Deck 12: Information Security Management

Question 1

During which of the following computer crimes does a password cracker try every possible combination of characters?

A) DOS attack
B) brute force attack
C) pretexting
D) sniffing

Answer 1

B

Question 2

Which of the following is a technical safeguard against security threats?

A) passwords
B) backup and recovery
C) compliance
D) identification and authorization

Answer 2

D

Question 3

Which of the following types of security loss is WikiLeaks an example of?

A) unauthorized data disclosure
B) incorrect data modification
C) faulty service
D) denial of service

Answer 3

A

Question 4

A(n)________ is a computer program that senses when another computer is attempting to scan a disk or access a computer.

A) intrusion detection system
B) account administration system
C) business intelligence system
D) malware definition

Question 5

Which of the following is considered a personal security safeguard?

A) create backup of cookies and temporary files
B) send no valuable data via email or IM
C) use a single valid password for all accounts
D) conduct transactions using http rather than https

Question 6

Which of the following is a synonym for phishing?

A) drive-by sniffing
B) email spoofing
C) IP spoofing
D) system hacking

Question 7

________ occurs when computer criminals invade a computer system and replace legitimate programs with their own unauthorized ones.

A) Usurpation
B) Encryption
C) Spoofing
D) Sniffing

Question 8

Mark receives an email from his bank asking him to update and verify his credit card details.He replies to the mail with all the requested details.Mark later learns that the mail was not actually sent by his bank and that the information he had shared has been misused.Mark is a victim of ________.

A) hacking
B) sniffing
C) data mining
D) phishing

Question 9

________ is a technique for intercepting computer communications.

A) Spoofing
B) Hacking
C) Pretexting
D) Sniffing

Question 10

A person calls the Stark residence and pretends to represent a credit card company.He asks Mrs.Stark to confirm her credit card number.This is an example of ________.

A) hacking
B) data mining
C) pretexting
D) sniffing

Question 11

________ are small files that browsers store on users' computers when they visit Web sites.

A) Cookies
B) Viral hooks
C) Mashups
D) Keys

Question 12

________ take computers with wireless connections through an area and search for unprotected wireless networks.

A) Drive-by sniffers
B) Key punchers
C) Hackers
D) Phishers

Question 13

Which of the following is a data safeguard against security threats?

A) application design
B) dissemination of information
C) physical security
D) malware protection

Question 14

Which of the following statements is true of the financial losses due to computer security threats?

A) All studies on costs of computer crimes are based on unobtrusive research.
B) There are several set standards for tallying computer crime costs and financial losses.
C) The financial losses faced by companies due to human error are enormous.
D) Damages caused by natural disasters are minimal when compared to the damages due to human errors.

Question 15

A(n)________ is a measure that individuals or organizations take to block a threat from obtaining an asset.

A) Hadoop
B) safeguard
C) information silo
D) third-party cookie

Question 16

Breaking into computers,servers,or networks to steal proprietary and confidential data is referred to as ________.

A) usurpation
B) spoofing
C) hacking
D) sniffing

Question 17

Which of the following is a human safeguard against security threats?

A) backup and recovery
B) firewalls
C) physical security
D) procedure design

Question 18

A ________ pretends to be a legitimate company and sends emails requesting confidential data.

A) hacker
B) phisher
C) drive-by sniffer
D) key puncher

Question 19

Which of the following occurs when millions of bogus service requests flood a Web server and prevent it from servicing legitimate requests?

A) spoofing
B) hacking
C) usurpation
D) DOS attack

Question 20

A(n)________ is a sophisticated,possibly long-running,computer hack that is perpetrated by large,well-funded organizations like governments.

A) Advanced Persistent Threat (APT)
B) Advanced Volatile Threat (AVT)
C) local area network denial (LAND)
D) denial of service (DOS)

Question 21

Backup and physical security are ________ against computer security threats.

A) technical safeguards
B) data safeguards
C) human safeguards
D) procedural safeguards

Question 22

________ is the process of transforming clear text into coded,unintelligible text for secure storage or communication.

A) Usurpation
B) Authentication
C) Standardization
D) Encryption

Question 23

A ________ has a microchip that is loaded with identifying data.

A) payment card
B) biometric passport
C) smart card
D) flashcard

Question 24

A(n)________ sits outside an organizational network and is the first device that Internet traffic encounters.

A) internal firewall
B) perimeter firewall
C) packet-filtering firewall
D) application firewall

Question 25

The procedure of entrusting a party with a copy of an encryption key that can be used in case the actual key is lost or destroyed is called ________.

A) key escrow
B) asymmetric encryption
C) symmetric encryption
D) biometric authentication

Question 26

A password ________ a user.

A) authenticates
B) identifies
C) conceals
D) encrypts

Question 27

________ includes viruses,worms,Trojan horses,spyware,and adware.

A) Malware
B) Metadata
C) Shareware
D) Firewall

Question 28

A user name ________ a user.

A) authenticates
B) identifies
C) conceals
D) encrypts

Question 29

With HTTPS,data are encrypted using the Secure Socket Layer (SSL)protocol,which is also known as ________.

A) File Transfer Protocol (FTP)
B) Simple Mail Transfer Protocol (SMTP)
C) Secure Shell (SSH)
D) Transport Layer Security (TLS)

Question 30

________ determine whether to pass each part of a message by examining its source address,destination addresses,and other such data.

A) Perimeter firewalls
B) Internal firewalls
C) Packet-filtering firewalls
D) Application firewalls

Question 31

Adware and spyware are similar to each other in that they both ________.

