Question 1

In a private key system the sender and the receiver have ________,and in the public key system they have ________.

Accepted Answer

A)  different keys; the same key 
B)  a decrypting algorithm; an encrypting algorithm 
C)  the same key; two separate keys 
D)  an encrypting algorithm; a decrypting algorithm 
A)  different keys; the same key 
B)  a decrypting algorithm; an encrypting algorithm 
C)  the same key; two separate keys 
D)  an encrypting algorithm; a decrypting algorithm

Question 2

Using a combination of symmetric and asymmetric key encryption,Sofia Chiamaka sent a report to her home office in Bangalore,India.She received an e-mail acknowledgement that her report had been received,but a few minutes later she received a second e-mail that contained a different hash total than the one associated with her report.This most likely explanation for this result is that

Accepted Answer

A)  the public key had been compromised. 
B)  the private key had been compromised. 
C)  the symmetric encryption key had been compromised. 
D)  the asymmetric encryption key had been compromised. 
A)  the public key had been compromised. 
B)  the private key had been compromised. 
C)  the symmetric encryption key had been compromised. 
D)  the asymmetric encryption key had been compromised.

Question 3

Which of the following is not one of the 10 internationally recognized best practices for protecting the privacy of customers' personal information?

Accepted Answer

A)  Provide free credit report monitoring for customers. 
B)  Inform customers of the option to opt-out of data collection and use of their personal information. 
C)  Allow customers' browsers to decline to accept cookies. 
D)  Utilize controls to prevent unauthorized access to, and disclosure of, customers' information. 
A)  Provide free credit report monitoring for customers. 
B)  Inform customers of the option to opt-out of data collection and use of their personal information. 
C)  Allow customers' browsers to decline to accept cookies. 
D)  Utilize controls to prevent unauthorized access to, and disclosure of, customers' information.

Question 4

The first steps in protecting the privacy of personal information is to identify

Accepted Answer

A)  what sensitive information is possessed by the organization. 
B)  where sensitive information is stored. 
C)  who has access to sensitive information. 
D)  All of the above are first steps in protecting privacy. 
A)  what sensitive information is possessed by the organization. 
B)  where sensitive information is stored. 
C)  who has access to sensitive information. 
D)  All of the above are first steps in protecting privacy.

Question 5

Classification of confidential information is the responsibility of whom,according to COBIT5?

Accepted Answer

A)  external auditor 
B)  information owner 
C)  IT security professionals 
D)  management 
A)  external auditor 
B)  information owner 
C)  IT security professionals 
D)  management

Question 6

The system and processes used to issue and manage asymmetric keys and digital certificates are known as

Accepted Answer

A)  asymmetric encryption. 
B)  certificate authority. 
C)  digital signature. 
D)  public key infrastructure. 
A)  asymmetric encryption. 
B)  certificate authority. 
C)  digital signature. 
D)  public key infrastructure.

Question 7

If an organization asks you to disclose your social security number,yet fails to permit you to opt-out before you provide the information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A)  Management 
B)  Notice 
C)  Choice and consent 
D)  Use and retention 
A)  Management 
B)  Notice 
C)  Choice and consent 
D)  Use and retention

Question 8

Describe symmetric encryption and identify three limitations.

Accepted Answer

Symmetric encryption systems use the sam

Question 9

What confidentiality and security risk does using VoIP present to organizations?

Accepted Answer

A)  Internet e-mail communications can be intercepted. 
B)  Internet photographs can be intercepted. 
C)  Internet video can be intercepted. 
D)  Internet voice conversations can be intercepted. 
A)  Internet e-mail communications can be intercepted. 
B)  Internet photographs can be intercepted. 
C)  Internet video can be intercepted. 
D)  Internet voice conversations can be intercepted.

Question 10

Which of the following is not one of the three important factors determining the strength of any encryption system?

Accepted Answer

A)  key length 
B)  key management policies 
C)  encryption algorithm 
D)  privacy 
A)  key length 
B)  key management policies 
C)  encryption algorithm 
D)  privacy

Question 11

Identify one weakness of encryption below.

Accepted Answer

A)  Encrypted packets cannot be examined by a firewall. 
B)  Encryption provides for both authentication and non-repudiation. 
C)  Encryption protects the privacy of information during transmission. 
D)  Encryption protects the confidentiality of information while in storage. 
A)  Encrypted packets cannot be examined by a firewall. 
B)  Encryption provides for both authentication and non-repudiation. 
C)  Encryption protects the privacy of information during transmission. 
D)  Encryption protects the confidentiality of information while in storage.

In a private key system the sender and the receiver have ,and in the public key system they have .

Which of the following is not one of the 10 internationally recognized best practices for protecting the privacy of customers' personal information?

The first steps in protecting the privacy of personal information is to identify

Classification of confidential information is the responsibility of whom,according to COBIT5?

The system and processes used to issue and manage asymmetric keys and digital certificates are known as

If an organization asks you to disclose your social security number,yet fails to permit you to opt-out before you provide the information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Describe symmetric encryption and identify three limitations.

What confidentiality and security risk does using VoIP present to organizations?

Which of the following is not one of the three important factors determining the strength of any encryption system?

Identify one weakness of encryption below.

Accounting Information Systems: an Overview

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Controls for Information Security

Processing Integrity and Availability Controls

Auditing Computer-Based Information Systems

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, implementation, and Operation

Filters

Exam 9: Confidentiality and Privacy Controls

In a private key system the sender and the receiver have ________,and in the public key system they have ________.

Which of the following is not one of the 10 internationally recognized best practices for protecting the privacy of customers' personal information?

The first steps in protecting the privacy of personal information is to identify

Classification of confidential information is the responsibility of whom,according to COBIT5?

The system and processes used to issue and manage asymmetric keys and digital certificates are known as

If an organization asks you to disclose your social security number,yet fails to permit you to opt-out before you provide the information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Describe symmetric encryption and identify three limitations.

What confidentiality and security risk does using VoIP present to organizations?

Which of the following is not one of the three important factors determining the strength of any encryption system?

Identify one weakness of encryption below.

Accounting Information Systems: an Overview

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Controls for Information Security

Processing Integrity and Availability Controls

Auditing Computer-Based Information Systems

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, implementation, and Operation

Filters

In a private key system the sender and the receiver have ,and in the public key system they have .