Question 1

Even when preventive measures are implemented, no organization is completely secure from a determined computer attack.

Accepted Answer

A) True 
 B)False  True

Question 2

After virus eradication, you can use a previous backup to restore an infected computer.

Accepted Answer

A) True 
 B)False  False

Question 3

Vishing frequently leads consumers to counterfeit Web sites designed to trick them into initiating a denial-of-service attack.

Accepted Answer

A) True 
 B)False  False

Question 4

Often a successful attack on an information system is due to poor system design or implementation. Once such a vulnerability is discovered, software developers quickly create and issue which of the following, in order to eliminate the problem?

Accepted Answer

A)  patch
B)  bot
C)  rootkit
D)  Trojan horse

Question 5

The intimidation of government or civilian population by using information technology to disable critical national infrastructure in order to achieve political, religious, or ideological goals is known as which of the following?

Accepted Answer

A)  whistleblowing
B)  cyberterrorism
C)  hacktivism
D)  cyberespionage

Question 6

Define computer forensics and briefly describe how one may prepare for a role as a computer forensics investigator.

Accepted Answer

The answer of Define computer forensics and briefly describe how...

Question 7

Malware that stops you from using your computer or accessing your data until you meet certain demands is known as which of the following?

Accepted Answer

A)  trojan horse
B)  worm
C)  ransomware
D)  phishing

Question 8

A type of computer crime perpetrator whose primary motive is to achieve financial gain is known as which of the following?

Accepted Answer

A)  industrial spy
B)  hacktivist
C)  black hat hacker
D)  cybercriminal

Question 9

Briefly explain why many organizations are choosing to outsource their network security operations to a managed security service provider (MSSP).

Accepted Answer

The answer of Briefly explain why many organizations are choosing...

Question 10

A business policy that permits employees to use their own mobile devices to access company computing resources and applications is known as which of the following?

Accepted Answer

A)  USA Patriot Act
B)  Bring your own device (BYO
D)  
C)  Mobile Alliance Policy (MAP) 
D)  CAPTCHA

Question 11

Which of the following is a form of Trojan horse which executes when it is triggered by a specific event such as a change in a particular file, by typing a specific series of keystrokes, or by a specific time or date?

Accepted Answer

A)  denial-of-service attack
B)  logic bomb
C)  botnet
D)  rootkit

Question 12

Many organizations use software to provide a comprehensive display of all key performance indicators related to an organization's security defenses, including threats, exposures, policy compliance, and incident alerts. What is this type of software known as?

Accepted Answer

A)  firewall
B)  security dashboard
C)  intrusion detection software
D)  proxy server software

Question 13

The Controlling the Assault of Non-Solicited Pornography and Marketing (CAN-SPAM) Act states that it is legal to spam, provided the messages meet a few basic requirements.

Accepted Answer

A) True 
 B)False

Question 14

Installation of a corporate firewall is the least common security precaution taken by businesses as it does not provide sufficient security.

Accepted Answer

A) True 
 B)False

Question 15

Trojan horse has become an umbrella term for many types of malicious code.

Accepted Answer

A) True 
 B)False

Question 16

The cost of creating an email campaign for a product or a service is typically more expensive and takes longer to conduct than a direct-mail campaign.

Accepted Answer

A) True 
 B)False

Question 17

Bring your own device (BYOD) is a business policy that permits, and in some cases encourages, employees to use their own mobile devices (smartphones, tablets, or laptops) to access company computing resources and applications.

Accepted Answer

A) True 
 B)False

Question 18

Which of the following concepts recognizes that managers must use their judgment to ensure that the cost of control does not exceed the system's benefits or the risks involved?

Accepted Answer

A)  competitive intelligence
B)  reasonable assurance
C)  separation of duties
D)  risk assessment

Question 19

Whenever possible, automated system rules should mirror an organization's written policies.

Accepted Answer

A) True 
 B)False

Question 20

Identify and briefly discuss five reasons why the number, variety, and impact of security incidents is increasing.

Accepted Answer

The answer of Identify and briefly discuss five reasons why...

Exam 3: Cyberattacks and Cybersecurity

Even when preventive measures are implemented, no organization is completely secure from a determined computer attack.

After virus eradication, you can use a previous backup to restore an infected computer.

Vishing frequently leads consumers to counterfeit Web sites designed to trick them into initiating a denial-of-service attack.

Often a successful attack on an information system is due to poor system design or implementation. Once such a vulnerability is discovered, software developers quickly create and issue which of the following, in order to eliminate the problem?

The intimidation of government or civilian population by using information technology to disable critical national infrastructure in order to achieve political, religious, or ideological goals is known as which of the following?

Define computer forensics and briefly describe how one may prepare for a role as a computer forensics investigator.

Malware that stops you from using your computer or accessing your data until you meet certain demands is known as which of the following?

A type of computer crime perpetrator whose primary motive is to achieve financial gain is known as which of the following?

Briefly explain why many organizations are choosing to outsource their network security operations to a managed security service provider (MSSP).

A business policy that permits employees to use their own mobile devices to access company computing resources and applications is known as which of the following?

Which of the following is a form of Trojan horse which executes when it is triggered by a specific event such as a change in a particular file, by typing a specific series of keystrokes, or by a specific time or date?

Many organizations use software to provide a comprehensive display of all key performance indicators related to an organization's security defenses, including threats, exposures, policy compliance, and incident alerts. What is this type of software known as?

The Controlling the Assault of Non-Solicited Pornography and Marketing (CAN-SPAM) Act states that it is legal to spam, provided the messages meet a few basic requirements.

Installation of a corporate firewall is the least common security precaution taken by businesses as it does not provide sufficient security.

Trojan horse has become an umbrella term for many types of malicious code.

The cost of creating an email campaign for a product or a service is typically more expensive and takes longer to conduct than a direct-mail campaign.

Bring your own device (BYOD) is a business policy that permits, and in some cases encourages, employees to use their own mobile devices (smartphones, tablets, or laptops) to access company computing resources and applications.

Which of the following concepts recognizes that managers must use their judgment to ensure that the cost of control does not exceed the system's benefits or the risks involved?

Whenever possible, automated system rules should mirror an organization's written policies.

Identify and briefly discuss five reasons why the number, variety, and impact of security incidents is increasing.