Question 1

What is a phone scam that attempts to defraud people by asking them to call a bogus telephone number to "confirm" their account information?
A)pharming
B)phishing
C)phishing expedition
D)vishing

Accepted Answer

Vishing (or voice phishing) is a phone scam that attempts to defraud people by asking them to call a bogus telephone number to "confirm" their account information.

Question 2

Working at a ski resort in the mountains has its own unique security issues.Kenny is the chief information officer for Sundance Ski Resort, and he is faced with both physical and information security threats every month.Since the resort implemented a new software system, they have been having larger number of threats and breaches of company information.He suspects that this may be the cause of an internal employee.He needs to clarify and establish what type of plan to help reduce further problems?
A)an information security plan
B)an ethical information policy
C)an antivirus plan
D)None of these are correct.

Accepted Answer

A strong information security plan would detail and outline how the company will implement and maintain Information security.

Question 3

What is phishing?
A)reroutes requests for legitimate websites to false websites.
B)a technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses
C)a masquerading attack that combines spam with spoofing
D)a phishing expedition in which the emails are carefully designed to target a particular person or organization

Accepted Answer

Phishing is a technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses.

Question 4

What is pretexting?
A)a form of social engineering in which one individual lies to obtain confidential data about another individual
B)a hacker looks through your trash to find personal information
C)legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident
D)malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines

Accepted Answer

Pretexting is a form of social engineering in which one individual lies to obtain confidential data about another individual.

Question 5

Applications allowed to be placed on the corporate network, like IM software, and corporate computer equipment used for personal reasons on personal networks are two areas that should be addressed by managers in which of the following company policies?
A)information ethics policy
B)information security policies
C)information technology plan
D)All of these are correct.

Accepted Answer

Both should be addressed in the information security policy.

Question 6

Which of the following represents the three areas where technology can aid in the defense against information security attacks?
A)authentication and authorization, prevention and resistance, prevention and response
B)authentication and authorization, prevention and response, detection and response
C)analyzing and authenticating, prevention and repositioning, detection and response
D)authentication and authorization, prevention and resistance, detection and response

Accepted Answer

The three areas where technology can aid in the defense against information security attacks include authentication and authorization, prevention and resistance, detection and response.

Question 7

What is it called when a hacker looks through your trash to find personal information?
A)striker bunny
B)dumpster diving
C)trash retrieval
D)approved consent

Accepted Answer

This is the definition of dumpster diving.

Question 8

What is dumpster diving?
A)a form of social engineering in which one individual lies to obtain confidential data about another individual
B)a hacker that looks through your trash to find personal information
C)legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident
D)malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines

Accepted Answer

Dumpster diving is when a hacker looks through your trash to find personal information.

Question 9

What is the difference between phishing and pharming?
A)Phishing is not illegal, and pharming is illegal.
B)Phishing is the right of the company, where pharming is the right of the individual.
C)Phishing is a technique to gain personal information for the purpose of identity theft, and pharming reroutes requests for legitimate websites to false websites.
D)All of these are correct.

Accepted Answer

These are the definitions of phishing and pharming.

Question 10

What is a phishing expedition?
A)reroutes requests for legitimate websites to false websites
B)a technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses
C)a masquerading attack that combines spam with spoofing
D)a phishing expedition in which the emails are carefully designed to target a particular person or organization

Accepted Answer

Phishing expedition is a masquerading attack that combines spam with spoofing.

Question 11

What is a destructive agent?
A)a form of social engineering in which one individual lies to obtain confidential data about another individual
B)a hacker looks through your trash to find personal information
C)legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident
D)malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines

Accepted Answer

A destructive agent is malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines.

Question 12

Which of the following is an example of a way to maintain information security that a company should include in their information security policies?
A)requiring computer users to log off before leaving for lunch
B)never sharing user or password information with anyone
C)changing passwords every 30-60 days
D)All of these are correct.

Accepted Answer

All of these are examples of ways to maintain information security and should be included in a company's information security policy.

Question 13

What is forging of someone's identity for the purpose of fraud?
A)identity crisis
B)identity theft
C)ediscovery
D)All of these are correct.

Accepted Answer

This is the definition of identity theft.

Question 14

What is a technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses?
A)pharming
B)phishing
C)phishing expedition
D)spear phishing

Accepted Answer

Phishing is a technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses.

Question 15

Using one's social skills to trick people into revealing access credentials or other valuable information is called ________.
A)social engineering
B)social media
C)social viruses
D)social processes

Accepted Answer

This is the definition of social engineering.

Question 16

What reroutes requests for legitimate websites to false websites?
A)pharming
B)phishing
C)phishing expedition
D)spear phishing

Accepted Answer

Pharming reroutes requests for legitimate websites to false websites.

Question 17

What is a form of social engineering in which one individual lies to obtain confidential data about another individual?
A)dumpster texting
B)dumpster diving
C)trash retrieval
D)pretexting

Accepted Answer

Pretexting is a form of social engineering in which one individual lies to obtain confidential data about another individual.

Question 18

Janet is a financial aid counselor at a local community college and she shares an office with her three coworkers.Janet feels safe in her office environment and frequently leaves her username and password on a sticky note next to her computer.Without realizing it Janet is creating the potential for which type of information security breach to occur?
A)insiders to hack into the college system
B)dumpster diving to find usernames and passwords
C)viruses and worms to spread through the college system
D)All of these are correct.

Accepted Answer

Insiders are legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting information security incident; for example, leaving your username and password in an area that anyone could see and steal for the purpose of breaching information security.

Question 19

What is a masquerading attack that combines spam with spoofing?
A)pharming
B)phishing
C)phishing expedition
D)spear phishing

Accepted Answer

Phishing expedition is a masquerading attack that combines spam with spoofing.

Question 20

What is spear phishing?
A)reroutes requests for legitimate websites to false websites
B)a technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses
C)a masquerading attack that combines spam with spoofing
D)a phishing expedition in which the emails are carefully designed to target a particular person or organization

Accepted Answer

Spear phishing is a phishing expedition in which the emails are carefully designed to target a particular person or organization.

Quiz 4: Ethics and Information Security: Mis Business Concerns: Module 2: Technical Foundations of MIS

What is a phone scam that attempts to defraud people by asking them to call a bogus telephone number to "confirm" their account information?

What is phishing?

What is pretexting?

Applications allowed to be placed on the corporate network, like IM software, and corporate computer equipment used for personal reasons on personal networks are two areas that should be addressed by managers in which of the following company policies?

Which of the following represents the three areas where technology can aid in the defense against information security attacks?

What is it called when a hacker looks through your trash to find personal information?

What is dumpster diving?

What is the difference between phishing and pharming?

What is a phishing expedition?

What is a destructive agent?

Which of the following is an example of a way to maintain information security that a company should include in their information security policies?

What is forging of someone's identity for the purpose of fraud?

What is a technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses?

Using one's social skills to trick people into revealing access credentials or other valuable information is called ________.

What reroutes requests for legitimate websites to false websites?

What is a form of social engineering in which one individual lies to obtain confidential data about another individual?

What is a masquerading attack that combines spam with spoofing?

What is spear phishing?