Question 1

Using cloud-based services and data storage is referred to as cloud computing.

Accepted Answer

A) True 
 B)False

Question 2

________ ________ involves manipulating victims in order to trick them into divulging privileged information.

Accepted Answer

The answer of ________ ________ involves manipulating victims in order...

Question 3

Information security management system is part of the larger ________ risk management process.

Accepted Answer

The answer of Information security management system is part of...

Question 4

Using the qualitative approach to risk assessment,each loss exposure is computed as the product of the cost of an individual loss times the likelihood of its occurrence.

Accepted Answer

A) True 
 B)False

Question 5

A serious business problem today is the theft of data.

Accepted Answer

A) True 
 B)False

Question 6

In computer environments,________ control is especially important as there is often a tendency to either overspend or spend on the wrong things.

Accepted Answer

The answer of In computer environments,________ control is especially important...

Question 7

Discuss the information security system life cycle.

Accepted Answer

Because the electronic security system

Question 8

The three objectives of information security are ________,________,and ________.

Accepted Answer

confidenti

Question 9

Malware can be hidden in email,downloaded software,disk or Web browser.

Accepted Answer

A) True 
 B)False

Question 10

The objective of the first phase of the security system life cycle is to design risk control measures such as various security measures and contingency plans.

Accepted Answer

A) True 
 B)False

Question 11

Business continuity planning and disaster recovery,in general,mean the same thing.

Accepted Answer

A) True 
 B)False

Question 12

In most organizations,accounting,computing,and data processing are all organized under the controller.

Accepted Answer

A) True 
 B)False

Question 13

Fault tolerance can be applied at any of three levels: input,processing,or output.

Accepted Answer

A) True 
 B)False

Question 14

The method used in most cases of computer fraud is

Accepted Answer

A)  program alteration. 
B)  input manipulation. 
C)  data theft. 
D)  sabotage. 
A)  program alteration. 
B)  input manipulation. 
C)  data theft. 
D)  sabotage.

Question 15

One Internet security problem arises from configuration problems in the area of configuring permissions for directories.This is an example of

Accepted Answer

A)  an operating system vulnerability. 
B)  a Web server vulnerability. 
C)  a private network vulnerability. 
D)  server program vulnerability. 
A)  an operating system vulnerability. 
B)  a Web server vulnerability. 
C)  a private network vulnerability. 
D)  server program vulnerability.

Question 16

Social engineering is a form of manipulation of people in order to trick them into divulging privileged information.

Accepted Answer

A) True 
 B)False

Question 17

Direct observation includes shoulder surfing and dumpster diving.

Accepted Answer

A) True 
 B)False

Question 18

The primary way to prevent active threats concerning fraud and sabotage is to implement successive layers of access controls.The second step behind the layered approach to access control is to

Accepted Answer

A)  prevent unauthorized access to both data and program files. 
B)  physically separate unauthorized individuals from computer resources. 
C)  classify all data and equipment according to their importance and vulnerability. 
D)  keep unauthorized users from using the system. 
A)  prevent unauthorized access to both data and program files. 
B)  physically separate unauthorized individuals from computer resources. 
C)  classify all data and equipment according to their importance and vulnerability. 
D)  keep unauthorized users from using the system.

Question 19

The ________ makes it a federal crime,with a mandatory prison sentence,to pretext any kind of information that relates to a relationship between a consumer and a financial institution.

Accepted Answer

A)  Computer Fraud and Abuse Act of 1986 
B)  Telephone Records and Privacy Protection Act of 2006 
C)  Gramm-Leach-Bliley Act 
D)  Health Insurance Portability and Accountability Act 
A)  Computer Fraud and Abuse Act of 1986 
B)  Telephone Records and Privacy Protection Act of 2006 
C)  Gramm-Leach-Bliley Act 
D)  Health Insurance Portability and Accountability Act

Question 20

Passive threats include information systems fraud and computer sabotage.

