Question 1

Which of the following statements is true of information privacy?

Accepted Answer

A)  It is most easily achieved online and is impossible to maintain on paper. 
B)  It is governed by laws which are universal in all countries. 
C)  It refers to the protection of data about individuals. 
D)  It emphasizes the importance of sharing data over protecting personally identifiable information. 
A)  It is most easily achieved online and is impossible to maintain on paper. 
B)  It is governed by laws which are universal in all countries. 
C)  It refers to the protection of data about individuals. 
D)  It emphasizes the importance of sharing data over protecting personally identifiable information.

Question 2

All ethical actions are legal, but not all legal actions are ethical.

Accepted Answer

A) True 
 B)False

Question 3

Write a brief note on encryption of digital information.

Accepted Answer

A powerful technical control that protec

Question 4

Z Category is a security firm based in Oakland, California. The firm provides security detail for major Hollywood events and also personal security services to some celebrities. Jackson Keynes is a systems administrator for the firm. He comes across a USB drive lying abandoned in the reception area at the company office and decides to check its contents. Unknown to him, a spyware program downloads itself onto Jackson's computer and infiltrates the central server system through the network. Which of the following is the most likely outcome in this case?

Accepted Answer

A)  The program encodes all the information on the company's servers and other systems and renders it unreadable and useless. 
B)  A tabloid reporter who had planted the USB drive accesses scandalous information about celebrities and publishes stories about them. 
C)  The company's servers and individual computer systems are controlled by remotely located bots and are used to perform distributed denial of service attacks. 
D)  The spyware program replicates rapidly across the company network, clogs up the network speeds, and slows down the performance of the computers. 
A)  The program encodes all the information on the company's servers and other systems and renders it unreadable and useless. 
B)  A tabloid reporter who had planted the USB drive accesses scandalous information about celebrities and publishes stories about them. 
C)  The company's servers and individual computer systems are controlled by remotely located bots and are used to perform distributed denial of service attacks. 
D)  The spyware program replicates rapidly across the company network, clogs up the network speeds, and slows down the performance of the computers.

Question 5

What is utilitarianism and how is it different from natural laws and rights?

Accepted Answer

Natural laws and rights judge the morali

Question 6

Margaret O'Connor is an upcoming poet from Georgia who recently updated her blog with her piece of writing titled, "Shadows." One of her readers copied her piece onto his own blog and passed it off as his original work. This is an example of ________.

Accepted Answer

A)  online identity theft 
B)  private action 
C)  shadowing 
D)  plagiarism 
A)  online identity theft 
B)  private action 
C)  shadowing 
D)  plagiarism

Question 7

________ refers to an attack in which computers in a botnet are directed to flood a single website server with rapid-fire page requests, causing it to slow down or crash.

Accepted Answer

A)  Distributed denial of service 
B)  Social engineering 
C)  Keylogging 
D)  Phishing 
A)  Distributed denial of service 
B)  Social engineering 
C)  Keylogging 
D)  Phishing

Question 8

How does a firewall help in preventing intrusion into information systems?

Accepted Answer

Firewall is a technical control that ins

Question 9

Single sign-on is implemented by organizations for the purpose of ________.

Accepted Answer

A)  ensuring that a single password can be used to securely access multiple accounts any number of times 
B)  reducing the cognitive load associated with multiple passwords 
C)  helping a user sign on through the process of fingerprint identification 
D)  defining which IP addresses and domain names can be accessed from an organization's computers 
A)  ensuring that a single password can be used to securely access multiple accounts any number of times 
B)  reducing the cognitive load associated with multiple passwords 
C)  helping a user sign on through the process of fingerprint identification 
D)  defining which IP addresses and domain names can be accessed from an organization's computers

Question 10

An incidence response plan is created for the purpose of ________.

Accepted Answer

A)  managing discussion forums efficiently 
B)  responding to customers' feedback 
C)  avoiding chaos and missteps 
D)  improvising communication modes 
A)  managing discussion forums efficiently 
B)  responding to customers' feedback 
C)  avoiding chaos and missteps 
D)  improvising communication modes

Question 11

What is a drawback of cloud computing?

