Question 1

Text that was transformed into unreadable gibberish using encryption is called

Accepted Answer

A) plaintext. 
B) ciphertext. 
C) encryption text. 
D) private text. 
A) plaintext. 
B) ciphertext. 
C) encryption text. 
D) private text.

Question 2

A laptop computer belonging to the Novak group was stolen from the trunk of a sales manager's car while she was attending a conference.After reporting the theft,the manager considered the implications for the company's network security and concluded there was little to worry about because

Accepted Answer

A) the computer was insured against theft. 
B) the computer was protected by a password. 
C) the data stored on the computer was encrypted. 
D) it was unlikely that the thief would know how to access the company data stored on the computer. 
A) the computer was insured against theft. 
B) the computer was protected by a password. 
C) the data stored on the computer was encrypted. 
D) it was unlikely that the thief would know how to access the company data stored on the computer.

Question 3

Which type of software provides an additional layer of protection to sensitive information that is stored in digital format,offering the capability not only to limit access to specific files or documents but also to specify the actions that individuals who are granted access to that resource can perform?

Accepted Answer

A) Anti-virus software. 
B) Data loss prevention software. 
C) A digital watermark. 
D) Information rights software. 
A) Anti-virus software. 
B) Data loss prevention software. 
C) A digital watermark. 
D) Information rights software.

Question 4

Encryption has a remarkably long and varied history.The invention of writing was apparently soon followed by a desire to conceal messages.One of the methods,was the simple substitution of numbers for letters,for example A = 1,B = 2,etc.This is an example of

Accepted Answer

A) a hashing algorithm. 
B) symmetric key encryption. 
C) asymmetric key encryption. 
D) a public key. 
A) a hashing algorithm. 
B) symmetric key encryption. 
C) asymmetric key encryption. 
D) a public key.

Question 5

Abbie Johnson is a programmer at Healtheast network.Abbie has recently developed a new computer program for Healtheast.As part of the testing process,Abbie needs to use realistic patients data to ensure that the system is working properly.To protect privacy,management at Healtheast uses a program that replaces private patient information with fake values before sending the data to Abbie for testing.The program that replaces patient information with fake values is called

Accepted Answer

A) data encryptioning. 
B) data masking. 
C) data wiping. 
D) data redacting. 
A) data encryptioning. 
B) data masking. 
C) data wiping. 
D) data redacting.

Question 6

If an organization asks you to disclose your social security number,but fails to tell you about its privacy policies and practices,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A) Management. 
B) Notice. 
C) Choice and consent. 
D) Use and retention. 
A) Management. 
B) Notice. 
C) Choice and consent. 
D) Use and retention.

Question 7

Identify the item below which is not a piece of legislation passed to protect individuals against identity theft or to secure individuals' privacy.

Accepted Answer

A) The Health Insurance Portability and Accountability Act (HIPA
A) . 
B) The Health Information Technology for Economic and Clinical Health Act (HITECH). 
C) The Gramm--Leach--Bliley Act. 
D) The Dodd-Frank Act. 
A) The Health Insurance Portability and Accountability Act (HIPA
A) . 
B) The Health Information Technology for Economic and Clinical Health Act (HITECH). 
C) The Gramm--Leach--Bliley Act. 
D) The Dodd-Frank Act.

Question 8

If an organization asks you to disclose your social security number,but fails to establish a set of procedures and policies for protecting your privacy,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A) Management. 
B) Notice. 
C) Choice and consent. 
D) Use and retention. 
A) Management. 
B) Notice. 
C) Choice and consent. 
D) Use and retention.

Question 9

Which of the following is not one of the basic actions that an organization must take to preserve the confidentiality of sensitive information?

Accepted Answer

A) Identification of information to be protected. 
B) Backing up the information. 
C) Controlling access to the information. 
D) Training. 
A) Identification of information to be protected. 
B) Backing up the information. 
C) Controlling access to the information. 
D) Training.

Question 10

In a private key system the sender and the receiver have ________,and in the public key system they have ________.

Accepted Answer

A) different keys; the same key 
B) a decrypting algorithm; an encrypting algorithm 
C) the same key; two separate keys 
D) an encrypting algorithm; a decrypting algorithm 
A) different keys; the same key 
B) a decrypting algorithm; an encrypting algorithm 
C) the same key; two separate keys 
D) an encrypting algorithm; a decrypting algorithm

Question 11

Data masking is also referred to as

Accepted Answer

A) encryption. 
B) tokenization. 
C) captcha. 
D) cookies. 
A) encryption. 
B) tokenization. 
C) captcha. 
D) cookies.

Question 12

What confidentiality and security risk does using VoIP present to organizations?

Accepted Answer

A) Internet e-mail communications can be intercepted. 
B) Internet photographs can be intercepted. 
C) Internet video can be intercepted. 
D) Internet voice conversations can be intercepted. 
A) Internet e-mail communications can be intercepted. 
B) Internet photographs can be intercepted. 
C) Internet video can be intercepted. 
D) Internet voice conversations can be intercepted.

Question 13

Which systems use the same key to encrypt communications and to decrypt communications?

Accepted Answer

A) Asymmetric encryption. 
B) Symmetric encryption. 
C) Hashing encryption. 
D) Public key encryption 
A) Asymmetric encryption. 
B) Symmetric encryption. 
C) Hashing encryption. 
D) Public key encryption

Question 14

Encryption is a necessary part of which information security approach?

