Question 1

________ is one way of recovering systems in an incidence response plan.

Accepted Answer

A)  Prosecuting the offender for security risk 
B)  Reevaluating the risk matrix 
C)  Restricting system access 
D)  Restoring from media known to be good 
A)  Prosecuting the offender for security risk 
B)  Reevaluating the risk matrix 
C)  Restricting system access 
D)  Restoring from media known to be good

Question 2

Which of the following administrative security controls is most likely to be adopted by a company which handles high-level sensitive information?

Accepted Answer

A)  prohibiting downloading data to USB drives 
B)  restricting employee access to official mails 
C)  prohibiting public access to the company's website 
D)  prohibiting entry of employees into shared workspaces 
A)  prohibiting downloading data to USB drives 
B)  restricting employee access to official mails 
C)  prohibiting public access to the company's website 
D)  prohibiting entry of employees into shared workspaces

Question 3

The single sign-on is a gateway service that permits users to log in once with a single user ID and password to gain access to multiple software applications.

Accepted Answer

A) True 
 B)False

Question 4

Which of the following is a negative impact of surveillance in online communications?

Accepted Answer

A)  lowered productivity of employees 
B)  compromised company security 
C)  increased levels of confidentiality 
D)  increased pressure on corporate email systems 
A)  lowered productivity of employees 
B)  compromised company security 
C)  increased levels of confidentiality 
D)  increased pressure on corporate email systems

Question 5

Which of the following is true of public key encryption?

Accepted Answer

A)  The encryption formulas used for creating the keys are simple in nature and identical at both ends. 
B)  The encryption key is widely shared with everyone, while the decryption key is known only to the recipient. 
C)  The private key is used for encryption and is known only to the sender, while the public key is freely distributed among everyone and is used for decryption. 
D)  The public key encryption scheme uses a single key to encrypt data that can later be decrypted by using the encrypted data as the key. 
A)  The encryption formulas used for creating the keys are simple in nature and identical at both ends. 
B)  The encryption key is widely shared with everyone, while the decryption key is known only to the recipient. 
C)  The private key is used for encryption and is known only to the sender, while the public key is freely distributed among everyone and is used for decryption. 
D)  The public key encryption scheme uses a single key to encrypt data that can later be decrypted by using the encrypted data as the key.

Question 6

________ is the art of manipulating people into breaking normal security procedures or divulging confidential information.

Accepted Answer

A)  Password munging 
B)  Shouldersurfing 
C)  Social engineering 
D)  Astroturfing 
A)  Password munging 
B)  Shouldersurfing 
C)  Social engineering 
D)  Astroturfing

Question 7

________ refers to a system of moral principles that human beings use to judge right and wrong and to develop rules of conduct.

Accepted Answer

A)  Religion 
B)  Ethics 
C)  Creativity 
D)  Theology 
A)  Religion 
B)  Ethics 
C)  Creativity 
D)  Theology

Question 8

Which of the following is an example of intellectual property owned by an IT firm?

Accepted Answer

A)  software code 
B)  real estate 
C)  office stationery 
D)  legal documents 
A)  software code 
B)  real estate 
C)  office stationery 
D)  legal documents

Question 9

The term ________ refers to configured computers with specific vulnerabilities so they can attract different varieties of malware in the wild, study their properties, and find out who started them.

Accepted Answer

A)  expert systems 
B)  web crawlers 
C)  honeypots 
D)  server farms 
A)  expert systems 
B)  web crawlers 
C)  honeypots 
D)  server farms

Question 10

Which of the following authentication strategies is the easiest to compromise or crack?

Accepted Answer

A)  iris configuration 
B)  reliance on user knowledge 
C)  fingerprint analysis 
D)  voice pattern recognition 
A)  iris configuration 
B)  reliance on user knowledge 
C)  fingerprint analysis 
D)  voice pattern recognition

Question 11

According to the incidence response plan, which of the following would be most useful in containing any damage caused by a security threat?

Accepted Answer

A)  preserve evidence of damage done 
B)  reevaluate risk matrix 
C)  restrict system access 
D)  investigate system logs for evidence 
A)  preserve evidence of damage done 
B)  reevaluate risk matrix 
C)  restrict system access 
D)  investigate system logs for evidence

Question 12

Trade secrets, software, patents, and copyrighted works comprise intellectual property.

Accepted Answer

A) True 
 B)False

Question 13

What of the following is a drawback of cloud computing?

Accepted Answer

A)  It delivers computing as a product rather than a service. 
B)  Data protection laws are not uniform across countries. 
C)  Resources are difficult to share because information is maintained on a protected server. 
D)  It provides computation that requires end-user knowledge of the physical location and configuration of the system that delivers services. 
A)  It delivers computing as a product rather than a service. 
B)  Data protection laws are not uniform across countries. 
C)  Resources are difficult to share because information is maintained on a protected server. 
D)  It provides computation that requires end-user knowledge of the physical location and configuration of the system that delivers services.

Question 14

Which of the following laws establishes requirements that govern how personally identifiable information on individuals is collected, used, and disseminated by federal agencies?

Accepted Answer

A)  the CAN-SPAM Act 
B)  the Privacy Act of 1974 
C)  the State Security Breach Notification Laws 
D)  the Gramm-Leach-Bliley Act 
A)  the CAN-SPAM Act 
B)  the Privacy Act of 1974 
C)  the State Security Breach Notification Laws 
D)  the Gramm-Leach-Bliley Act

Question 15

Which of the following technologies serves as a biometric identifier for physical security?

