Question 1

Employees in which functional areas of the organization pose particularly grave threats to information security?

Accepted Answer

A)  human resources, finance 
B)  human resources, management information systems 
C)  finance, marketing 
D)  operations management, management information systems 
E)  finance, management information systems 
A)  human resources, finance 
B)  human resources, management information systems 
C)  finance, marketing 
D)  operations management, management information systems 
E)  finance, management information systems

Question 2

Which of the following is not a strategy for mitigating the risk of threats against information?

Accepted Answer

A)  Continue operating with no controls and absorb any damages that occur 
B)  Transfer the risk by purchasing insurance. 
C)  Implement controls that minimize the impact of the threat 
D)  Install controls that block the risk. 
E)  All of the above are strategies for mitigating risk. 
A)  Continue operating with no controls and absorb any damages that occur 
B)  Transfer the risk by purchasing insurance. 
C)  Implement controls that minimize the impact of the threat 
D)  Install controls that block the risk. 
E)  All of the above are strategies for mitigating risk.

Question 3

Software can be copyrighted.

Accepted Answer

A) True 
 B)False

Question 4

Which of the following statements is false?

Accepted Answer

A)  Credit card companies usually block stolen credit cards rather than prosecute. 
B)  People tend to shortcut security procedures because the procedures are inconvenient. 
C)  It is easy to assess the value of a hypothetical attack. 
D)  The online commerce industry isn't willing to install safeguards on credit card transactions. 
E)  The cost of preventing computer crimes can be very high. 
A)  Credit card companies usually block stolen credit cards rather than prosecute. 
B)  People tend to shortcut security procedures because the procedures are inconvenient. 
C)  It is easy to assess the value of a hypothetical attack. 
D)  The online commerce industry isn't willing to install safeguards on credit card transactions. 
E)  The cost of preventing computer crimes can be very high.

Question 5

_____ are segments of computer code that attach to existing computer programs and perform malicious acts.

Accepted Answer

A)  Viruses 
B)  Worms 
C)  Trojan horses 
D)  Back doors 
E)  Logic bombs 
A)  Viruses 
B)  Worms 
C)  Trojan horses 
D)  Back doors 
E)  Logic bombs

Question 6

Access controls involve _____ before _____.

Accepted Answer

A)  biometrics, signature recognition 
B)  authentication, authorization 
C)  iris scanning, voice recognition 
D)  strong passwords, biometrics 
E)  authorization, authentication 
A)  biometrics, signature recognition 
B)  authentication, authorization 
C)  iris scanning, voice recognition 
D)  strong passwords, biometrics 
E)  authorization, authentication

Question 7

Which of the following factors is not increasing the threats to information security?

Accepted Answer

A)  smaller computing devices 
B)  downstream liability 
C)  the Internet 
D)  limited storage capacity on portable devices 
E)  due diligence 
A)  smaller computing devices 
B)  downstream liability 
C)  the Internet 
D)  limited storage capacity on portable devices 
E)  due diligence

Question 8

In a process called _____, a company allows nothing to run unless it is approved, whereas in a process called _____, the company allows everything to run unless it is not approved.

Accepted Answer

A)  whitelisting, blacklisting 
B)  whitelisting, encryption 
C)  encryption, whitelisting 
D)  encryption, blacklisting 
E)  blacklisting, whitelisting 
A)  whitelisting, blacklisting 
B)  whitelisting, encryption 
C)  encryption, whitelisting 
D)  encryption, blacklisting 
E)  blacklisting, whitelisting

Question 9

Cyberterrorism and cyberwarfare can attack supervisory control and data acquisition (SCADA) systems to cause widespread physical damage.

Accepted Answer

A) True 
 B)False

Question 10

Organizations use authentication to establish privileges to systems operations.

Accepted Answer

A) True 
 B)False

Question 11

Which of the following statements concerning firewalls is not true?

Accepted Answer

A)  Firewalls prevent unauthorized Internet users from accessing private networks. 
B)  Firewalls examine every message that enters or leaves an organization's network. 
C)  Firewalls filter network traffic according to categories of activities that are likely to cause problems. 
D)  Firewalls filter messages the same way as anti-malware systems do. 
E)  Firewalls are sometimes located inside an organization's private network. 
A)  Firewalls prevent unauthorized Internet users from accessing private networks. 
B)  Firewalls examine every message that enters or leaves an organization's network. 
C)  Firewalls filter network traffic according to categories of activities that are likely to cause problems. 
D)  Firewalls filter messages the same way as anti-malware systems do. 
E)  Firewalls are sometimes located inside an organization's private network.

Question 12

The computing skills necessary to be a hacker are decreasing.

Accepted Answer

A) True 
 B)False

Question 13

Unintentional threats to information systems include all of the following except:

Accepted Answer

A)  malicious software 
B)  tailgating 
C)  power outage 
D)  lack of user experience 
E)  tornados 
A)  malicious software 
B)  tailgating 
C)  power outage 
D)  lack of user experience 
E)  tornados

Question 14

Define identity theft, and explain the types of problems that it creates for the victims.

Accepted Answer

The answer of Define identity theft, and explain the types...

Question 15

An organization's e-mail policy has the least impact on which of the following software attacks?

