Question 1

Discuss any two kinds of authentication strategies used in organizations.

Accepted Answer

Technical controls for preventing unauth

Question 2

A(n) ________ lists out and rates the vulnerabilities of an organization.

Accepted Answer

A)  risk matrix 
B)  incidence response plan 
C)  public key encryption scheme 
D)  social engineering plan 
A)  risk matrix 
B)  incidence response plan 
C)  public key encryption scheme 
D)  social engineering plan

Question 3

Which of the following is a drawback of digital rights management encountered by users today?

Accepted Answer

A)  DRM systems prevent legitimate duplication of digital content in the event of hardware failure. 
B)  DRM systems do not function efficiently across geographical borders. 
C)  DRM systems often violate intellectual property rights of creators of IP. 
D)  DRM systems do not consistently manage the different formats of digital content. 
A)  DRM systems prevent legitimate duplication of digital content in the event of hardware failure. 
B)  DRM systems do not function efficiently across geographical borders. 
C)  DRM systems often violate intellectual property rights of creators of IP. 
D)  DRM systems do not consistently manage the different formats of digital content.

Question 4

Laws always result from the pushes and pulls of lobbying efforts and political pressures and have nothing to do with ethics.

Accepted Answer

A) True 
 B)False

Question 5

________ is a type of intellectual property theft that involves reproducing the words of another and passing them off as one's own original work, without crediting the source.

Accepted Answer

A)  Shadowing 
B)  Plagiarism 
C)  Incitement 
D)  Embezzlement 
A)  Shadowing 
B)  Plagiarism 
C)  Incitement 
D)  Embezzlement

Question 6

What is intellectual property and what significance does it hold in an organization?

Accepted Answer

Intellectual property is a bedrock of an

Question 7

Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment of the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches?

Accepted Answer

A)  understanding which information assets need protection 
B)  evaluating controls and filling in security gaps 
C)  predicting future risks and devising strategies to prevent them 
D)  recovering existing assets from damage 
A)  understanding which information assets need protection 
B)  evaluating controls and filling in security gaps 
C)  predicting future risks and devising strategies to prevent them 
D)  recovering existing assets from damage

Question 8

The incidence response plan is used by organizational staff to categorize threats, determine the cause, preserve evidence, and get the systems back online.

Accepted Answer

A) True 
 B)False

Question 9

________ makes it most difficult for a hacker to break into passwords.

Accepted Answer

A)  Creating easy to remember passwords 
B)  Reusing the same password in news and games sites through multiple systems 
C)  Maintaining a single, secure password for all accounts 
D)  Creating passwords with symbols, mixed cases, and characters 
A)  Creating easy to remember passwords 
B)  Reusing the same password in news and games sites through multiple systems 
C)  Maintaining a single, secure password for all accounts 
D)  Creating passwords with symbols, mixed cases, and characters

Question 10

Which of the following authentication strategies is the most difficult to forge, crack, or copy and is hence used for physical security?

Accepted Answer

A)  password 
B)  RFID chip 
C)  fingerprint scanner 
D)  credit card 
A)  password 
B)  RFID chip 
C)  fingerprint scanner 
D)  credit card

Question 11

The term ________ refers to a collection of computers that have been compromised by malware, often through some vulnerability in their software or operating system.

Accepted Answer

A)  honeypot 
B)  botnet 
C)  Trojan horse 
D)  black swan 
A)  honeypot 
B)  botnet 
C)  Trojan horse 
D)  black swan

Question 12

Which of the following is a feature of public key encryption?

Accepted Answer

A)  It uses a single point key to encrypt and decrypt data. 
B)  It uses a pair of keys, one to encrypt the data and the other to decrypt data. 
C)  It uses multiple numbers of keys accessible to all members of an organization. 
D)  It uses a duplication process to replicate keys. 
A)  It uses a single point key to encrypt and decrypt data. 
B)  It uses a pair of keys, one to encrypt the data and the other to decrypt data. 
C)  It uses multiple numbers of keys accessible to all members of an organization. 
D)  It uses a duplication process to replicate keys.

Question 13

A cognitive obstacle to strong passwords is the limited capacity of human memory.

Accepted Answer

A) True 
 B)False

Question 14

Laws cover all ethical principles because they are grounded in ethical principles.

Accepted Answer

A) True 
 B)False

Question 15

Social engineering refers to extracting confidential information from information systems through legal procedures.

Accepted Answer

A) True 
 B)False

Question 16

When does a computer become a zombie?

Accepted Answer

A)  when it becomes immune to botnets 
B)  when it enters a secure site 
C)  when it is infected by malware 
D)  when it is hidden behind a firewall 
A)  when it becomes immune to botnets 
B)  when it enters a secure site 
C)  when it is infected by malware 
D)  when it is hidden behind a firewall

Question 17

Biometric identifiers refer to something the user knows, such as a user ID, password, PIN, or answer to a security question.

Accepted Answer

A) True 
 B)False

Question 18

________ refers to an attempt to steal passwords or other sensitive information by persuading the victim to enter the information into a fraudulent website that masquerades as the authentic version.

