Question 1

The downside of using surveillance techniques at work is that it pits management against staff, and undermines the bond of loyalty that might otherwise develop.

Accepted Answer

A) True 
 B)False

Question 2

Adopting which among the following measures makes it most difficult for a hacker to break into passwords?

Accepted Answer

A)  creating easy to remember passwords 
B)  reusing the password in news and games sites through multiple systems 
C)  maintaining a single, secure password for all accounts 
D)  creating passwords with symbols, mixed cases, and characters 
A)  creating easy to remember passwords 
B)  reusing the password in news and games sites through multiple systems 
C)  maintaining a single, secure password for all accounts 
D)  creating passwords with symbols, mixed cases, and characters

Question 3

What is intellectual property and what significance does it hold in an organization?

Accepted Answer

Intellectual property is a bedrock of an

Question 4

Which among the following authentication strategies is the most difficult to forge, crack, or copy and is hence used for physical security?

Accepted Answer

A)  passwords 
B)  RFID chips 
C)  biometric identifier 
D)  credit cards 
A)  passwords 
B)  RFID chips 
C)  biometric identifier 
D)  credit cards

Question 5

Which of the following provisions does the Gramm-Leach-Bliley Act make?

Accepted Answer

A)  limiting the disclosure of personally identifiable information that is maintained by state departments of motor vehicles 
B)  stipulating how financial institutions are required to protect the privacy of consumers' financial information and notifying them of their privacy policies 
C)  prohibiting businesses from sending misleading or deceptive commercial e-mails but denying recipients any legal recourse on their own 
D)  establishing provisions to protect the privacy and security of individually identifiable health information 
A)  limiting the disclosure of personally identifiable information that is maintained by state departments of motor vehicles 
B)  stipulating how financial institutions are required to protect the privacy of consumers' financial information and notifying them of their privacy policies 
C)  prohibiting businesses from sending misleading or deceptive commercial e-mails but denying recipients any legal recourse on their own 
D)  establishing provisions to protect the privacy and security of individually identifiable health information

Question 6

What is an incidence response plan and what are the steps involved in it?

Accepted Answer

The incidence response plan is used to a

Question 7

Janet Shulz received an e-mail that contained a link to a website that imitated the authentic website of her bank. The e-mail requested her to key in her credit card number, her Social Security Number, and her date of birth. She later found that her credit card was fraudulently charged for transactions she never made. It is inferred from this case that Janet is a victim of ________.

Accepted Answer

A)  distributed denial of service 
B)  keylogging 
C)  phishing 
D)  cache poisoning 
A)  distributed denial of service 
B)  keylogging 
C)  phishing 
D)  cache poisoning

Question 8

Which of the following is an accurate definition of multifactor authentication?

Accepted Answer

A)  a process of assessing authentication of reports and manuals to prevent duplication 
B)  a process of combining two or more authentication strategies 
C)  a process of assessing authentication of multiple groups using a single strategy 
D)  a process of assigning unique authentication information to copyrighted content to prevent resale 
A)  a process of assessing authentication of reports and manuals to prevent duplication 
B)  a process of combining two or more authentication strategies 
C)  a process of assessing authentication of multiple groups using a single strategy 
D)  a process of assigning unique authentication information to copyrighted content to prevent resale

Question 9

Trade secrets, software, patents, and copyrighted works comprise intellectual property.

Accepted Answer

A) True 
 B)False

Question 10

________ is the art of manipulating people into breaking normal security procedures or divulging confidential information.

Accepted Answer

A)  Password mungeing 
B)  Shouldersurfing 
C)  Social engineering 
D)  Astroturfing 
A)  Password mungeing 
B)  Shouldersurfing 
C)  Social engineering 
D)  Astroturfing

Question 11

For which of the following reasons do employers adopt surveillance technologies to track online communications?

Accepted Answer

A)  to increase employee productivity 
B)  to enable efficient data mining 
C)  to prevent data redundancy 
D)  to facilitate faster communication 
A)  to increase employee productivity 
B)  to enable efficient data mining 
C)  to prevent data redundancy 
D)  to facilitate faster communication

Question 12

A(n) ________ is a technical control that inspects a network's incoming and outgoing traffic and either blocks or permits it according to rules the organization establishes.

Accepted Answer

A)  botnet 
B)  Trojan horse 
C)  keylogger 
D)  firewall 
A)  botnet 
B)  Trojan horse 
C)  keylogger 
D)  firewall

Question 13

Which of the following is true of phishing?

Accepted Answer

A)  It is a process of stealing personal data from a victim by convincing him to disclose information. 
B)  It is useful in monitoring the web traffic into and out of an unsecured computer network. 
C)  It involves the use of several thousand computers to launch malicious attacks that can cripple websites. 
D)  It uses small pieces of code inserted into a browser that track an Internet user's activity and transmit the data to third parties. 
A)  It is a process of stealing personal data from a victim by convincing him to disclose information. 
B)  It is useful in monitoring the web traffic into and out of an unsecured computer network. 
C)  It involves the use of several thousand computers to launch malicious attacks that can cripple websites. 
D)  It uses small pieces of code inserted into a browser that track an Internet user's activity and transmit the data to third parties.

Question 14

Which of the following laws establishes requirements that govern how personally identifiable information on individuals is collected, used, and disseminated by federal agencies?

Accepted Answer

A)  the CAN-SPAM Act 
B)  the Privacy Act of 1974 
C)  the State Security Breach Notification Laws 
D)  the Gramm-Leach-Bliley Act 
A)  the CAN-SPAM Act 
B)  the Privacy Act of 1974 
C)  the State Security Breach Notification Laws 
D)  the Gramm-Leach-Bliley Act

Question 15

Henley and Sons, a retail bank in England, recently had sensitive personal information belonging to their customers stolen by a group of fraudsters who simply walked into the bank's accounts section, copied the information onto pen drives, and left. Which of the following authentication strategies, if used by Henley and Sons, is most likely to have facilitated the security breach?