Accepted Answer

A) True 
 B)False

Using cloud-based services and data storage is referred to as cloud computing.

involves manipulating victims in order to trick them into divulging privileged information.

Information security management system is part of the larger ________ risk management process.

Using the qualitative approach to risk assessment,each loss exposure is computed as the product of the cost of an individual loss times the likelihood of its occurrence.

A serious business problem today is the theft of data.

In computer environments,________ control is especially important as there is often a tendency to either overspend or spend on the wrong things.

Discuss the information security system life cycle.

The three objectives of information security are ,,and .

Malware can be hidden in email,downloaded software,disk or Web browser.

The objective of the first phase of the security system life cycle is to design risk control measures such as various security measures and contingency plans.

Business continuity planning and disaster recovery,in general,mean the same thing.

In most organizations,accounting,computing,and data processing are all organized under the controller.

Fault tolerance can be applied at any of three levels: input,processing,or output.

The method used in most cases of computer fraud is

One Internet security problem arises from configuration problems in the area of configuring permissions for directories.This is an example of

Social engineering is a form of manipulation of people in order to trick them into divulging privileged information.

Direct observation includes shoulder surfing and dumpster diving.

The primary way to prevent active threats concerning fraud and sabotage is to implement successive layers of access controls.The second step behind the layered approach to access control is to

The ________ makes it a federal crime,with a mandatory prison sentence,to pretext any kind of information that relates to a relationship between a consumer and a financial institution.

Passive threats include information systems fraud and computer sabotage.

Accounting Information Systems: An Overview

Systems Techniques and Documentation

Ebusiness and Ecommerce

Transaction Processing and the Internal Control Process

Fraud Examination and Fraud Management

Electronic Data Processing Systems

Revenue Cycle Processes

Procurement and Human Resources Business Processes

The Production Business Process

Systems Planning, analysis, and Design

Systems Project Management, implementation, operation, control

Data Management Concepts

Auditing Information Technology

Filters

Exam 6: Information Systems Security

Using cloud-based services and data storage is referred to as cloud computing.

________ ________ involves manipulating victims in order to trick them into divulging privileged information.

Information security management system is part of the larger ________ risk management process.

Using the qualitative approach to risk assessment,each loss exposure is computed as the product of the cost of an individual loss times the likelihood of its occurrence.

A serious business problem today is the theft of data.

In computer environments,________ control is especially important as there is often a tendency to either overspend or spend on the wrong things.

Discuss the information security system life cycle.

The three objectives of information security are ________,________,and ________.

Malware can be hidden in email,downloaded software,disk or Web browser.

The objective of the first phase of the security system life cycle is to design risk control measures such as various security measures and contingency plans.

Business continuity planning and disaster recovery,in general,mean the same thing.

In most organizations,accounting,computing,and data processing are all organized under the controller.

Fault tolerance can be applied at any of three levels: input,processing,or output.

The method used in most cases of computer fraud is

One Internet security problem arises from configuration problems in the area of configuring permissions for directories.This is an example of

Social engineering is a form of manipulation of people in order to trick them into divulging privileged information.

Direct observation includes shoulder surfing and dumpster diving.

The primary way to prevent active threats concerning fraud and sabotage is to implement successive layers of access controls.The second step behind the layered approach to access control is to

The ________ makes it a federal crime,with a mandatory prison sentence,to pretext any kind of information that relates to a relationship between a consumer and a financial institution.

Passive threats include information systems fraud and computer sabotage.

Accounting Information Systems: An Overview

Systems Techniques and Documentation

Ebusiness and Ecommerce

Transaction Processing and the Internal Control Process

Fraud Examination and Fraud Management

Electronic Data Processing Systems

Revenue Cycle Processes

Procurement and Human Resources Business Processes

The Production Business Process

Systems Planning, analysis, and Design

Systems Project Management, implementation, operation, control

Data Management Concepts

Auditing Information Technology

Filters

involves manipulating victims in order to trick them into divulging privileged information.

The three objectives of information security are ,,and .