Question 1

_____ are software programs that hide in other computer programs and reveal their designed behavior only when they are activated.

Accepted Answer

A)  Viruses 
B)  Worms 
C)  Trojan horses 
D)  Back doors 
E)  Logic bombs

Question 2

In _____, the organization takes concrete actions against risks.

Accepted Answer

A)  risk management 
B)  risk analysis 
C)  risk mitigation 
D)  risk acceptance 
E)  risk transference

Question 3

Public-key encryption uses two different keys, one public and one private.

Accepted Answer

A) True 
 B)False

Question 4

In _____, the organization purchases insurance as a means to compensate for any loss.

Accepted Answer

A)  risk management 
B)  risk analysis 
C)  risk mitigation 
D)  risk acceptance 
E)  risk transference

Question 5

A _____ attack uses deception to fraudulently acquire sensitive personal information by masquerading as an official e-mail.

Accepted Answer

A)  Zero-day 
B)  Denial-of-service 
C)  Distributed denial-of-service 
D)  Phishing 
E)  Brute force dictionary

Question 6

Risk analysis involves determining whether security programs are working.

Accepted Answer

A) True 
 B)False

Question 7

Compare a hot site, a warm site, and a cold site as strategies for business continuity.

Accepted Answer

The answer of Compare a hot site, a warm site,...

Question 8

A _____ is a document that grants the holder exclusive rights on an invention for 20 years.

Accepted Answer

A)  copyright 
B)  patent 
C)  trade secret 
D)  knowledge base 
E)  private property notice

Question 9

A pharmaceutical company's research and development plan for a new class of drugs would be best described as which of the following?

Accepted Answer

A)  Copyrighted material 
B)  Patented material 
C)  A trade secret 
D)  A knowledge base 
E)  Public property

Question 10

IT security is the responsibility of everyone in the organization.

Accepted Answer

A) True 
 B)False

Question 11

Trojan horses are software programs that hide in other computer programs and reveal their designed behavior only when they are activated.

Accepted Answer

A) True 
 B)False

Question 12

The area located between two firewalls within an organization is called the demilitarized zone.

Accepted Answer

A) True 
 B)False

Question 13

Rank the following in terms of dollar value of the crime, from highest to lowest.

Accepted Answer

A)  robbery - white collar crime - cybercrime 
B)  white collar crime - extortion - robbery 
C)  cybercrime - white collar crime - robbery 
D)  cybercrime - robbery - white collar crime 
E)  white collar crime - burglary - robbery

Question 14

Cybercriminals can obtain the information they need in order to assume another person's identity by:

Accepted Answer

A)  Infiltrating an organization that stores large amounts of personal information. 
B)  Phishing. 
C)  Hacking into a corporate database. 
D)  Stealing mail. 
E)  All of the above are strategies to obtain information to assume another person's identity.

Question 15

_____ is the process in which an organization assesses the value of each asset being protected, estimates the probability that it will be compromised, and compares the probable costs of an attack with the costs of protecting the asset.

Accepted Answer

A)  Risk management 
B)  Risk analysis 
C)  Risk mitigation 
D)  Risk acceptance 
E)  Risk transference

Question 16

The most overlooked people in information security are:

Accepted Answer

A)  consultants and temporary hires. 
B)  secretaries and consultants. 
C)  contract laborers and executive assistants. 
D)  janitors and guards. 
E)  executives and executive secretaries.

Question 17

Biometrics are an example of:

Accepted Answer

A)  something the user is. 
B)  something the user wants. 
C)  something the user has. 
D)  something the user knows. 
E)  something the user does.

Question 18

Contrast unintentional and deliberate threats to an information resource. Provide examples of both.

Accepted Answer

The answer of Contrast unintentional and deliberate threats to an...

Question 19

Define the principle of least privilege, and consider how an organization's senior executives might view the application of this principle.

Accepted Answer

The answer of Define the principle of least privilege, and...

Question 20

Dumpster diving is always illegal because it involves trespassing on private property.

Accepted Answer

A) True 
 B)False

Exam 4: Information Security

_____ are software programs that hide in other computer programs and reveal their designed behavior only when they are activated.

In _____, the organization takes concrete actions against risks.

Public-key encryption uses two different keys, one public and one private.

In _____, the organization purchases insurance as a means to compensate for any loss.

A _____ attack uses deception to fraudulently acquire sensitive personal information by masquerading as an official e-mail.

Risk analysis involves determining whether security programs are working.

Compare a hot site, a warm site, and a cold site as strategies for business continuity.

A _____ is a document that grants the holder exclusive rights on an invention for 20 years.

A pharmaceutical company's research and development plan for a new class of drugs would be best described as which of the following?

IT security is the responsibility of everyone in the organization.

Trojan horses are software programs that hide in other computer programs and reveal their designed behavior only when they are activated.

The area located between two firewalls within an organization is called the demilitarized zone.

Rank the following in terms of dollar value of the crime, from highest to lowest.

Cybercriminals can obtain the information they need in order to assume another person's identity by:

_____ is the process in which an organization assesses the value of each asset being protected, estimates the probability that it will be compromised, and compares the probable costs of an attack with the costs of protecting the asset.

The most overlooked people in information security are:

Biometrics are an example of:

Contrast unintentional and deliberate threats to an information resource. Provide examples of both.

Define the principle of least privilege, and consider how an organization's senior executives might view the application of this principle.

Dumpster diving is always illegal because it involves trespassing on private property.