Accepted Answer

A)  user knowledge 
B)  voice pattern recognition 
C)  iris configuration 
D)  fingerprint recognition 
A)  user knowledge 
B)  voice pattern recognition 
C)  iris configuration 
D)  fingerprint recognition

Question 16

Which of the following is an accurate definition of a computer virus?

Accepted Answer

A)  It is a software program that can damage files or other programs. 
B)  It is a software program that attracts potentially malicious attacks to study their origin. 
C)  It is a software program that masks the browsing history and preferences of Internet users. 
D)  It is a software program that inspects incoming or outgoing traffic to a computer network. 
A)  It is a software program that can damage files or other programs. 
B)  It is a software program that attracts potentially malicious attacks to study their origin. 
C)  It is a software program that masks the browsing history and preferences of Internet users. 
D)  It is a software program that inspects incoming or outgoing traffic to a computer network.

Question 17

What is the purpose of a risk matrix in an organization?

Accepted Answer

An organization's risk assessment examin

Question 18

Which of the following is an accurate definition of scareware?

Accepted Answer

A)  It is a kind of anti-spam process which relies on human desire to use malware. 
B)  It is a kind of social engineering used to scare users with malicious software. 
C)  It is type of software that prevents users from downloading malware by displaying warnings. 
D)  It is a software which provides a shield against spam and mirrors it back into the network. 
A)  It is a kind of anti-spam process which relies on human desire to use malware. 
B)  It is a kind of social engineering used to scare users with malicious software. 
C)  It is type of software that prevents users from downloading malware by displaying warnings. 
D)  It is a software which provides a shield against spam and mirrors it back into the network.

Question 19

Which of the following is an accurate definition of malware?

Accepted Answer

A)  software for end-user applications such as word processors and ERP software 
B)  software for testing a hardware or software package 
C)  software used to track and prevent malicious attacks on systems 
D)  software designed to attack computer systems 
A)  software for end-user applications such as word processors and ERP software 
B)  software for testing a hardware or software package 
C)  software used to track and prevent malicious attacks on systems 
D)  software designed to attack computer systems

Question 20

Discuss two kinds of authentication strategies used in organizations.

Accepted Answer

Technical controls for preventing unauth

The downside of using surveillance techniques at work is that it pits management against staff, and undermines the bond of loyalty that might otherwise develop.

Adopting which among the following measures makes it most difficult for a hacker to break into passwords?

What is intellectual property and what significance does it hold in an organization?

Which among the following authentication strategies is the most difficult to forge, crack, or copy and is hence used for physical security?

Which of the following provisions does the Gramm-Leach-Bliley Act make?

What is an incidence response plan and what are the steps involved in it?

Which of the following is an accurate definition of multifactor authentication?

Trade secrets, software, patents, and copyrighted works comprise intellectual property.

________ is the art of manipulating people into breaking normal security procedures or divulging confidential information.

For which of the following reasons do employers adopt surveillance technologies to track online communications?

A(n) ________ is a technical control that inspects a network's incoming and outgoing traffic and either blocks or permits it according to rules the organization establishes.

Which of the following is true of phishing?

Which of the following laws establishes requirements that govern how personally identifiable information on individuals is collected, used, and disseminated by federal agencies?

Which of the following is an accurate definition of a computer virus?

What is the purpose of a risk matrix in an organization?

Which of the following is an accurate definition of scareware?

Which of the following is an accurate definition of malware?

Discuss two kinds of authentication strategies used in organizations.

Information Systems and People

Systems Development and Procurement

Project Management and Strategic Planning

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Managing Information Resources with Databases

Information Systems for the Enterprise

The Web and E-Commerce

Business Intelligence and Decision Support

Collaborating with Technology

Knowledge Management and E-Learning

Filters

Exam 10: Ethics, Privacy, and Security

The downside of using surveillance techniques at work is that it pits management against staff, and undermines the bond of loyalty that might otherwise develop.

Adopting which among the following measures makes it most difficult for a hacker to break into passwords?

What is intellectual property and what significance does it hold in an organization?

Which among the following authentication strategies is the most difficult to forge, crack, or copy and is hence used for physical security?

Which of the following provisions does the Gramm-Leach-Bliley Act make?

What is an incidence response plan and what are the steps involved in it?

Which of the following is an accurate definition of multifactor authentication?

Trade secrets, software, patents, and copyrighted works comprise intellectual property.

________ is the art of manipulating people into breaking normal security procedures or divulging confidential information.

For which of the following reasons do employers adopt surveillance technologies to track online communications?

A(n) ________ is a technical control that inspects a network's incoming and outgoing traffic and either blocks or permits it according to rules the organization establishes.

Which of the following is true of phishing?

Which of the following laws establishes requirements that govern how personally identifiable information on individuals is collected, used, and disseminated by federal agencies?

Which of the following is an accurate definition of a computer virus?

What is the purpose of a risk matrix in an organization?

Which of the following is an accurate definition of scareware?

Which of the following is an accurate definition of malware?

Discuss two kinds of authentication strategies used in organizations.

Information Systems and People

Systems Development and Procurement

Project Management and Strategic Planning

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Managing Information Resources with Databases

Information Systems for the Enterprise

The Web and E-Commerce

Business Intelligence and Decision Support

Collaborating with Technology

Knowledge Management and E-Learning

Filters