Accepted Answer

A)  It delivers computing as a product rather than a service. 
B)  It is difficult to keep track of data as employees can go mobile and take advantage of cloud services independently. 
C)  It is difficult to share resources because information is maintained on a protected server. 
D)  It provides computation that requires end-user knowledge of the physical location and configuration of the system that delivers services. 
A)  It delivers computing as a product rather than a service. 
B)  It is difficult to keep track of data as employees can go mobile and take advantage of cloud services independently. 
C)  It is difficult to share resources because information is maintained on a protected server. 
D)  It provides computation that requires end-user knowledge of the physical location and configuration of the system that delivers services.

Question 12

Which of the following laws prohibits businesses from sending misleading or deceptive commercial e-mails but denies recipients any legal recourse on their own?

Accepted Answer

A)  CAN-SPAM Act 
B)  Gramm-Leach-Bliley Act 
C)  European Union's Data Protection Directive 
D)  State Security Breach Notification Law 
A)  CAN-SPAM Act 
B)  Gramm-Leach-Bliley Act 
C)  European Union's Data Protection Directive 
D)  State Security Breach Notification Law

Question 13

________ refers to technologies that intellectual property owners use to control access to their electronic content.

Accepted Answer

A)  Online identity management 
B)  Digital rights management 
C)  Internet resource management 
D)  Total quality management 
A)  Online identity management 
B)  Digital rights management 
C)  Internet resource management 
D)  Total quality management

Question 14

Liability is a powerful driver for surveillance as employers are held responsible for employees' offensive e-mails or web-surfing habits.

Accepted Answer

A) True 
 B)False

Question 15

According to the incidence response plan, which of the following actions best contains any damage caused by a security threat?

Accepted Answer

A)  preserve evidence of damage done 
B)  reevaluate risk matrix 
C)  restrict systems access 
D)  investigate system logs for evidence 
A)  preserve evidence of damage done 
B)  reevaluate risk matrix 
C)  restrict systems access 
D)  investigate system logs for evidence

Question 16

What is digital rights management? Explain some challenges faced in using DRM schemes.

Accepted Answer

Digital rights management refers to tech

Question 17

A(n) ________ lists out and estimates the vulnerabilities of an organization.

Accepted Answer

A)  risk matrix 
B)  incidence response plan 
C)  public key encryption scheme 
D)  social engineering plan 
A)  risk matrix 
B)  incidence response plan 
C)  public key encryption scheme 
D)  social engineering plan

Question 18

Which of the following statements is true of honeypots?

Accepted Answer

A)  They deny the entry or exit of specific IP addresses, products, Internet domains, and enforce other communication restrictions. 
B)  They are highly restrictive programs that permit communication only with approved entities and/or in an approved manner. 
C)  They traverse available web links in an attempt to discover documents for indexing and retrieval. 
D)  They have specific vulnerabilities that attract different varieties of malware in the wild, study their properties, and find out who started them. 
A)  They deny the entry or exit of specific IP addresses, products, Internet domains, and enforce other communication restrictions. 
B)  They are highly restrictive programs that permit communication only with approved entities and/or in an approved manner. 
C)  They traverse available web links in an attempt to discover documents for indexing and retrieval. 
D)  They have specific vulnerabilities that attract different varieties of malware in the wild, study their properties, and find out who started them.

Question 19

________ helps in determining the cause in an incidence response plan.

Accepted Answer

A)  Reevaluating the risk matrix 
B)  Investigating system logs 
C)  Taking systems offline 
D)  Restricting system access 
A)  Reevaluating the risk matrix 
B)  Investigating system logs 
C)  Taking systems offline 
D)  Restricting system access

Question 20

Which of the following is a drawback of using a proxy server to ensure online anonymity?

