Question 1

Which of the following statements is true of honeypots?

Accepted Answer

A)  They deny the entry or exit of specific IP addresses, products, Internet domains, and enforce other communication restrictions. 
B)  They are highly restrictive programs that permit communication only with approved entities and/or in an approved manner. 
C)  They traverse available web links in an attempt to discover documents for indexing and retrieval. 
D)  They have specific vulnerabilities that attract different varieties of malware in the wild, study their properties, and find out who started them. 
A)  They deny the entry or exit of specific IP addresses, products, Internet domains, and enforce other communication restrictions. 
B)  They are highly restrictive programs that permit communication only with approved entities and/or in an approved manner. 
C)  They traverse available web links in an attempt to discover documents for indexing and retrieval. 
D)  They have specific vulnerabilities that attract different varieties of malware in the wild, study their properties, and find out who started them.

Question 2

Phishing attacks tend to start with an email luring users to click on a link.

Accepted Answer

A) True 
 B)False

Question 3

Enforcing intellectual property laws becomes difficult when ________.

Accepted Answer

A)  it is used for commercial purposes 
B)  the protection of intellectual property involves immovable assets 
C)  it is digitized 
D)  it comprises tangible assets 
A)  it is used for commercial purposes 
B)  the protection of intellectual property involves immovable assets 
C)  it is digitized 
D)  it comprises tangible assets

Question 4

Which of the following is an accurate definition of scareware?

Accepted Answer

A)  It is a kind of anti-spam process which relies on the human desire to use malware. 
B)  It is a kind of social engineering used to persuade people that a computer is infected when it is not. 
C)  It is a type of software that prevents users from downloading malware by displaying warnings. 
D)  It is software which provides a shield against spam and mirrors it back into the network. 
A)  It is a kind of anti-spam process which relies on the human desire to use malware. 
B)  It is a kind of social engineering used to persuade people that a computer is infected when it is not. 
C)  It is a type of software that prevents users from downloading malware by displaying warnings. 
D)  It is software which provides a shield against spam and mirrors it back into the network.

Question 5

Which of the following is a drawback of using a proxy server to ensure online anonymity?

Accepted Answer

A)  the parasitic and unauthorized use of hundreds of computer systems owned by individuals for masking online identity 
B)  the lack of uniform and binding legislation across different countries that determines the legality of using proxy servers 
C)  the need to rely on the promise of the company that operates the proxy to protect its customers' identities 
D)  the inability to consistently ensure online anonymity, especially when government agencies are among the parties involved 
A)  the parasitic and unauthorized use of hundreds of computer systems owned by individuals for masking online identity 
B)  the lack of uniform and binding legislation across different countries that determines the legality of using proxy servers 
C)  the need to rely on the promise of the company that operates the proxy to protect its customers' identities 
D)  the inability to consistently ensure online anonymity, especially when government agencies are among the parties involved

Question 6

A ________ is a technical control that inspects a network's incoming and outgoing traffic and either blocks or permits it according to rules the organization establishes.

Accepted Answer

A)  botnet 
B)  Trojan horse 
C)  keylogger 
D)  firewall 
A)  botnet 
B)  Trojan horse 
C)  keylogger 
D)  firewall

Question 7

A computer which is infected with malware and is added to a group's growing botnet is known as a zombie.

Accepted Answer

A) True 
 B)False

Question 8

Which of the following is an accurate definition of malware?

Accepted Answer

A)  software for end-user applications such as word processors and ERP software 
B)  software used to test a hardware or software package 
C)  software used to track and prevent malicious attacks on systems 
D)  software designed to attack computer systems 
A)  software for end-user applications such as word processors and ERP software 
B)  software used to test a hardware or software package 
C)  software used to track and prevent malicious attacks on systems 
D)  software designed to attack computer systems

Question 9

Which of the following technologies is most likely to be used by organizations as an authentication strategy?

