Question 1

Match the legislation to the description
-Sarbanes-Oxley (SOX)

Accepted Answer

A) This legislation requires organizations that handle credit and debit card data to meet cybersecurity requirements to safeguard the data. 
B) Frank-Dodd Wall Street Reform and Consumer Protection Act 
C) This legislation requires each federal agency to develop, document, and implement an agency-wide information security program. 
D) This legislation requires proper internal control, including information security and controls. 
E) Federal Privacy Act of 1974
F)This legislation requires financial institutions to provide customers with privacy notices and prohibits the institutions from sharing customer information with nonaffiliated third parties. 
A) This legislation requires organizations that handle credit and debit card data to meet cybersecurity requirements to safeguard the data. 
B) Frank-Dodd Wall Street Reform and Consumer Protection Act 
C) This legislation requires each federal agency to develop, document, and implement an agency-wide information security program. 
D) This legislation requires proper internal control, including information security and controls. 
E) Federal Privacy Act of 1974
F)This legislation requires financial institutions to provide customers with privacy notices and prohibits the institutions from sharing customer information with nonaffiliated third parties.

Question 2

A user with specialized knowledge cannot use partial database access to gain full access to a database.

Accepted Answer

A) True 
 B)False

Question 3

What is a denial-of-service attack?

Accepted Answer

A) A hacker tracks customer transactions and steals customer payments or redirect goods to a different shipping address. 
B) A hacker uses the e-commerce client application to access the enterprise's financial system for fraudulent purposes. 
C) A hacker overloads the enterprise's bandwidth, effectively shutting down the Web site. 
D) A hacker defaces a company's Web site. 
A) A hacker tracks customer transactions and steals customer payments or redirect goods to a different shipping address. 
B) A hacker uses the e-commerce client application to access the enterprise's financial system for fraudulent purposes. 
C) A hacker overloads the enterprise's bandwidth, effectively shutting down the Web site. 
D) A hacker defaces a company's Web site.

Question 4

Which network protocol (software)allows the enterprise network to connect to the network of vendors and suppliers through proprietary lines?

Accepted Answer

A) Transport control protocol (TCP) 
B) Ethernet protocol 
C) Internet protocol (IP) 
D) Electronic data interchange (EDI) 
A) Transport control protocol (TCP) 
B) Ethernet protocol 
C) Internet protocol (IP) 
D) Electronic data interchange (EDI)

Question 5

Which network protocol (software)is commonly used to connect computers to create a LAN?

Accepted Answer

A) Internet protocol (IP) 
B) Ethernet protocol 
C) Electronic data interchange (EDI) 
D) Transport control protocol (TCP) 
A) Internet protocol (IP) 
B) Ethernet protocol 
C) Electronic data interchange (EDI) 
D) Transport control protocol (TCP)

Question 6

The encryption method ________ uses two keys with one key used to encode and a second related, but different, key to decode the message.

Accepted Answer

asymmetric

Question 7

List and define the information sensitivity classifications for the private sector.

Accepted Answer

Confidential: This classification is for

Question 8

List and define five access control threats.

Accepted Answer

Network sniffers: These are programs or

Question 9

In the government sector, unauthorized disclosure of data with this classification might be harmful to national security.

Accepted Answer

A) Sensitive But Unclassified 
B) Top Secret 
C) Confidential 
D) Secret 
A) Sensitive But Unclassified 
B) Top Secret 
C) Confidential 
D) Secret

Question 10

List and describe the IT resources categories as defined by COBIT.

Accepted Answer

- Applications consist of manual and pro

Question 11

The encryption method ________ combines symmetric and asymmetric cryptography.

Accepted Answer

The answer of The encryption method ________ combines symmetric and...

Question 12

Which of the following network hardware are utility devices connected to the network for shared use?

Accepted Answer

A) Workstation computers 
B) Server computers 
C) Routing devices 
D) Peripherals 
A) Workstation computers 
B) Server computers 
C) Routing devices 
D) Peripherals

Question 13

Match the malware with the appropriate definition.
-Logic Bomb

Accepted Answer

A) Code is disguised as a legitimate program, that can be downloaded and installed by users without realizing it is malware 
B) A relatively small program that infects other application software by attaching to it and disrupting application function 
C) Tiny piece(s)of programming code that install themselves on the infected computer called a Zombie 
D) Similar to a virus except it does not need a host application to function or reproduce 
E) Software executes when a specified event happens within the computer 
A) Code is disguised as a legitimate program, that can be downloaded and installed by users without realizing it is malware 
B) A relatively small program that infects other application software by attaching to it and disrupting application function 
C) Tiny piece(s)of programming code that install themselves on the infected computer called a Zombie 
D) Similar to a virus except it does not need a host application to function or reproduce 
E) Software executes when a specified event happens within the computer

Question 14

________ developed the 10-domain Common Body of Knowledge (CBK)for IT security and controls.

Accepted Answer

International Inform

Question 15

The IT used in an enterprise can actually create vulnerabilities to cyberattacks on its confidential accounting data.