Accepted Answer

A)  the parasitic and unauthorized use of hundreds of computer systems owned by individuals for masking online identity 
B)  the lack of uniform and binding legislation across different countries, defining the legality of using proxy servers 
C)  the need to rely on the promise of the company that operates the proxy to protect its customers' identity 
D)  the inability to consistently ensure online anonymity, especially when government agencies are one of the parties involved 
A)  the parasitic and unauthorized use of hundreds of computer systems owned by individuals for masking online identity 
B)  the lack of uniform and binding legislation across different countries, defining the legality of using proxy servers 
C)  the need to rely on the promise of the company that operates the proxy to protect its customers' identity 
D)  the inability to consistently ensure online anonymity, especially when government agencies are one of the parties involved

Which of the following statements is true of information privacy?

All ethical actions are legal, but not all legal actions are ethical.

Write a brief note on encryption of digital information.

What is utilitarianism and how is it different from natural laws and rights?

Margaret O'Connor is an upcoming poet from Georgia who recently updated her blog with her piece of writing titled, "Shadows." One of her readers copied her piece onto his own blog and passed it off as his original work. This is an example of ________.

________ refers to an attack in which computers in a botnet are directed to flood a single website server with rapid-fire page requests, causing it to slow down or crash.

How does a firewall help in preventing intrusion into information systems?

Single sign-on is implemented by organizations for the purpose of ________.

An incidence response plan is created for the purpose of ________.

What is a drawback of cloud computing?

Which of the following laws prohibits businesses from sending misleading or deceptive commercial e-mails but denies recipients any legal recourse on their own?

________ refers to technologies that intellectual property owners use to control access to their electronic content.

Liability is a powerful driver for surveillance as employers are held responsible for employees' offensive e-mails or web-surfing habits.

According to the incidence response plan, which of the following actions best contains any damage caused by a security threat?

What is digital rights management? Explain some challenges faced in using DRM schemes.

A(n) ________ lists out and estimates the vulnerabilities of an organization.

Which of the following statements is true of honeypots?

________ helps in determining the cause in an incidence response plan.

Which of the following is a drawback of using a proxy server to ensure online anonymity?

Information Systems and People

Systems Development and Procurement

Project Management and Strategic Planning

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Managing Information Resources with Databases

Information Systems for the Enterprise

The Web and E-Commerce

Business Intelligence and Decision Support

Collaborating with Technology

Knowledge Management and E-Learning

Filters

Exam 10: Ethics, Privacy, and Security

Which of the following statements is true of information privacy?

All ethical actions are legal, but not all legal actions are ethical.

Write a brief note on encryption of digital information.

What is utilitarianism and how is it different from natural laws and rights?

Margaret O'Connor is an upcoming poet from Georgia who recently updated her blog with her piece of writing titled, "Shadows." One of her readers copied her piece onto his own blog and passed it off as his original work. This is an example of ________.

________ refers to an attack in which computers in a botnet are directed to flood a single website server with rapid-fire page requests, causing it to slow down or crash.

How does a firewall help in preventing intrusion into information systems?

Single sign-on is implemented by organizations for the purpose of ________.

An incidence response plan is created for the purpose of ________.

What is a drawback of cloud computing?

Which of the following laws prohibits businesses from sending misleading or deceptive commercial e-mails but denies recipients any legal recourse on their own?

________ refers to technologies that intellectual property owners use to control access to their electronic content.

Liability is a powerful driver for surveillance as employers are held responsible for employees' offensive e-mails or web-surfing habits.

According to the incidence response plan, which of the following actions best contains any damage caused by a security threat?

What is digital rights management? Explain some challenges faced in using DRM schemes.

A(n) ________ lists out and estimates the vulnerabilities of an organization.

Which of the following statements is true of honeypots?

________ helps in determining the cause in an incidence response plan.

Which of the following is a drawback of using a proxy server to ensure online anonymity?

Information Systems and People

Systems Development and Procurement

Project Management and Strategic Planning

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Managing Information Resources with Databases

Information Systems for the Enterprise

The Web and E-Commerce

Business Intelligence and Decision Support

Collaborating with Technology

Knowledge Management and E-Learning

Filters