Accepted Answer

A)  intelligent character recognition 
B)  optical mark recognition 
C)  voice pattern recognition 
D)  blood group recognition 
A)  intelligent character recognition 
B)  optical mark recognition 
C)  voice pattern recognition 
D)  blood group recognition

Question 10

Which of the following principles is consistent with the utilitarian ethical framework?

Accepted Answer

A)  First, do no harm 
B)  Thou shalt not kill 
C)  Protect free speech 
D)  Liberté, égalité, fraternité 
A)  First, do no harm 
B)  Thou shalt not kill 
C)  Protect free speech 
D)  Liberté, égalité, fraternité

Question 11

A drawback of using proxy servers for online anonymity is the need to rely on the company that operates the proxy servers and its promise to protect its customers' identities.

Accepted Answer

A) True 
 B)False

Question 12

Which of the following functions does a firewall perform?

Accepted Answer

A)  It ensures security by using multiple authentication strategies for employees. 
B)  It attracts malicious attacks to study their properties and origins. 
C)  It defines which IP addresses or domain names should be blocked. 
D)  It encodes sensitive data to ensure safe transmission across unsecured networks. 
A)  It ensures security by using multiple authentication strategies for employees. 
B)  It attracts malicious attacks to study their properties and origins. 
C)  It defines which IP addresses or domain names should be blocked. 
D)  It encodes sensitive data to ensure safe transmission across unsecured networks.

Question 13

Which of the following is an accurate definition of multifactor authentication?

Accepted Answer

A)  the process of assessing authentication of reports and manuals to prevent duplication 
B)  the process of combining two or more authentication strategies 
C)  the process of assessing authentication of multiple groups using a single strategy 
D)  the process of assigning unique authentication information to copyrighted content in order to prevent resale 
A)  the process of assessing authentication of reports and manuals to prevent duplication 
B)  the process of combining two or more authentication strategies 
C)  the process of assessing authentication of multiple groups using a single strategy 
D)  the process of assigning unique authentication information to copyrighted content in order to prevent resale

Question 14

________ helps in determining the cause of a security threat in an incidence response plan.

Accepted Answer

A)  Reevaluating the risk matrix 
B)  Investigating system logs 
C)  Taking systems offline 
D)  Restricting system access 
A)  Reevaluating the risk matrix 
B)  Investigating system logs 
C)  Taking systems offline 
D)  Restricting system access

Question 15

Discuss some of the possible drawbacks of implementing surveillance technologies at workplaces.

Accepted Answer

Though adopting surveillance at workplac

Question 16

Janet received an email that contained a link to a website that imitated the authentic website of her bank. The email requested her to key in her credit card number, her Social Security number, and her date of birth. She later found that her credit card was fraudulently charged for transactions she never made. It is inferred from this case that Janet is a victim of ________.

Accepted Answer

A)  distributed denial of service 
B)  keylogging 
C)  phishing 
D)  cache poisoning 
A)  distributed denial of service 
B)  keylogging 
C)  phishing 
D)  cache poisoning

Question 17

In Internet terminology, a worm refers to a(n) ________.

Accepted Answer

A)  email program created not for communication but to lure spam 
B)  software program that attracts malicious attacks in order to study their properties and origins 
C)  self-replicating program that sends copies to other nodes on a computer network 
D)  software tool used to inspect incoming and outgoing traffic to a computer network 
A)  email program created not for communication but to lure spam 
B)  software program that attracts malicious attacks in order to study their properties and origins 
C)  self-replicating program that sends copies to other nodes on a computer network 
D)  software tool used to inspect incoming and outgoing traffic to a computer network

Question 18

Which of the following is true of phishing?

Accepted Answer

A)  It is the process of stealing personal data from a victim by convincing him to disclose information. 
B)  It is useful in monitoring the web traffic into and out of an unsecured computer network. 
C)  It involves the use of several thousand computers to launch malicious attacks that can cripple websites. 
D)  It uses small pieces of code inserted into a browser that track an Internet user's activity and transmit the data to third parties. 
A)  It is the process of stealing personal data from a victim by convincing him to disclose information. 
B)  It is useful in monitoring the web traffic into and out of an unsecured computer network. 
C)  It involves the use of several thousand computers to launch malicious attacks that can cripple websites. 
D)  It uses small pieces of code inserted into a browser that track an Internet user's activity and transmit the data to third parties.

