Exam 6: Information Systems Security

arrow
  • Select Tags
search iconSearch Question
flashcardsStudy Flashcards
  • Select Tags

On the local workstation,cloud computing

(Multiple Choice)
4.8/5
(83)

The main group of international standards for information security is ISO/IEC 27000 series published by the International Organization for Standardization (ISO).ISO/IEC 27002 addresses over 5,000 controls categorized under 12 categories.Discuss 10 of the 12 categories that should be used as a general guide by any company considering information security.

(Essay)
4.9/5
(79)

A Trojan horse program placed on one computer with the objective of attacking another computer is an example of which Internet security vulnerability?

(Multiple Choice)
4.8/5
(81)

A weakness in an information security system is

(Multiple Choice)
4.8/5
(63)

Hacker methods include social engineering,direct observation,electronic interception,and exploits.

(True/False)
4.8/5
(71)

Most financial institutions use ________ ________ layer encryption to communicate with their clients through Web browsers.

(Short Answer)
4.8/5
(83)

The best way to test the integrity of a computer system is to

(Multiple Choice)
4.9/5
(89)

Which of the following causes of disasters occurs less than any other cause?

(Multiple Choice)
4.8/5
(89)

Computer security and information security mean the same thing.

(True/False)
4.9/5
(84)

An extremely risk-seeking perpetrator

(Multiple Choice)
4.9/5
(83)
Presented below is a list of terms relating to accounting information systems, followed by definitions of those terms.
Match the appropriate term with each definition. Each answer will be used only once.
Biometric hardware authentication
The concept that if one part of the computer fails, a redundant part is available to take over
Archive bit
This generally cannot be prevented by appropriate wall shielding
Trapdoor
Systems that automatically identify individuals based on their fingerprints, hand sizes, retina patterns, voice patterns, and other personal features
Correct Answer:
Verified
Premises:
Responses:
Biometric hardware authentication
The concept that if one part of the computer fails, a redundant part is available to take over
Archive bit
This generally cannot be prevented by appropriate wall shielding
Trapdoor
Systems that automatically identify individuals based on their fingerprints, hand sizes, retina patterns, voice patterns, and other personal features
Consensus-based protocol
This type of system requires an odd number of processors
Hacker
A program can be run but not looked at or altered
Fault tolerance
A company that provides data processing services to other companies for a fee
Locked files
A type of intruder or attacker
Service bureau
A portion of the computer program that allows someone to access a system while bypassing normal security procedures
System fault
This would include hard disk crashes, power failures, or printer jams
(Matching)
4.9/5
(88)

Information security management system is an internal control process and manages risk.

(True/False)
4.9/5
(80)

The possibility of losing employees to a disaster should be addressed in

(Multiple Choice)
4.8/5
(81)

________ involves running multiple operating systems or multiple copies of the same operating system on the same machine.

(Short Answer)
5.0/5
(73)

The ideal password should consist of easy-to-remember names such as banana,kitty,IBM,password,or Friday.

(True/False)
4.9/5
(75)

Studies have shown that 45% of all disasters are due to human error.

(True/False)
4.9/5
(75)

In the health insurance sector,the Gramm-Leach-Bliley Act,requires federal agencies that oversee the health insurance sector to implement regulatory standards aimed at protecting the security of critical information resources.

(True/False)
4.9/5
(76)

________ ________ includes unnoticed intruders,wiretrappers,piggybackers,impersonating intruders,and eavesdroppers.

(Short Answer)
4.8/5
(85)

Discuss how U.S.law has addressed the issue of information systems fraud.

(Essay)
5.0/5
(78)

The primary way to prevent active threats concerning fraud and sabotage is to implement successive layers of access controls.Withholding administrative rights from individual PC users is an example of a

(Multiple Choice)
4.8/5
(86)
Showing 41 - 60 of 172
close modal

Filters

  • Essay(0)
  • Multiple Choice(0)
  • Short Answer(0)
  • True False(0)
  • Matching(0)