Question 1

Auditing _________ the computer means using a combination of client data, auditor software, and client and auditor hardware.

Accepted Answer

Auditing with the computer means using a combination of client data, auditor software, and client and auditor hardware.

Question 2

A _________ site provides only rudimentary services and facilities.

Accepted Answer

A "cold site" is a type of disaster recovery site that provides minimal services and facilities. It typically includes a space for the company to move into in the event of a disaster but does not have any pre-installed hardware or software. Companies using a cold site will need to install and configure their systems from scratch in the event of a disaster.

Question 3

A _________ site typically does not include the actual application the company needs to get the business back up and running immediately.

Accepted Answer

The answer of A _________ site typically does not include...

Question 4

Dave and Darla are worried about their home's security as there have been a lot of robberies in the neighborhood lately. To ease their concern, they purchase insurance for their home and possessions. This is an example of __________.

Accepted Answer

Purchasing insurance for their home and possessions is an example of risk transference. This means they are transferring the financial risk associated with potential robberies to the insurance company.

Question 5

Judith works from home. In order to access her corporate email and other computer systems she logs into a virtual private network (VPN). The VPN is an example of _____________.

Accepted Answer

A VPN is a communications control because it secures and encrypts data transmission between Judith's home network and her corporate network, ensuring that sensitive information is protected from unauthorized access.

Question 6

The 2017 Equifax data breach was more damaging to lenders than to consumers.

Accepted Answer

The 2017 Equifax data breach was more damaging to consumers because it exposed sensitive personal information of approximately 147 million people, potentially leading to identity theft and fraud. Lenders, while affected, primarily faced reputational damage and the cost of improving security measures.

Question 7

A _________ site is the most expensive option.

Accepted Answer

A hot site is the most expensive option because it is a fully functional data center with hardware and software, staff, and customer data, prepared to take over operations at any moment.

Question 8

Suppose you have a primary location in New York City where you main corporate servers are located. Just in case something happens in New York City, you have backup servers that are updated every minute in Chicago. This is an example of a _________ site.

Accepted Answer

A hot site is a backup location that is fully equipped and operational, ready to take over operations at a moment's notice. The fact that the backup servers are updated every minute and presumably ready to take over immediately in case of a disaster in New York City fits the definition of a hot site.

Question 9

Equifax could have upgraded and patched the software that was the cause of the breach.

Accepted Answer

Equifax could have upgraded and patched the Apache Struts software, which had a known vulnerability that was exploited in the breach.

Question 10

A _________ site is the least expensive option.

Accepted Answer

A cold site is the least expensive option for disaster recovery because it provides only the basic environment (space, power, and connectivity) but none of the technology infrastructure or office equipment.

Question 11

Equifax's CIO, CTO, and CEO lost their jobs due to the 2017 data breach.

Accepted Answer

Following the 2017 data breach at Equifax, which exposed the personal information of approximately 147 million people, the company's Chief Information Officer (CIO), Chief Technology Officer (CTO), and Chief Executive Officer (CEO) all stepped down from their positions as part of the fallout from the incident.

Question 12

_______ is designed to erase information permanently, not to hold it ransom.

Accepted Answer

Petya is a type of malware known for its ability to overwrite the master boot record (MBR) of a hard drive, making it impossible to boot up the computer. Unlike ransomware that encrypts files for ransom, Petya's primary function is to permanently erase information, not to hold it for ransom.

Question 13

Auditing _________ the computer means auditors check inputs, outputs, and processing.

Accepted Answer

Auditing through the computer means auditors check inputs, outputs, and processing.

Question 14

Ransomware negatively affected the city of Atlanta in many ways. Which vulnerability was the main cause of the problems?

Accepted Answer

The main cause of the problems faced by the city of Atlanta due to ransomware was the lack of management support. This includes insufficient attention to cybersecurity measures, inadequate investment in security infrastructure, and failure to prioritize the protection of critical information systems.

Question 15

XYZ Inc. scanned the fingerprints of all of their employees and now uses these fingerprints to authenticate their employees and grant them access to different areas of the company's facilities. XYZ Inc. is utilizing which type of technology?

Accepted Answer

Biometrics technology uses physical characteristics, such as fingerprints, to identify and authenticate individuals, which is what XYZ Inc. is doing by scanning and using employees' fingerprints for access control.

Question 16

An intranet is a trusted network.

Accepted Answer

An intranet is a private network accessible only to an organization's staff, often used to securely share company information and computing resources among employees, hence it is considered a trusted network.

Question 17

Triple Z Travelsite allows customers to reserve discount hotel rooms and airline tickets with certain companies they have relationships with. In order to secure the credit card information used by customers, which of the following controls would you recommend Triple Z use?

Accepted Answer

The answer of Triple Z Travelsite allows customers to reserve...

Question 18

A _________ site is a fully configured computer facility with all of the company's services, communication links, and physical plant operations.

Accepted Answer

A hot site is a fully configured computer facility that has all necessary equipment and services, including communication links and physical plant operations, ready to be operational immediately or within a very short period.

Question 19

Auditing _________ the computer means verifying processing by checking for known outputs using specific inputs.

Accepted Answer

Auditing "around" the computer involves verifying the processing accuracy by inputting specific data and checking if the outputs are as expected, without necessarily understanding the internal workings of the software.

Question 20

A URL that begins with https uses _________.

Accepted Answer

A URL that begins with https uses Transport Layer Security (TLS) to encrypt and provide secure communication over the internet.

Quiz 4: Information Security