A) masquerade as useful programs
B) are specifically programmed to spread
C) are installed without a user's permission
D) are used to replicate programs

Question 32

With HTTPS,data are encrypted using a protocol called the ________.

A) Secure Shell (SSH)
B) Secure Socket Layer (SSL)
C) File Transfer Protocol (FTP)
D) Post Office Protocol (POP)

Question 33

Which of the following uses an individual's personal physical characteristics such as fingerprints,facial features,and retinal scans for verification purposes?

A) flashcards
B) smart cards
C) biometric authentication
D) symmetric encryption

Question 34

Which of the following refers to viruses that masquerade as useful programs?

A) adware
B) Trojan horses
C) spyware
D) payloads

Question 35

Users of smart cards are required to enter a ________ to be authenticated.

A) personal identification number
B) password
C) biometric detail
D) key

Question 36

Which of the following statements is true about position sensitivity?

A) Position sensitivity is a type of data safeguard.
B) Documenting position sensitivity enables security personnel to prioritize their activities.
C) Documentation of position sensitivity is carried out only for highly sensitive jobs.
D) Documentation of position sensitivity is carried out only for new employees.

Question 37

The most secure communications over the Internet use a protocol called ________.

A) SMTP
B) SFTP
C) HTTPS
D) HTTP

Question 38

Which of the following statements is true of symmetric encryption?

A) With symmetric encryption, the same key is used for both encoding and decoding.
B) Asymmetric encryption is simpler and much faster than symmetric encryption.
C) With symmetric encryption, encoding and decoding are performed by two different keys.
D) Public key/private key is a special version of symmetric encryption used on the Internet.

Question 39

Which of the following is an example of a data safeguard against security threats?

A) application design
B) backup and recovery
C) accountability
D) procedure design

Question 40

Organizations should protect sensitive data by storing it in ________ form.

A) digital
B) standardized
C) encrypted
D) structured

Question 41

Studies on the cost of computer crimes are mostly based on surveys.

Question 42

Typically,a help-desk information system has answers to questions that only a true user would know.Which of the following statements is true of this information?

A) It allows help-desk representatives to create new passwords for users.
B) It reduces the strength of the security system.
C) It protects the anonymity of a user.
D) It helps authenticate a user.

Question 43

Damages caused by natural disasters are minimal when compared to the damages due to human errors.

Question 44

The enforcement of security procedures and policies consists of three interdependent factors: ________.

A) centralized reporting, preparation, and practice
B) account administration, systems procedures, and security monitoring
C) separation of duties, provision of least privilege, and position sensitivity
D) responsibility, accountability, and compliance

Question 45

A(n)________ includes how employees should react to security problems,whom they should contact,the reports they should make,and steps they can take to reduce further loss.

A) application design
B) procedure design
C) contingency plan
D) incident-response plan

Question 46

In terms of password management,when an account is created,users should ________.

A) create two passwords and switch back and forth between the two
B) immediately change the password they are given to a password of their own
C) maintain the same password they are given for all future authentication purposes
D) ensure that they do not change their passwords frequently, thereby reducing the risk of password loss

Question 47

Malware protection is an example of a technical safeguard.

Question 48

Incorrectly increasing a customer's discount is an example of incorrect data modification.

Question 49

A threat is a person or an organization that seeks to obtain or alter data illegally,without the owner's permission or knowledge.

Question 50

Email spoofing is a synonym for phishing.

Question 51

Drive-by phishers take computers with wireless connections through an area and search for unprotected wireless networks.

Question 52

A person should preferably use the same password for different sites so as to avoid confusion.

Question 53

An Advanced Persistent Threat (APT)is a sophisticated computer hack that is perpetrated by large,well-funded organizations like governments.

Question 54

Activity log analyses constitute an important ________ function.

A) account administration
B) security monitoring
C) password management
D) data administration

Question 55

Spoofing is a technique for intercepting computer communications.

Question 56

In a brute force attack,a password cracker tries every possible combination of characters.

Question 57

While making online purchases,a person should buy only from vendors who support https.

Question 58

Financial institutions must invest heavily in security safeguards because they are obvious targets for theft.

Question 59

Pretexting occurs when someone deceives by pretending to be someone else.

Question 60

Risk management is a critical security function of an organization's senior management.

Question 61

Packet-filtering firewalls sit outside an organizational network.

Question 62

The most secure communications over the Internet use a protocol called HTTP.

Question 63

The existence of accounts that are no longer necessary do not pose any security threats.

Question 64

Malware definitions are patterns that exist in malware code.

Question 65

Technical safeguards include encryption and the usage of passwords.

Question 66

Technical safeguards involve both software and hardware components of an information system.

Question 67

Viruses,worms,and Trojan horses are types of firewalls.

Question 68

With asymmetric encryption,two different keys are used for encoding and decoding a message.

Question 69

The creation of backup copies of database contents ensures the protection of the database.

Question 70

The creation of a backup copy of all database content of an organization is a technical safeguard.

Question 71

Packet-filtering firewalls examine each part of a message and determine whether to let that part pass.

Question 72

A user name authenticates a user,and a password identifies that user.

Question 73

Perimeter firewalls are the simplest type of firewall.

Question 74

A criticism of biometric authentication is that it provides weak authentication.

Question 75

The loss of encryption keys by employees is referred to as key escrow.

Question 76

Spyware programs are installed on a user's computer without the user's knowledge.

Question 77

Typically,a help-desk information system has answers to questions that only the true or actual user of an account or system would know.

Question 78

Smart cards are convenient to use because they don't require a PIN number for authentication.

Question 79

A virus is a computer program that replicates itself.

Question 80

In an organization,the security sensitivity for each position should be documented.