Exam 8: Securing Information Systems

A(n) ________ system is used to identify and authorize different categories of system users and specify which portions of the organization's systems each user can access.

The most common type of electronic evidence is

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

Which of the following is the greatest threat that employees pose to an organization's information systems?

DoS attacks are used to destroy information and access restricted areas of a company's information system.

PKI is the use of public key cryptography working with a(n) ________.

The intentional disruption of a Web site or information system is called ________.

A Trojan horse is a software program that appears to be benign but then does something other than expected.

A salesperson clicks repeatedly on the online ads of a competitor's in order to drive the competitor's advertising costs up. This is an example of

NAT conceals the IP addresses of the organization's internal host computers to deter sniffer programs.

Electronic evidence on computer storage media that is not visible to the average user is called ________ data.

Sniffers enable hackers to steal proprietary information from anywhere on a network, including e-mail messages, company files, and confidential reports.

Which of the following is not an example of a computer used as an instrument of crime?

________ refers to the ability to know that a person is who he or she claims to be.

Malicious software programs referred to as ________ include a variety of threats such as computer viruses, worms, and Trojan horses.

Discuss the issue of security challenges on the Internet as that issue applies to a global enterprise. List at least five Internet security challenges.

The Sarbanes-Oxley Act

________ controls ensure that valuable business data files on either disk or tape are not subject to unauthorized access, change, or destruction while they are in use or in storage.

Unauthorized access is a security challenge that is most likely to occur in a network at the point of client computers.

Using numerous computers to inundate and overwhelm the network from numerous launch points is called a(n) ________ attack.