Accepted Answer

A)  Whitelisting 
B)  Keylogging 
C)  Egress filtering 
D)  Phishing 
A)  Whitelisting 
B)  Keylogging 
C)  Egress filtering 
D)  Phishing

Question 19

Which of the following laws prohibits businesses from sending misleading or deceptive commercial emails, but denies recipients any legal recourse on their own?

Accepted Answer

A)  CAN-SPAM Act 
B)  Gramm-Leach-Bliley Act 
C)  European Union's Data Protection Directive 
D)  State Security Breach Notification Law 
A)  CAN-SPAM Act 
B)  Gramm-Leach-Bliley Act 
C)  European Union's Data Protection Directive 
D)  State Security Breach Notification Law

Question 20

________ is an ethical framework that judges the morality of an action based on how well it adheres to broadly accepted rules, regardless of the action's actual consequences.

Accepted Answer

A)  Utilitarianism 
B)  Legal positivism 
C)  Natural laws and rights 
D)  Rationalism 
A)  Utilitarianism 
B)  Legal positivism 
C)  Natural laws and rights 
D)  Rationalism

Discuss any two kinds of authentication strategies used in organizations.

A(n) ________ lists out and rates the vulnerabilities of an organization.

Which of the following is a drawback of digital rights management encountered by users today?

Laws always result from the pushes and pulls of lobbying efforts and political pressures and have nothing to do with ethics.

________ is a type of intellectual property theft that involves reproducing the words of another and passing them off as one's own original work, without crediting the source.

What is intellectual property and what significance does it hold in an organization?

Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment of the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches?

The incidence response plan is used by organizational staff to categorize threats, determine the cause, preserve evidence, and get the systems back online.

________ makes it most difficult for a hacker to break into passwords.

Which of the following authentication strategies is the most difficult to forge, crack, or copy and is hence used for physical security?

The term ________ refers to a collection of computers that have been compromised by malware, often through some vulnerability in their software or operating system.

Which of the following is a feature of public key encryption?

A cognitive obstacle to strong passwords is the limited capacity of human memory.

Laws cover all ethical principles because they are grounded in ethical principles.

Social engineering refers to extracting confidential information from information systems through legal procedures.

When does a computer become a zombie?

Biometric identifiers refer to something the user knows, such as a user ID, password, PIN, or answer to a security question.

________ refers to an attempt to steal passwords or other sensitive information by persuading the victim to enter the information into a fraudulent website that masquerades as the authentic version.

Which of the following laws prohibits businesses from sending misleading or deceptive commercial emails, but denies recipients any legal recourse on their own?

________ is an ethical framework that judges the morality of an action based on how well it adheres to broadly accepted rules, regardless of the action's actual consequences.

Information Systems and People

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Databases and DataWarehouses

Information Systems for the Enterprise

The Web, E-Commerce, and M-Commerce

Business Intelligence and Decision Making

Collaborating with Technology

Knowledge Management and E-Learning

Systems Development and Procurement

Project Management and Strategic Planning

Filters

Exam 10: Ethics, Privacy, and Security

Discuss any two kinds of authentication strategies used in organizations.

A(n) ________ lists out and rates the vulnerabilities of an organization.

Which of the following is a drawback of digital rights management encountered by users today?

Laws always result from the pushes and pulls of lobbying efforts and political pressures and have nothing to do with ethics.

________ is a type of intellectual property theft that involves reproducing the words of another and passing them off as one's own original work, without crediting the source.

What is intellectual property and what significance does it hold in an organization?

Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment of the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches?

The incidence response plan is used by organizational staff to categorize threats, determine the cause, preserve evidence, and get the systems back online.

________ makes it most difficult for a hacker to break into passwords.

Which of the following authentication strategies is the most difficult to forge, crack, or copy and is hence used for physical security?

The term ________ refers to a collection of computers that have been compromised by malware, often through some vulnerability in their software or operating system.

Which of the following is a feature of public key encryption?

A cognitive obstacle to strong passwords is the limited capacity of human memory.

Laws cover all ethical principles because they are grounded in ethical principles.

Social engineering refers to extracting confidential information from information systems through legal procedures.

When does a computer become a zombie?

Biometric identifiers refer to something the user knows, such as a user ID, password, PIN, or answer to a security question.

________ refers to an attempt to steal passwords or other sensitive information by persuading the victim to enter the information into a fraudulent website that masquerades as the authentic version.

Which of the following laws prohibits businesses from sending misleading or deceptive commercial emails, but denies recipients any legal recourse on their own?

________ is an ethical framework that judges the morality of an action based on how well it adheres to broadly accepted rules, regardless of the action's actual consequences.

Information Systems and People

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Databases and DataWarehouses

Information Systems for the Enterprise

The Web, E-Commerce, and M-Commerce

Business Intelligence and Decision Making

Collaborating with Technology

Knowledge Management and E-Learning

Systems Development and Procurement

Project Management and Strategic Planning

Filters