Question 1

Computer forensics tasks include all of the following except:

Accepted Answer

A) presenting collected evidence in a court of law. 
B) securely storing recovered electronic data. 
C) collecting physical evidence on the computer. 
D) finding significant information in a large volume of electronic data. 
E) recovering data from computers while preserving evidential integrity. 
A) presenting collected evidence in a court of law. 
B) securely storing recovered electronic data. 
C) collecting physical evidence on the computer. 
D) finding significant information in a large volume of electronic data. 
E) recovering data from computers while preserving evidential integrity.

Question 2

An authentication system in which a user must provide two types of identification,such as a bank card and PIN,is called:

Accepted Answer

A) smart card authentication. 
B) biometric authentication. 
C) two-factor authentication. 
D) symmetric key authorization. 
E) token authentication. 
A) smart card authentication. 
B) biometric authentication. 
C) two-factor authentication. 
D) symmetric key authorization. 
E) token authentication.

Question 3

A firewall allows the organization to:

Accepted Answer

A) enforce a security policy on data exchanged between its network and the Internet. 
B) check the accuracy of all transactions between its network and the Internet. 
C) create an enterprise system on the Internet. 
D) check the content of all incoming and outgoing email messages. 
E) create access rules for a network. 
A) enforce a security policy on data exchanged between its network and the Internet. 
B) check the accuracy of all transactions between its network and the Internet. 
C) create an enterprise system on the Internet. 
D) check the content of all incoming and outgoing email messages. 
E) create access rules for a network.

Question 4

When hackers gain access to a database containing your personal private information,this is an example of:

Accepted Answer

A) phishing. 
B) spoofing. 
C) social engineering. 
D) identity theft. 
E) pharming. 
A) phishing. 
B) spoofing. 
C) social engineering. 
D) identity theft. 
E) pharming.

Question 5

Currently,the protocols used for secure information transfer over the Internet are:

Accepted Answer

A) TCP/IP and SSL. 
B) S-HTTP and CA. 
C) HTTP and TCP/IP. 
D) S-HTTP and SHTML. 
E) SSL,TLS,and S-HTTP. 
A) TCP/IP and SSL. 
B) S-HTTP and CA. 
C) HTTP and TCP/IP. 
D) S-HTTP and SHTML. 
E) SSL,TLS,and S-HTTP.

Question 6

All of the following are types of information systems general controls except:

Accepted Answer

A) application controls. 
B) computer operations controls. 
C) hardware controls. 
D) software controls. 
E) administrative controls. 
A) application controls. 
B) computer operations controls. 
C) hardware controls. 
D) software controls. 
E) administrative controls.

Question 7

Your company,an online discount pet supply store,has calculated that a loss of Internet connectivity for 3 hours results in a potential loss of $2,000 to $3,000 and that there is a 50% chance of this occurring each year.What is the annual expected loss from this exposure?

Accepted Answer

A) $500 
B) $1,000 
C) $1,250 
D) $1,500 
E) $2,500 
A) $500 
B) $1,000 
C) $1,250 
D) $1,500 
E) $2,500

Question 8

Which of the following statements about botnets is not true?

Accepted Answer

A) Eighty percent of the world's malware is delivered by botnets. 
B) Botnets are often used to perpetrate DDoS attacks. 
C) Ninety percent of the world's spam is delivered by botnets. 
D) Botnets are often used for click fraud. 
E) It is not possible to make a smartphone part of a botnet. 
A) Eighty percent of the world's malware is delivered by botnets. 
B) Botnets are often used to perpetrate DDoS attacks. 
C) Ninety percent of the world's spam is delivered by botnets. 
D) Botnets are often used for click fraud. 
E) It is not possible to make a smartphone part of a botnet.

Question 9

Most IoT devices support sophisticated security approaches.

Accepted Answer

A) True 
 B)False

Question 10

A foreign country attempting to access government networks in order to disable a national power grid is an example of:

Accepted Answer

A) phishing. 
B) denial-of-service attacks. 
C) cyberwarfare. 
D) cyberterrorism. 
E) evil twins. 
A) phishing. 
B) denial-of-service attacks. 
C) cyberwarfare. 
D) cyberterrorism. 
E) evil twins.