Accepted Answer

A) Defense in depth. 
B) Time based defense. 
C) Continuous monitoring. 
D) Synthetic based defense. 
A) Defense in depth. 
B) Time based defense. 
C) Continuous monitoring. 
D) Synthetic based defense.

Question 15

Discuss the most important control for protecting confidentiality.

Accepted Answer

Training is arguably the most important

Question 16

Under CAN-SPAM legislation,an organization that receives an opt-out request from an individual has ________ days to implement steps to ensure they do not send out any additional unsolicited e-mail to the individual again.

Accepted Answer

A) 2 
B) 5 
C) 7 
D) 10 
A) 2 
B) 5 
C) 7 
D) 10

Question 17

If an organization asks you to disclose your date of birth and your address,but fails to take any steps to protect your private information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A) Collection. 
B) Access. 
C) Security. 
D) Quality. 
A) Collection. 
B) Access. 
C) Security. 
D) Quality.

Question 18

Encryption is one of the many ways to protect information in transit over the internet.

Accepted Answer

A) True 
 B)False

Question 19

All of the following are associated with asymmetric encryption except

Accepted Answer

A) speed. 
B) private keys. 
C) public keys. 
D) no need for key exchange. 
A) speed. 
B) private keys. 
C) public keys. 
D) no need for key exchange.

Question 20

Classification of confidential information is the responsibility of whom,according to COBIT5?

Accepted Answer

A) External auditor. 
B) Information owner. 
C) IT security professionals. 
D) Management. 
A) External auditor. 
B) Information owner. 
C) IT security professionals. 
D) Management.

Text that was transformed into unreadable gibberish using encryption is called

A laptop computer belonging to the Novak group was stolen from the trunk of a sales manager's car while she was attending a conference.After reporting the theft,the manager considered the implications for the company's network security and concluded there was little to worry about because

Encryption has a remarkably long and varied history.The invention of writing was apparently soon followed by a desire to conceal messages.One of the methods,was the simple substitution of numbers for letters,for example A = 1,B = 2,etc.This is an example of

If an organization asks you to disclose your social security number,but fails to tell you about its privacy policies and practices,the organization has likely violated which of the Generally Accepted Privacy Principles?

Identify the item below which is not a piece of legislation passed to protect individuals against identity theft or to secure individuals' privacy.

If an organization asks you to disclose your social security number,but fails to establish a set of procedures and policies for protecting your privacy,the organization has likely violated which of the Generally Accepted Privacy Principles?

Which of the following is not one of the basic actions that an organization must take to preserve the confidentiality of sensitive information?

In a private key system the sender and the receiver have ,and in the public key system they have .

Data masking is also referred to as

What confidentiality and security risk does using VoIP present to organizations?

Which systems use the same key to encrypt communications and to decrypt communications?

Encryption is a necessary part of which information security approach?

Discuss the most important control for protecting confidentiality.

Under CAN-SPAM legislation,an organization that receives an opt-out request from an individual has ________ days to implement steps to ensure they do not send out any additional unsolicited e-mail to the individual again.

If an organization asks you to disclose your date of birth and your address,but fails to take any steps to protect your private information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Encryption is one of the many ways to protect information in transit over the internet.

All of the following are associated with asymmetric encryption except

Classification of confidential information is the responsibility of whom,according to COBIT5?

Conceptual Foundations of Accounting Information Systems

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Controls for Information Security

Processing Integrity and Availability Controls

Auditing Computer-Based Information Systems

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, implementation, and Operation

Filters

Exam 9: Confidentiality and Privacy Controls

Text that was transformed into unreadable gibberish using encryption is called

A laptop computer belonging to the Novak group was stolen from the trunk of a sales manager's car while she was attending a conference.After reporting the theft,the manager considered the implications for the company's network security and concluded there was little to worry about because

Encryption has a remarkably long and varied history.The invention of writing was apparently soon followed by a desire to conceal messages.One of the methods,was the simple substitution of numbers for letters,for example A = 1,B = 2,etc.This is an example of

If an organization asks you to disclose your social security number,but fails to tell you about its privacy policies and practices,the organization has likely violated which of the Generally Accepted Privacy Principles?

Identify the item below which is not a piece of legislation passed to protect individuals against identity theft or to secure individuals' privacy.

If an organization asks you to disclose your social security number,but fails to establish a set of procedures and policies for protecting your privacy,the organization has likely violated which of the Generally Accepted Privacy Principles?

Which of the following is not one of the basic actions that an organization must take to preserve the confidentiality of sensitive information?

In a private key system the sender and the receiver have ________,and in the public key system they have ________.

Data masking is also referred to as

What confidentiality and security risk does using VoIP present to organizations?

Which systems use the same key to encrypt communications and to decrypt communications?

Encryption is a necessary part of which information security approach?

Discuss the most important control for protecting confidentiality.

Under CAN-SPAM legislation,an organization that receives an opt-out request from an individual has ________ days to implement steps to ensure they do not send out any additional unsolicited e-mail to the individual again.

If an organization asks you to disclose your date of birth and your address,but fails to take any steps to protect your private information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Encryption is one of the many ways to protect information in transit over the internet.

All of the following are associated with asymmetric encryption except

Classification of confidential information is the responsibility of whom,according to COBIT5?

Conceptual Foundations of Accounting Information Systems

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Controls for Information Security

Processing Integrity and Availability Controls

Auditing Computer-Based Information Systems

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, implementation, and Operation

Filters

In a private key system the sender and the receiver have ,and in the public key system they have .