Exam 6: Information Systems Security

In a denial of service attack,an intruder is denied access to an organization's Web site after the intruder attempts to break through its firewalls and proxy server countermeasures.

The ISO series number that defines a code of best practices for ISMSs is

________ involves running multiple operating systems,or multiple copies of the same operating system,all on the same machine.

A significant benefit of the quantitative approach to risk assessment is that

ISO27001 includes 132 general security controls,organized under 11 topics and further broken down into over 5000 detailed controls.

Which of the following is an ideal password?

________ is a form of social engineering which is aimed directly at tricking victims into giving information,money,or other valuable assets to perpetrators.

Which group of people listed below would not pose a high degree of threat to an organization's information system?

A weakness in the ________ system is also likely to create a related weakness in ________ server security.

Within the health-care sector the ________ ________ Portability and Accountability Act requires that health-care providers,insurance companies,and payment clearinghouses adopt standardized processes for electronic payments and claims.

Information security is an international problem.Which countries below have set criminal penalties of up to 10 years for fraudulent use of computer services or the intentional changing of a data processing record with the intent of enrichment?

In general,________ arise from improperly installed or configured software and from unforeseen defects or deficiencies in the software.

In general,vulnerabilities arise from improperly installed or configured software and from unforeseen defects or deficiencies in the software.

A program kept in a locked file is one which can be run but not looked at (i.e.,code)or altered in anyway.

The information security management system is an organizational ________ ________ ________ that controls special risks associated with computer-based information systems.

The first step in managing disaster risk is

A trapdoor is a portion of a computer program that,upon detecting an intruder,"traps" the intruder by activating a firewall to prevent unauthorized access to critical data.

If users are permitted to choose their own passwords,the best procedure is to

The primary way to prevent active threats concerning fraud and sabotage is to implement successive layers of access controls.However,the widespread adoption and use of the Internet has made it impossible to completely implement which layer of the layered-access approach to security?

Which of the following forms of social engineering involves impersonation?