Question 11

A computer worm is a program that can copy itself to other computers on the network.

Accepted Answer

A) True 
 B)False

Question 12

All of the following are currently being used as traits that can be profiled by biometric authentication except:

Accepted Answer

A) fingerprints. 
B) facial characteristics. 
C) body odor. 
D) retinal images. 
E) voice. 
A) fingerprints. 
B) facial characteristics. 
C) body odor. 
D) retinal images. 
E) voice.

Question 13

Which of the following is a type of ambient data?

Accepted Answer

A) Computer log containing recent system errors 
B) A file deleted from a hard disk 
C) A file that contains an application's user settings 
D) A set of raw data from an environmental sensor 
E) Data that has been recorded over 
A) Computer log containing recent system errors 
B) A file deleted from a hard disk 
C) A file that contains an application's user settings 
D) A set of raw data from an environmental sensor 
E) Data that has been recorded over

Question 14

Which of the following statements about Internet security is not true?

Accepted Answer

A) The use of P2P networks can expose a corporate computer to outsiders. 
B) A corporate network without access to the Internet is more secure than one that provides access. 
C) Wi-Fi networks are not vulnerable to security breaches. 
D) Instant messaging can provide hackers access to an otherwise secure network. 
E) Smartphones have the same security weaknesses as other Internet devices. 
A) The use of P2P networks can expose a corporate computer to outsiders. 
B) A corporate network without access to the Internet is more secure than one that provides access. 
C) Wi-Fi networks are not vulnerable to security breaches. 
D) Instant messaging can provide hackers access to an otherwise secure network. 
E) Smartphones have the same security weaknesses as other Internet devices.

Question 15

Smartphones do not have the same security flaws as other Internet-connected devices.

Accepted Answer

A) True 
 B)False

Question 16

All of the following have contributed to an increase in software flaws except:

Accepted Answer

A) the growing complexity of software programs. 
B) the growing size of software programs. 
C) demands for timely delivery to markets. 
D) the inability to fully test programs. 
E) the increase in the number of computer hackers in the world. 
A) the growing complexity of software programs. 
B) the growing size of software programs. 
C) demands for timely delivery to markets. 
D) the inability to fully test programs. 
E) the increase in the number of computer hackers in the world.

Question 17

As described in the chapter case,which of the following did hackers use to gain access to the Democratic National Committee (DNC)network?

Accepted Answer

A) Trojan horse 
B) Phishing emails 
C) SQL injection attack 
D) Computer worm 
E) Pharming attack 
A) Trojan horse 
B) Phishing emails 
C) SQL injection attack 
D) Computer worm 
E) Pharming attack

Question 18

Which of the following techniques stops data packets originating outside the organization,inspects them,and passes the packets to the other side of an organization's firewall?

Accepted Answer

A) NAT 
B) Packet filtering 
C) Deep packet inspection 
D) Stateful inspection 
E) Application proxy filtering 
A) NAT 
B) Packet filtering 
C) Deep packet inspection 
D) Stateful inspection 
E) Application proxy filtering

Question 19

The Gramm-Leach-Bliley Act:

Accepted Answer

A) requires financial institutions to ensure the security of customer data. 
B) specifies best practices in information systems security and control. 
C) imposes responsibility on companies and management to safeguard the accuracy of financial information. 
D) outlines medical security and privacy rules. 
E) identifies computer abuse as a crime and defines abusive activities. 
A) requires financial institutions to ensure the security of customer data. 
B) specifies best practices in information systems security and control. 
C) imposes responsibility on companies and management to safeguard the accuracy of financial information. 
D) outlines medical security and privacy rules. 
E) identifies computer abuse as a crime and defines abusive activities.

