Question 1

________ are crimes connected to information assets and IT.

Accepted Answer

The answer of ________ are crimes connected to information assets...

Question 2

________ is a piece of computer hardware that extracts instructions and data and decodes and executes the instructions.

Accepted Answer

Central pr

Question 3

Match the malware with the appropriate definition.
-Trojan horse

Accepted Answer

A) Code is disguised as a legitimate program, that can be downloaded and installed by users without realizing it is malware 
B) A relatively small program that infects other application software by attaching to it and disrupting application function 
C) Tiny piece(s)of programming code that install themselves on the infected computer called a Zombie 
D) Similar to a virus except it does not need a host application to function or reproduce 
E) Software executes when a specified event happens within the computer 
A) Code is disguised as a legitimate program, that can be downloaded and installed by users without realizing it is malware 
B) A relatively small program that infects other application software by attaching to it and disrupting application function 
C) Tiny piece(s)of programming code that install themselves on the infected computer called a Zombie 
D) Similar to a virus except it does not need a host application to function or reproduce 
E) Software executes when a specified event happens within the computer

Question 4

Which of the following is NOT considered a deterrent to the physical access to corporate offices?

Accepted Answer

A) GPS tracking 
B) Locked doors 
C) Fences 
D) Cameras 
A) GPS tracking 
B) Locked doors 
C) Fences 
D) Cameras

Question 5

Personal data, such as home address and credit card number, are stored on hotel card keys.

Accepted Answer

A) True 
 B)False

Question 6

Encryption is a method of converting plain text data into an unreadable form called ________.

Accepted Answer

The answer of Encryption is a method of converting plain...

Question 7

Match the malware with the appropriate definition.
-Worms

Accepted Answer

A) Code is disguised as a legitimate program, that can be downloaded and installed by users without realizing it is malware 
B) A relatively small program that infects other application software by attaching to it and disrupting application function 
C) Tiny piece(s)of programming code that install themselves on the infected computer called a Zombie 
D) Similar to a virus except it does not need a host application to function or reproduce 
E) Software executes when a specified event happens within the computer 
A) Code is disguised as a legitimate program, that can be downloaded and installed by users without realizing it is malware 
B) A relatively small program that infects other application software by attaching to it and disrupting application function 
C) Tiny piece(s)of programming code that install themselves on the infected computer called a Zombie 
D) Similar to a virus except it does not need a host application to function or reproduce 
E) Software executes when a specified event happens within the computer

Question 8

Which of the following is NOT part of the 10 domains of cybersecurity?

Accepted Answer

A) Cryptography 
B) Database security 
C) Physical and environmental security 
D) Access control 
A) Cryptography 
B) Database security 
C) Physical and environmental security 
D) Access control

Question 9

Match the legislation to the description
-Federal Information Security Management Act (FISMA)

Accepted Answer

A) This legislation requires organizations that handle credit and debit card data to meet cybersecurity requirements to safeguard the data. 
B) Frank-Dodd Wall Street Reform and Consumer Protection Act 
C) This legislation requires each federal agency to develop, document, and implement an agency-wide information security program. 
D) This legislation requires proper internal control, including information security and controls. 
E) Federal Privacy Act of 1974
F)This legislation requires financial institutions to provide customers with privacy notices and prohibits the institutions from sharing customer information with nonaffiliated third parties. 
A) This legislation requires organizations that handle credit and debit card data to meet cybersecurity requirements to safeguard the data. 
B) Frank-Dodd Wall Street Reform and Consumer Protection Act 
C) This legislation requires each federal agency to develop, document, and implement an agency-wide information security program. 
D) This legislation requires proper internal control, including information security and controls. 
E) Federal Privacy Act of 1974
F)This legislation requires financial institutions to provide customers with privacy notices and prohibits the institutions from sharing customer information with nonaffiliated third parties.

Question 10

Match the network protocol with the appropriate definition.
-Transport control protocol (TCP)

Accepted Answer

A) A software program that provides message transportation services between sending and receiving computers 
B) A software program commonly used to connect computers to create a LAN 
C) A software program that provides routing services to messages transmitted over the Internet 
D) A software program that allows the enterprise network to connect to the network of vendors and suppliers through proprietary lines 
A) A software program that provides message transportation services between sending and receiving computers 
B) A software program commonly used to connect computers to create a LAN 
C) A software program that provides routing services to messages transmitted over the Internet 
D) A software program that allows the enterprise network to connect to the network of vendors and suppliers through proprietary lines

Question 11

________ relates to the laws and regulations to prevent, investigate, and prosecute cybercrimes.

Accepted Answer

The answer of ________ relates to the laws and regulations...

Question 12

Physical security frameworks are useful to provide guidance on how to secure the physical facilities, grounds, and IT assets.

Accepted Answer

A) True 
 B)False

Question 13

What is a microcomputer?

Accepted Answer

A) A computer with moderate computing power 
B) A personal computer or laptop 
C) A smart phone 
D) A powerful, high-speed computer used for complex numerical calculations 
A) A computer with moderate computing power 
B) A personal computer or laptop 
C) A smart phone 
D) A powerful, high-speed computer used for complex numerical calculations

Question 14

While dumpster diving is unethical, it may not be illegal.

Accepted Answer

A) True 
 B)False

Question 15

Securing computer architecture involves three rings of protection. What is in each ring? Provide examples.