Accepted Answer

A)  iris configuration 
B)  RFID chip 
C)  credit card 
D)  user ID-password combination 
A)  iris configuration 
B)  RFID chip 
C)  credit card 
D)  user ID-password combination

Question 16

Which of the following is an element of privacy?

Accepted Answer

A)  the right to be left alone 
B)  the right to view, correct, and edit private, protected information 
C)  the right to withhold taxes 
D)  the right to demand information 
A)  the right to be left alone 
B)  the right to view, correct, and edit private, protected information 
C)  the right to withhold taxes 
D)  the right to demand information

Question 17

________ consists of intangible assets which are expressions of the human mind that give the creator of the property the right to its commercial value.

Accepted Answer

A)  Immovable property 
B)  Freehold property 
C)  Intellectual property 
D)  Public property 
A)  Immovable property 
B)  Freehold property 
C)  Intellectual property 
D)  Public property

Question 18

Discuss the pros and cons of anonymity in the online world.

Accepted Answer

Anonymity in the online world has severa

Question 19

Which of the following statements is true of encryption?

Accepted Answer

A)  It is a powerful technical control that protects sensitive data. 
B)  It helps recover encoded files through an image processor even if the user forgets the password. 
C)  It allows application of notification laws when an organization loses sensitive information. 
D)  It increases the level of risk assessments when it is used for backup data. 
A)  It is a powerful technical control that protects sensitive data. 
B)  It helps recover encoded files through an image processor even if the user forgets the password. 
C)  It allows application of notification laws when an organization loses sensitive information. 
D)  It increases the level of risk assessments when it is used for backup data.

Question 20

Which of the following statements is true of information privacy?

Accepted Answer

A)  It is most easily achieved online and is impossible to maintain on paper. 
B)  It is governed by laws that are universal in all countries. 
C)  It refers to the protection of data about individuals. 
D)  It emphasizes the importance of sharing data over protecting personally identifiable information. 
A)  It is most easily achieved online and is impossible to maintain on paper. 
B)  It is governed by laws that are universal in all countries. 
C)  It refers to the protection of data about individuals. 
D)  It emphasizes the importance of sharing data over protecting personally identifiable information.

________ is one way of recovering systems in an incidence response plan.

Which of the following administrative security controls is most likely to be adopted by a company which handles high-level sensitive information?

The single sign-on is a gateway service that permits users to log in once with a single user ID and password to gain access to multiple software applications.

Which of the following is a negative impact of surveillance in online communications?

Which of the following is true of public key encryption?

________ is the art of manipulating people into breaking normal security procedures or divulging confidential information.

________ refers to a system of moral principles that human beings use to judge right and wrong and to develop rules of conduct.

Which of the following is an example of intellectual property owned by an IT firm?

The term ________ refers to configured computers with specific vulnerabilities so they can attract different varieties of malware in the wild, study their properties, and find out who started them.

Which of the following authentication strategies is the easiest to compromise or crack?

According to the incidence response plan, which of the following would be most useful in containing any damage caused by a security threat?

Trade secrets, software, patents, and copyrighted works comprise intellectual property.

What of the following is a drawback of cloud computing?

Which of the following laws establishes requirements that govern how personally identifiable information on individuals is collected, used, and disseminated by federal agencies?

Which of the following technologies serves as a biometric identifier for physical security?

Which of the following is an element of privacy?

________ consists of intangible assets which are expressions of the human mind that give the creator of the property the right to its commercial value.

Discuss the pros and cons of anonymity in the online world.

Which of the following statements is true of encryption?

Which of the following statements is true of information privacy?

Information Systems and People

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Databases and DataWarehouses

Information Systems for the Enterprise

The Web, E-Commerce, and M-Commerce

Business Intelligence and Decision Making

Collaborating with Technology

Knowledge Management and E-Learning

Systems Development and Procurement

Project Management and Strategic Planning

Filters

Exam 10: Ethics, Privacy, and Security

________ is one way of recovering systems in an incidence response plan.

Which of the following administrative security controls is most likely to be adopted by a company which handles high-level sensitive information?

The single sign-on is a gateway service that permits users to log in once with a single user ID and password to gain access to multiple software applications.

Which of the following is a negative impact of surveillance in online communications?

Which of the following is true of public key encryption?

________ is the art of manipulating people into breaking normal security procedures or divulging confidential information.

________ refers to a system of moral principles that human beings use to judge right and wrong and to develop rules of conduct.

Which of the following is an example of intellectual property owned by an IT firm?

The term ________ refers to configured computers with specific vulnerabilities so they can attract different varieties of malware in the wild, study their properties, and find out who started them.

Which of the following authentication strategies is the easiest to compromise or crack?

According to the incidence response plan, which of the following would be most useful in containing any damage caused by a security threat?

Trade secrets, software, patents, and copyrighted works comprise intellectual property.

What of the following is a drawback of cloud computing?

Which of the following laws establishes requirements that govern how personally identifiable information on individuals is collected, used, and disseminated by federal agencies?

Which of the following technologies serves as a biometric identifier for physical security?

Which of the following is an element of privacy?

________ consists of intangible assets which are expressions of the human mind that give the creator of the property the right to its commercial value.

Discuss the pros and cons of anonymity in the online world.

Which of the following statements is true of encryption?

Which of the following statements is true of information privacy?

Information Systems and People

Information Systems and Strategy

Information and Communications Technologies: The Enterprise Architecture

Databases and DataWarehouses

Information Systems for the Enterprise

The Web, E-Commerce, and M-Commerce

Business Intelligence and Decision Making

Collaborating with Technology

Knowledge Management and E-Learning

Systems Development and Procurement

Project Management and Strategic Planning

Filters