Question 19

When a person tries to judge what action would create the greatest good for the greatest number, he or she is using a utilitarian scheme.

Accepted Answer

A) True 
 B)False

Question 20

One way to identify a threat in an incident response plan is to ________.

Accepted Answer

A)  prosecute the offender for security risk 
B)  improve system efficiency 
C)  communicate with a crisis management team 
D)  preserve evidence of security breach 
A)  prosecute the offender for security risk 
B)  improve system efficiency 
C)  communicate with a crisis management team 
D)  preserve evidence of security breach

Which of the following statements is true of honeypots?

Phishing attacks tend to start with an email luring users to click on a link.

Enforcing intellectual property laws becomes difficult when ________.

Which of the following is an accurate definition of scareware?

Which of the following is a drawback of using a proxy server to ensure online anonymity?

A ________ is a technical control that inspects a network's incoming and outgoing traffic and either blocks or permits it according to rules the organization establishes.

A computer which is infected with malware and is added to a group's growing botnet is known as a zombie.

Which of the following is an accurate definition of malware?

Which of the following technologies is most likely to be used by organizations as an authentication strategy?

Which of the following principles is consistent with the utilitarian ethical framework?

A drawback of using proxy servers for online anonymity is the need to rely on the company that operates the proxy servers and its promise to protect its customers' identities.

Which of the following functions does a firewall perform?

Which of the following is an accurate definition of multifactor authentication?

________ helps in determining the cause of a security threat in an incidence response plan.

Discuss some of the possible drawbacks of implementing surveillance technologies at workplaces.

In Internet terminology, a worm refers to a(n) ________.

Which of the following is true of phishing?

When a person tries to judge what action would create the greatest good for the greatest number, he or she is using a utilitarian scheme.

One way to identify a threat in an incident response plan is to ________.

Information Systems and People

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Databases and DataWarehouses

Information Systems for the Enterprise

The Web, E-Commerce, and M-Commerce

Business Intelligence and Decision Making

Collaborating with Technology

Knowledge Management and E-Learning

Systems Development and Procurement

Project Management and Strategic Planning

Filters

Exam 10: Ethics, Privacy, and Security

Which of the following statements is true of honeypots?

Phishing attacks tend to start with an email luring users to click on a link.

Enforcing intellectual property laws becomes difficult when ________.

Which of the following is an accurate definition of scareware?

Which of the following is a drawback of using a proxy server to ensure online anonymity?

A ________ is a technical control that inspects a network's incoming and outgoing traffic and either blocks or permits it according to rules the organization establishes.

A computer which is infected with malware and is added to a group's growing botnet is known as a zombie.

Which of the following is an accurate definition of malware?

Which of the following technologies is most likely to be used by organizations as an authentication strategy?

Which of the following principles is consistent with the utilitarian ethical framework?

A drawback of using proxy servers for online anonymity is the need to rely on the company that operates the proxy servers and its promise to protect its customers' identities.

Which of the following functions does a firewall perform?

Which of the following is an accurate definition of multifactor authentication?

________ helps in determining the cause of a security threat in an incidence response plan.

Discuss some of the possible drawbacks of implementing surveillance technologies at workplaces.

In Internet terminology, a worm refers to a(n) ________.

Which of the following is true of phishing?

When a person tries to judge what action would create the greatest good for the greatest number, he or she is using a utilitarian scheme.

One way to identify a threat in an incident response plan is to ________.

Information Systems and People

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Databases and DataWarehouses

Information Systems for the Enterprise

The Web, E-Commerce, and M-Commerce

Business Intelligence and Decision Making

Collaborating with Technology

Knowledge Management and E-Learning

Systems Development and Procurement

Project Management and Strategic Planning

Filters