Accepted Answer

Ring 3: Software applications include We

Question 16

The information security principle integrity ensures that sensitive data at each point in information processing is secure and protected from unauthorized access.

Accepted Answer

A) True 
 B)False

Question 17

Which of the following is NOT part of the information criteria as defined by COBIT?

Accepted Answer

A) Integrity 
B) Scalability 
C) Availability 
D) Confidentiality 
A) Integrity 
B) Scalability 
C) Availability 
D) Confidentiality

Question 18

The company where you work was recently the victim of a logic bomb. The company has a policy against connecting flash drives, writable CDs/DVDs, etc. and had even had the ports and drives for those devices removed from employees computers. The CFO does not understand how the malware appeared within the company given these preventative measures and wonders what other threats may already be on the network. Prepare a report on the various types of malware, how they may gain access to the corporate network, and how the company can protect against this type of attack.

Accepted Answer

The answer should include the following

Question 19

A commercial disaster recovery service that provides IT services and can be fully operational is a few hours is which type of back up facility?

Accepted Answer

A) Warm site 
B) Cold site 
C) Internal site 
D) Hot site 
A) Warm site 
B) Cold site 
C) Internal site 
D) Hot site

Question 20

The COSO internal control component Information and Communication usually maps to which COBIT domain for IT processes?

Accepted Answer

A) PO2 Define the information architecture 
B) PO1 Define a strategic IT plan 
C) PO4 Define the IT processes, organization, and relationships 
D) PO9 Assess and manage IT risks 
A) PO2 Define the information architecture 
B) PO1 Define a strategic IT plan 
C) PO4 Define the IT processes, organization, and relationships 
D) PO9 Assess and manage IT risks

________ are crimes connected to information assets and IT.

________ is a piece of computer hardware that extracts instructions and data and decodes and executes the instructions.

Match the malware with the appropriate definition. -Trojan horse

Which of the following is NOT considered a deterrent to the physical access to corporate offices?

Personal data, such as home address and credit card number, are stored on hotel card keys.

Encryption is a method of converting plain text data into an unreadable form called ________.

Match the malware with the appropriate definition. -Worms

Which of the following is NOT part of the 10 domains of cybersecurity?

Match the legislation to the description -Federal Information Security Management Act (FISMA)

Match the network protocol with the appropriate definition. -Transport control protocol (TCP)

________ relates to the laws and regulations to prevent, investigate, and prosecute cybercrimes.

Physical security frameworks are useful to provide guidance on how to secure the physical facilities, grounds, and IT assets.

What is a microcomputer?

While dumpster diving is unethical, it may not be illegal.

Securing computer architecture involves three rings of protection. What is in each ring? Provide examples.

The information security principle integrity ensures that sensitive data at each point in information processing is secure and protected from unauthorized access.

Which of the following is NOT part of the information criteria as defined by COBIT?

A commercial disaster recovery service that provides IT services and can be fully operational is a few hours is which type of back up facility?

The COSO internal control component Information and Communication usually maps to which COBIT domain for IT processes?

Accounting Systems Insights

Accounting Databases

Accounting Interface: Database Forms, Queries, and Reports

Accounting Systems and Business Processes

Business Processes: Purchasing, Sales, and Payroll Cycles

Integrated Enterprise Systems and Cloud Computing

Accounting and Business Intelligence

Accounting and Sustainability Intelligence

XBRL: Intelligent Business Reporting

Fraud and Internal Control

The Risk Intelligent Enterprise: Enterprise Risk Management

Accounting System Development

Database Design: ERD, REA, and SQL

Filters

Exam 11: Cybersecurity

________ are crimes connected to information assets and IT.

________ is a piece of computer hardware that extracts instructions and data and decodes and executes the instructions.

Match the malware with the appropriate definition. -Trojan horse

Which of the following is NOT considered a deterrent to the physical access to corporate offices?

Personal data, such as home address and credit card number, are stored on hotel card keys.

Encryption is a method of converting plain text data into an unreadable form called ________.

Match the malware with the appropriate definition. -Worms

Which of the following is NOT part of the 10 domains of cybersecurity?

Match the legislation to the description -Federal Information Security Management Act (FISMA)

Match the network protocol with the appropriate definition. -Transport control protocol (TCP)

________ relates to the laws and regulations to prevent, investigate, and prosecute cybercrimes.

Physical security frameworks are useful to provide guidance on how to secure the physical facilities, grounds, and IT assets.

What is a microcomputer?

While dumpster diving is unethical, it may not be illegal.

Securing computer architecture involves three rings of protection. What is in each ring? Provide examples.

The information security principle integrity ensures that sensitive data at each point in information processing is secure and protected from unauthorized access.

Which of the following is NOT part of the information criteria as defined by COBIT?

A commercial disaster recovery service that provides IT services and can be fully operational is a few hours is which type of back up facility?

The COSO internal control component Information and Communication usually maps to which COBIT domain for IT processes?

Accounting Systems Insights

Accounting Databases

Accounting Interface: Database Forms, Queries, and Reports

Accounting Systems and Business Processes

Business Processes: Purchasing, Sales, and Payroll Cycles

Integrated Enterprise Systems and Cloud Computing

Accounting and Business Intelligence

Accounting and Sustainability Intelligence

XBRL: Intelligent Business Reporting

Fraud and Internal Control

The Risk Intelligent Enterprise: Enterprise Risk Management

Accounting System Development

Database Design: ERD, REA, and SQL

Filters