatures.

Accepted Answer

A) Asymmetric encryption and hashing 
B) Hashing and packet filtering 
C) Packet filtering and encryption 
D) Symmetric encryption and hashing 
A) Asymmetric encryption and hashing 
B) Hashing and packet filtering 
C) Packet filtering and encryption 
D) Symmetric encryption and hashing

Question 2

Explain the controls that organizations can use to protect the privacy of personal information they collect from customers, suppliers, and employees, and discuss how the Generally Accepted Privacy Principles (GAPP) framework provides guidance in developing a comprehensive approach to protecting privacy.
-A client approached Paxton Uffe and said,"Paxton,I need for my customers to make payments online using credit cards,but I want to make sure that the credit card data isn't intercepted.What do you suggest?" Paxton responded,"The most effective solution is to implement

Accepted Answer

A) a data masking program." 
B) a virtual private network." 
C) a private cloud environment." 
D) an encryption system with digital signatures." 
A) a data masking program." 
B) a virtual private network." 
C) a private cloud environment." 
D) an encryption system with digital signatures."

Question 3

The first steps in protecting the privacy of personal information is to identify

Accepted Answer

A) what sensitive information is possessed by the organization. 
B) where sensitive information is stored. 
C) who has access to sensitive information. 
D) All of the above are first steps in protecting privacy. 
A) what sensitive information is possessed by the organization. 
B) where sensitive information is stored. 
C) who has access to sensitive information. 
D) All of the above are first steps in protecting privacy.

Question 4

You are assisting a manager from your company's headquarters in New York.The manager needs to interact online in real time with one of your company's affiliate overseas.The manager wants to make sure that her communications with the overseas affiliate won't be intercepted.What should you suggest to the manager?

Accepted Answer

A) A virtual private network connection. 
B) A multifactor authentication network connection. 
C) A private cloud network connection. 
D) An asymmetric encryption system with digital signatures connection. 
A) A virtual private network connection. 
B) A multifactor authentication network connection. 
C) A private cloud network connection. 
D) An asymmetric encryption system with digital signatures connection.

Question 5

Identify the type of information below that is least likely to be considered confidential by an organization.

Accepted Answer

A) Audited financial statements. 
B) Legal documents. 
C) Top executives' salaries. 
D) New product development plans. 
A) Audited financial statements. 
B) Legal documents. 
C) Top executives' salaries. 
D) New product development plans.

Question 6

Which of the following descriptions is not associated with symmetric encryption?

Accepted Answer

A) A shared secret key. 
B) Faster encryption. 
C) Lack of authentication. 
D) Separate keys for each communication party. 
A) A shared secret key. 
B) Faster encryption. 
C) Lack of authentication. 
D) Separate keys for each communication party.

Question 7

Information rights management software can do all of the following except

Accepted Answer

A) limiting access to specific files. 
B) limit action privileges to a specific time period. 
C) authenticate individuals accessing information. 
D) specify the actions individuals granted access to information can perform. 
A) limiting access to specific files. 
B) limit action privileges to a specific time period. 
C) authenticate individuals accessing information. 
D) specify the actions individuals granted access to information can perform.

Question 8

A process that takes plaintext of any length and transforms it into a short code is called

Accepted Answer

A) asymmetric encryption. 
B) encryption. 
C) hashing. 
D) symmetric encryption. 
A) asymmetric encryption. 
B) encryption. 
C) hashing. 
D) symmetric encryption.

Question 9

Asymmetric key encryption combined with the information provided by a certificate authority allows unique identification of

Accepted Answer

A) the user of encrypted data. 
B) the provider of encrypted data. 
C) both the user and the provider of encrypted data. 
D) either the user or the provider of encrypted data. 
A) the user of encrypted data. 
B) the provider of encrypted data. 
C) both the user and the provider of encrypted data. 
D) either the user or the provider of encrypted data.

Question 10

If an organization asks you to disclose your date of birth and your address,but refuses to let you review or correct the information you provided,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A) Collection. 
B) Access. 
C) Security. 
D) Choice and consent. 
A) Collection. 
B) Access. 
C) Security. 
D) Choice and consent.

Question 11

CAN-SPAM applies to both commercial and personal e-mail.

Accepted Answer

A) True 
 B)False

Question 12

Compare the advantages and disadvantage of symmetric and asymmetric encryption.

Accepted Answer

The advantage of symmetric encryption is

Question 13

If an organization asks you to disclose your social security number,but decides to use it for a different purpose than the one stated in the organization's privacy policies,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A) Collection. 
B) Access. 
C) Security. 
D) Quality. 
A) Collection. 
B) Access. 
C) Security. 
D) Quality.

Question 14

An electronic document that certifies the identity of the owner of a particular public key.

Accepted Answer

A) Asymmetric encryption. 
B) Digital certificate. 
C) Digital signature. 
D) Public key. 
A) Asymmetric encryption. 
B) Digital certificate. 
C) Digital signature. 
D) Public key.

Question 15

If an organization asks you to disclose your social security number,yet fails to permit you to opt-out before you provide the information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A) Management. 
B) Notice. 
C) Choice and consent. 
D) Use and retention. 
A) Management. 
B) Notice. 
C) Choice and consent. 
D) Use and retention.

Question 16

After the information that needs to be protected has been identified,what step should be completed next?