Accepted Answer

A) True 
 B)False

Question 16

Which of the following is a combination of two encryption keys?

Accepted Answer

A) Transposition key 
B) Product key 
C) Foreign key 
D) Substitution key 
A) Transposition key 
B) Product key 
C) Foreign key 
D) Substitution key

Question 17

________ refers to rummaging through garbage for discarded documents or digital media.

Accepted Answer

The answer of ________ refers to rummaging through garbage for...

Question 18

Encryption is a useful tool for protecting data in transit and stored in databases.

Accepted Answer

A) True 
 B)False

Question 19

New IT security technology

Accepted Answer

A) Is usually worth the investment 
B) Is less vulnerable to cyberattacks 
C) May create vulnerabilities and risks to confidential data contained in the accounting system 
D) Are usually reliable enough to adequately safeguard accounting data 
A) Is usually worth the investment 
B) Is less vulnerable to cyberattacks 
C) May create vulnerabilities and risks to confidential data contained in the accounting system 
D) Are usually reliable enough to adequately safeguard accounting data

Question 20

Wide area networks (WANs)cover a large geographic region, such as the lower Midwest.

Accepted Answer

A) True 
 B)False

Match the legislation to the description -Sarbanes-Oxley (SOX)

A user with specialized knowledge cannot use partial database access to gain full access to a database.

What is a denial-of-service attack?

Which network protocol (software)allows the enterprise network to connect to the network of vendors and suppliers through proprietary lines?

Which network protocol (software)is commonly used to connect computers to create a LAN?

The encryption method ________ uses two keys with one key used to encode and a second related, but different, key to decode the message.

List and define the information sensitivity classifications for the private sector.

List and define five access control threats.

In the government sector, unauthorized disclosure of data with this classification might be harmful to national security.

List and describe the IT resources categories as defined by COBIT.

The encryption method ________ combines symmetric and asymmetric cryptography.

Which of the following network hardware are utility devices connected to the network for shared use?

Match the malware with the appropriate definition. -Logic Bomb

________ developed the 10-domain Common Body of Knowledge (CBK)for IT security and controls.

The IT used in an enterprise can actually create vulnerabilities to cyberattacks on its confidential accounting data.

Which of the following is a combination of two encryption keys?

________ refers to rummaging through garbage for discarded documents or digital media.

Encryption is a useful tool for protecting data in transit and stored in databases.

New IT security technology

Wide area networks (WANs)cover a large geographic region, such as the lower Midwest.

Accounting Systems Insights

Accounting Databases

Accounting Interface: Database Forms, Queries, and Reports

Accounting Systems and Business Processes

Business Processes: Purchasing, Sales, and Payroll Cycles

Integrated Enterprise Systems and Cloud Computing

Accounting and Business Intelligence

Accounting and Sustainability Intelligence

XBRL: Intelligent Business Reporting

Fraud and Internal Control

The Risk Intelligent Enterprise: Enterprise Risk Management

Accounting System Development

Database Design: ERD, REA, and SQL

Filters

Exam 11: Cybersecurity

Match the legislation to the description -Sarbanes-Oxley (SOX)

A user with specialized knowledge cannot use partial database access to gain full access to a database.

What is a denial-of-service attack?

Which network protocol (software)allows the enterprise network to connect to the network of vendors and suppliers through proprietary lines?

Which network protocol (software)is commonly used to connect computers to create a LAN?

The encryption method ________ uses two keys with one key used to encode and a second related, but different, key to decode the message.

List and define the information sensitivity classifications for the private sector.

List and define five access control threats.

In the government sector, unauthorized disclosure of data with this classification might be harmful to national security.

List and describe the IT resources categories as defined by COBIT.

The encryption method ________ combines symmetric and asymmetric cryptography.

Which of the following network hardware are utility devices connected to the network for shared use?

Match the malware with the appropriate definition. -Logic Bomb

________ developed the 10-domain Common Body of Knowledge (CBK)for IT security and controls.

The IT used in an enterprise can actually create vulnerabilities to cyberattacks on its confidential accounting data.

Which of the following is a combination of two encryption keys?

________ refers to rummaging through garbage for discarded documents or digital media.

Encryption is a useful tool for protecting data in transit and stored in databases.

New IT security technology

Wide area networks (WANs)cover a large geographic region, such as the lower Midwest.

Accounting Systems Insights

Accounting Databases

Accounting Interface: Database Forms, Queries, and Reports

Accounting Systems and Business Processes

Business Processes: Purchasing, Sales, and Payroll Cycles

Integrated Enterprise Systems and Cloud Computing

Accounting and Business Intelligence

Accounting and Sustainability Intelligence

XBRL: Intelligent Business Reporting

Fraud and Internal Control

The Risk Intelligent Enterprise: Enterprise Risk Management

Accounting System Development

Database Design: ERD, REA, and SQL

Filters