Question 1

A small piece of program code that attaches to the computer's unused memory space and replicates itself until the system becomes overloaded and shuts down is called:

Accepted Answer

Worm

Question 2

Which of the following URL's would indicate that the site is using browser software that encrypts data transferred to the website?

Accepted Answer

https://misu

Question 3

A self-replicating piece of program code that can attach itself to other programs and data and perform malicious actions is referred to as an):

Accepted Answer

Virus

Question 4

This method of monitoring exposure can involve either manual testing or automated software tools.The method can identify weaknesses before they become network break-ins and attempt to fix these weaknesses before they are exploited.

Accepted Answer

Vulnerability assessment

Question 5

This security feature, used on wireless networks, is a password that is passed between the sending and receiving nodes of a wireless network.

Accepted Answer

Service set identifier

Question 6

The systematic steps undertaken to plan, prioritize, authorize, oversee, test, and implement large-scale changes to the IT system are called:

Accepted Answer

System Development Life Cycle

Question 7

The process of proactively examining the IT system for weaknesses that can be exploited by hackers, viruses, or malicious employees is called:

Accepted Answer

Vulnerability assessment

Question 8

Which of the following would normally not be found on the IT Governance Committee?

Accepted Answer

Computer input operators

Question 9

The IT Governance Committee has several important responsibilities.Which of the following is not normally one of those responsibilities?

Accepted Answer

Investing excess IT funds in long-term investments.

Question 10

Authorized employees may need to access the company IT system from locations outside the organization.These employees should connect to the IT system using this type of network.

Accepted Answer

Virtual private network

Question 11

This type of software should be used to avoid destruction of data programs and to maintain operation of the IT system.It continually scans the system for viruses and worms and either deletes or quarantines them.

Accepted Answer

Antivirus Software

Question 12

The functional responsibilities within an IT system must include the proper segregation of duties.Which of the following positions is not one of the duties that is to be segregated from the others?

Accepted Answer

Chief information officer

Question 13

This encryption method requests connection to the network via an access point and that point then requests the use identity and transmits that identity to an authentication server, substantially authenticating the computer and the user.

Accepted Answer

Wireless Protection Access WPA )

Question 14

The function of this committee is to govern the overall development and operation of IT systems.

Accepted Answer

IT Governance Committee

Question 15

The type of network uses tunnels, authentication, and encryption within the Internet network to isolate Internet communications so that unauthorized users cannot access or use certain data.

Accepted Answer

Virtual private network

Question 16

This form of encryption uses a public key, which is known by everyone, to encrypt data, and a private key, to decode the data.

Accepted Answer

Public key encryption

Question 17

This communication protocol is built into web server and browser software that encrypts data transferred on that website.You can determine if a website uses this technology by looking at the URL.

Accepted Answer

Secure sockets layer

Question 18

This encryption method, used with wireless network equipment, is symmetric in that both the sending and receiving network nodes must use the same encryption key.It has been proven to be susceptible to hacking.

Accepted Answer

Wired Equivalency Privacy WEP )

Question 19

This form of encryption uses a single encryption key that must be used to encrypt data and also to decode the encrypted data.

Accepted Answer

Symmetric encryption

Question 20

Specific software tools that monitor data flow within a network and alert the IT staff to hacking attempts or other unauthorized access attempts is called:

Accepted Answer

Intrusion detection

Quiz 4: Internal Controls and Risks in IT Systems