Question 20

The Sarbanes-Oxley Act:

Accepted Answer

A) requires financial institutions to ensure the security of customer data. 
B) specifies best practices in information systems security and control. 
C) imposes responsibility on companies and management to safeguard the accuracy of financial information. 
D) outlines medical security and privacy rules. 
E) identifies computer abuse as a crime and defines abusive activities. 
A) requires financial institutions to ensure the security of customer data. 
B) specifies best practices in information systems security and control. 
C) imposes responsibility on companies and management to safeguard the accuracy of financial information. 
D) outlines medical security and privacy rules. 
E) identifies computer abuse as a crime and defines abusive activities.

Computer forensics tasks include all of the following except:

An authentication system in which a user must provide two types of identification,such as a bank card and PIN,is called:

A firewall allows the organization to:

When hackers gain access to a database containing your personal private information,this is an example of:

Currently,the protocols used for secure information transfer over the Internet are:

All of the following are types of information systems general controls except:

Your company,an online discount pet supply store,has calculated that a loss of Internet connectivity for 3 hours results in a potential loss of $2,000 to $3,000 and that there is a 50% chance of this occurring each year.What is the annual expected loss from this exposure?

Which of the following statements about botnets is not true?

Most IoT devices support sophisticated security approaches.

A foreign country attempting to access government networks in order to disable a national power grid is an example of:

A computer worm is a program that can copy itself to other computers on the network.

All of the following are currently being used as traits that can be profiled by biometric authentication except:

Which of the following is a type of ambient data?

Which of the following statements about Internet security is not true?

Smartphones do not have the same security flaws as other Internet-connected devices.

All of the following have contributed to an increase in software flaws except:

As described in the chapter case,which of the following did hackers use to gain access to the Democratic National Committee (DNC)network?

Which of the following techniques stops data packets originating outside the organization,inspects them,and passes the packets to the other side of an organization's firewall?

The Gramm-Leach-Bliley Act:

The Sarbanes-Oxley Act:

Information Systems in Global Business Today

Global E-Business and Collaboration

Information Systems,organizations,and Strategy

Ethical and Social Issues in Information Systems

It Infrastructure and Emerging Technologies

Foundations of Business Intelligence:

Telecommunications, the Internet, and Wireless Technology

Achieving Operational Excellence and Customer Intimacy:

E-Commerce: Digital Markets, digital Goods

Managing Knowledge and Artificial Intelligence

Enhancing Decision Making

Building Information Systems

Managing Projects

Managing Global Systems

Filters

Exam 8: Securing Information Systems

Computer forensics tasks include all of the following except:

An authentication system in which a user must provide two types of identification,such as a bank card and PIN,is called:

A firewall allows the organization to:

When hackers gain access to a database containing your personal private information,this is an example of:

Currently,the protocols used for secure information transfer over the Internet are:

All of the following are types of information systems general controls except:

Your company,an online discount pet supply store,has calculated that a loss of Internet connectivity for 3 hours results in a potential loss of $2,000 to $3,000 and that there is a 50% chance of this occurring each year.What is the annual expected loss from this exposure?

Which of the following statements about botnets is not true?

Most IoT devices support sophisticated security approaches.

A foreign country attempting to access government networks in order to disable a national power grid is an example of:

A computer worm is a program that can copy itself to other computers on the network.

All of the following are currently being used as traits that can be profiled by biometric authentication except:

Which of the following is a type of ambient data?

Which of the following statements about Internet security is not true?

Smartphones do not have the same security flaws as other Internet-connected devices.

All of the following have contributed to an increase in software flaws except:

As described in the chapter case,which of the following did hackers use to gain access to the Democratic National Committee (DNC)network?

Which of the following techniques stops data packets originating outside the organization,inspects them,and passes the packets to the other side of an organization's firewall?

The Gramm-Leach-Bliley Act:

The Sarbanes-Oxley Act:

Information Systems in Global Business Today

Global E-Business and Collaboration

Information Systems,organizations,and Strategy

Ethical and Social Issues in Information Systems

It Infrastructure and Emerging Technologies

Foundations of Business Intelligence:

Telecommunications, the Internet, and Wireless Technology

Achieving Operational Excellence and Customer Intimacy:

E-Commerce: Digital Markets, digital Goods

Managing Knowledge and Artificial Intelligence

Enhancing Decision Making

Building Information Systems

Managing Projects

Managing Global Systems

Filters