Accepted Answer

A) The information needs to be placed in a secure, central area. 
B) The information needs to be encrypted. 
C) The information needs to be classified in terms of its value to the organization. 
D) The information needs to be depreciated. 
A) The information needs to be placed in a secure, central area. 
B) The information needs to be encrypted. 
C) The information needs to be classified in terms of its value to the organization. 
D) The information needs to be depreciated.

Question 17

Cindy Vindoolo logged on to her e-mail account to find that she had received 50 e-mails from a company called LifeCo that promised her extreme weight loss if she bought their diet pills.Cindy angrily deleted all 50 e-mails,realizing she was a victim of

Accepted Answer

A) telemarketing. 
B) spam. 
C) direct mail. 
D) MLM. 
A) telemarketing. 
B) spam. 
C) direct mail. 
D) MLM.

Question 18

Encryption is not a panacea to protecting confidential information.

Accepted Answer

A) True 
 B)False

Question 19

Using a combination of symmetric and asymmetric key encryption,Sofia sent a report to her home office in Indiana.She received an e-mail acknowledgement that her report had been received,but a few minutes later she received a second e-mail that contained a different hash total than the one associated with her report.This most likely explanation for this result is that

Accepted Answer

A) the public key had been compromised. 
B) the private key had been compromised. 
C) the symmetric encryption key had been compromised. 
D) the asymmetric encryption key had been compromised. 
A) the public key had been compromised. 
B) the private key had been compromised. 
C) the symmetric encryption key had been compromised. 
D) the asymmetric encryption key had been compromised.

Question 20

Identify the first step in protecting the confidentiality of intellectual property below.

Accepted Answer

A) Identifying who has access to the intellectual property. 
B) Identifying the means necessary to protect the intellectual property. 
C) Identifying the weaknesses surrounding the creation of the intellectual property. 
D) Identifying what controls should be placed around the intellectual property. 
A) Identifying who has access to the intellectual property. 
B) Identifying the means necessary to protect the intellectual property. 
C) Identifying the weaknesses surrounding the creation of the intellectual property. 
D) Identifying what controls should be placed around the intellectual property.

________ are used to create digital signatures.

The first steps in protecting the privacy of personal information is to identify

Identify the type of information below that is least likely to be considered confidential by an organization.

Which of the following descriptions is not associated with symmetric encryption?

Information rights management software can do all of the following except

A process that takes plaintext of any length and transforms it into a short code is called

Asymmetric key encryption combined with the information provided by a certificate authority allows unique identification of

If an organization asks you to disclose your date of birth and your address,but refuses to let you review or correct the information you provided,the organization has likely violated which of the Generally Accepted Privacy Principles?

CAN-SPAM applies to both commercial and personal e-mail.

Compare the advantages and disadvantage of symmetric and asymmetric encryption.

If an organization asks you to disclose your social security number,but decides to use it for a different purpose than the one stated in the organization's privacy policies,the organization has likely violated which of the Generally Accepted Privacy Principles?

An electronic document that certifies the identity of the owner of a particular public key.

If an organization asks you to disclose your social security number,yet fails to permit you to opt-out before you provide the information,the organization has likely violated which of the Generally Accepted Privacy Principles?

After the information that needs to be protected has been identified,what step should be completed next?

Cindy Vindoolo logged on to her e-mail account to find that she had received 50 e-mails from a company called LifeCo that promised her extreme weight loss if she bought their diet pills.Cindy angrily deleted all 50 e-mails,realizing she was a victim of

Encryption is not a panacea to protecting confidential information.

Identify the first step in protecting the confidentiality of intellectual property below.

Conceptual Foundations of Accounting Information Systems

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Controls for Information Security

Processing Integrity and Availability Controls

Auditing Computer-Based Information Systems

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, implementation, and Operation

Filters

Exam 9: Confidentiality and Privacy Controls

________ are used to create digital signatures.

The first steps in protecting the privacy of personal information is to identify

Identify the type of information below that is least likely to be considered confidential by an organization.

Which of the following descriptions is not associated with symmetric encryption?

Information rights management software can do all of the following except

A process that takes plaintext of any length and transforms it into a short code is called

Asymmetric key encryption combined with the information provided by a certificate authority allows unique identification of

If an organization asks you to disclose your date of birth and your address,but refuses to let you review or correct the information you provided,the organization has likely violated which of the Generally Accepted Privacy Principles?

CAN-SPAM applies to both commercial and personal e-mail.

Compare the advantages and disadvantage of symmetric and asymmetric encryption.

If an organization asks you to disclose your social security number,but decides to use it for a different purpose than the one stated in the organization's privacy policies,the organization has likely violated which of the Generally Accepted Privacy Principles?

An electronic document that certifies the identity of the owner of a particular public key.

If an organization asks you to disclose your social security number,yet fails to permit you to opt-out before you provide the information,the organization has likely violated which of the Generally Accepted Privacy Principles?

After the information that needs to be protected has been identified,what step should be completed next?

Cindy Vindoolo logged on to her e-mail account to find that she had received 50 e-mails from a company called LifeCo that promised her extreme weight loss if she bought their diet pills.Cindy angrily deleted all 50 e-mails,realizing she was a victim of

Encryption is not a panacea to protecting confidential information.

Identify the first step in protecting the confidentiality of intellectual property below.

Conceptual Foundations of Accounting Information Systems

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Controls for Information Security

Processing Integrity and Availability Controls

Auditing Computer-Based Information Systems

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, implementation, and Operation

Filters