Accepted Answer

A)  virus 
B)  worm 
C)  phishing 
D)  spear phishing 
E)  zero-day 
A)  virus 
B)  worm 
C)  phishing 
D)  spear phishing 
E)  zero-day

Question 16

A _____ is any danger to which an information resource may be exposed.

Accepted Answer

A)  vulnerability 
B)  risk 
C)  control 
D)  threat 
E)  compromise 
A)  vulnerability 
B)  risk 
C)  control 
D)  threat 
E)  compromise

Question 17

Organizations utilize layers of controls because they face so many diverse threats to information security.

Accepted Answer

A) True 
 B)False

Question 18

_____ controls are concerned with user identification, and they restrict unauthorized individuals from using information resources.

Accepted Answer

A)  Access 
B)  Physical 
C)  Data security 
D)  Administrative 
E)  Input 
A)  Access 
B)  Physical 
C)  Data security 
D)  Administrative 
E)  Input

Question 19

Voice recognition is an example of "something a user does" authentication.

Accepted Answer

A) True 
 B)False

Question 20

_____ involves building an inappropriate trust relationship with employees for the purpose of gaining sensitive information or unauthorized access privileges.

Accepted Answer

A)  Tailgating 
B)  Hacking 
C)  Spoofing 
D)  Social engineering 
E)  Spamming 
A)  Tailgating 
B)  Hacking 
C)  Spoofing 
D)  Social engineering 
E)  Spamming

Employees in which functional areas of the organization pose particularly grave threats to information security?

Which of the following is not a strategy for mitigating the risk of threats against information?

Software can be copyrighted.

Which of the following statements is false?

_____ are segments of computer code that attach to existing computer programs and perform malicious acts.

Access controls involve _ before _.

Which of the following factors is not increasing the threats to information security?

In a process called _, a company allows nothing to run unless it is approved, whereas in a process called _, the company allows everything to run unless it is not approved.

Cyberterrorism and cyberwarfare can attack supervisory control and data acquisition (SCADA) systems to cause widespread physical damage.

Organizations use authentication to establish privileges to systems operations.

Which of the following statements concerning firewalls is not true?

The computing skills necessary to be a hacker are decreasing.

Unintentional threats to information systems include all of the following except:

Define identity theft, and explain the types of problems that it creates for the victims.

An organization's e-mail policy has the least impact on which of the following software attacks?

A _____ is any danger to which an information resource may be exposed.

Organizations utilize layers of controls because they face so many diverse threats to information security.

_____ controls are concerned with user identification, and they restrict unauthorized individuals from using information resources.

Voice recognition is an example of "something a user does" authentication.

_____ involves building an inappropriate trust relationship with employees for the purpose of gaining sensitive information or unauthorized access privileges.

Introduction to Information Systems

Organizational Strategy, Competitive Advantage, and Information Systems

Ethics and Privacy

Data and Knowledge Management

Networks

E-Business and E-Commerce

Wireless, Mobile Computing, and Mobile Commerce

Social Computing

Enterprise Resource Planning Systems

Customer Relationship Management and Supply Chain Management

Crm and Scm

Business Intelligence

Technology Guide 1 - Hardware

Technology Guide 2 - Software

Technology Guide 3 - Cloud Computing

Technology Guide 4 - Intelligent Systems

Filters

Exam 4: Information Security

Employees in which functional areas of the organization pose particularly grave threats to information security?

Which of the following is not a strategy for mitigating the risk of threats against information?

Software can be copyrighted.

Which of the following statements is false?

_____ are segments of computer code that attach to existing computer programs and perform malicious acts.

Access controls involve _____ before _____.

Which of the following factors is not increasing the threats to information security?

In a process called _____, a company allows nothing to run unless it is approved, whereas in a process called _____, the company allows everything to run unless it is not approved.

Cyberterrorism and cyberwarfare can attack supervisory control and data acquisition (SCADA) systems to cause widespread physical damage.

Organizations use authentication to establish privileges to systems operations.

Which of the following statements concerning firewalls is not true?

The computing skills necessary to be a hacker are decreasing.

Unintentional threats to information systems include all of the following except:

Define identity theft, and explain the types of problems that it creates for the victims.

An organization's e-mail policy has the least impact on which of the following software attacks?

A _____ is any danger to which an information resource may be exposed.

Organizations utilize layers of controls because they face so many diverse threats to information security.

_____ controls are concerned with user identification, and they restrict unauthorized individuals from using information resources.

Voice recognition is an example of "something a user does" authentication.

_____ involves building an inappropriate trust relationship with employees for the purpose of gaining sensitive information or unauthorized access privileges.

Introduction to Information Systems

Organizational Strategy, Competitive Advantage, and Information Systems

Ethics and Privacy

Data and Knowledge Management

Networks

E-Business and E-Commerce

Wireless, Mobile Computing, and Mobile Commerce

Social Computing

Enterprise Resource Planning Systems

Customer Relationship Management and Supply Chain Management

Crm and Scm

Business Intelligence

Technology Guide 1 - Hardware

Technology Guide 2 - Software

Technology Guide 3 - Cloud Computing

Technology Guide 4 - Intelligent Systems

Filters

Access controls involve _ before _.

In a process called _, a company allows nothing to run unless it is approved, whereas in a process called _, the company allows everything to run unless it is not approved.