Question 1

Attack vectors refer to the ways hackers attack a target.

Accepted Answer

A) True 
 B)False  True

Question 2

A group of hackers use a targeted phishing attack to breach a company's firewalls and hack into its security system. Which of the following techniques have the hackers used?

Accepted Answer

A)  pretexting 
B)  IP spoofing 
C)  spear phishing 
D)  phone phishing 
A)  pretexting 
B)  IP spoofing 
C)  spear phishing 
D)  phone phishing C

Question 3

List some of the regulatory laws that govern the secure storage of data in certain industries.

Accepted Answer

Organizations need to understand the body of regulatory law relative to the type of information they store because they will be held accountable for implementing those standards. A few prominent regulatory laws that govern the secure storage of data in certain industries are listed below.
1. The Federal Information Security Management Act (FISMA) requires security precautions for government agencies.
2. The Gramm-Leach-Bliley Act (GLBA), also known as the Financial Services Modernization Act, requires data protection for financial institutions.
3. The Health Information Portability and Accountability Act (HIPAA) requires data protection for health care institutions.
4. The Payment Card Industry Data Security Standard (PCI DSS) governs the secure storage of cardholder data.
5. The Family Educational Rights and Privacy Act (FERPA) provides protection for student education records.

Question 4

Adam owns and manages a large insurance company. In order to protect his organization from data breach, Adam has to ensure that he has incorporated the security measures required by the ________.

Accepted Answer

A)  Family Educational Rights and Privacy Act (FERP
A)  
B)  Federal Information Security Management Act (FISM
A)  
C)  Payment Card Industry Data Security Standard (PCI DSS) 
D)  Gramm-Leach-Bliley Act (GLB
A)  
A)  Family Educational Rights and Privacy Act (FERP
A)  
B)  Federal Information Security Management Act (FISM
A)  
C)  Payment Card Industry Data Security Standard (PCI DSS) 
D)  Gramm-Leach-Bliley Act (GLB
A)

Question 5

Data breach notifications should state that the existing security policies and procedures are inadequate and that changes are being made to prevent similar breaches in the future.

Accepted Answer

A) True 
 B)False

Question 6

According to the reports in Ponemon's 2014 Cost of Data Breach Study, organizations are more likely to lose larger amounts of data than smaller amounts of data.

Accepted Answer

A) True 
 B)False

Question 7

Organizations can implement countermeasures that make data breaches impossible to occur.

Accepted Answer

A) True 
 B)False

Question 8

Explain how data breach occurs with an example.

Accepted Answer

Hackers are continually developing new t

Question 9

The ________ is a regulatory law that requires security precautions for government agencies.

Accepted Answer

A)  Federal Information Security Management Act (FISM
A)  
B)  Gramm-Leach-Bliley Act (GLB
A)  
C)  Payment Card Industry Data Security Standard (PCI DSS) 
D)  Family Educational Rights and Privacy Act (FERP
A)  
A)  Federal Information Security Management Act (FISM
A)  
B)  Gramm-Leach-Bliley Act (GLB
A)  
C)  Payment Card Industry Data Security Standard (PCI DSS) 
D)  Family Educational Rights and Privacy Act (FERP
A)

Question 10

Talgedco Inc., a software company, has taken several steps to secure its systems and data. The company has also installed a network intrusion detection system and data loss prevention system. Employees of this company have also been trained on the procedures to be followed to reduce the probability of a data breach. These steps taken by Talgedco are an example of ________.

Accepted Answer

A)  attack vectors 
B)  countermeasures 
C)  malware 
D)  exfiltration 
A)  attack vectors 
B)  countermeasures 
C)  malware 
D)  exfiltration

Question 11

Bob, a hacker, encountered a vulnerability in a bank's firewall when he was trying to hack into its Web site. Which of the following can Bob use to take advantage of this liability?

Accepted Answer

A)  exploit 
B)  attack vector 
C)  carding 
D)  wardriver 
A)  exploit 
B)  attack vector 
C)  carding 
D)  wardriver

Question 12

The ________ is a regulatory law that provides protection for student education records.

Accepted Answer

A)  Family Educational Rights and Privacy Act (FERP
A)  
B)  Equal Educational Opportunities Act of 1974 
C)  Smith-Lever Act of 1914 
D)  Federal Information Security Management Act (FISM
A)  
A)  Family Educational Rights and Privacy Act (FERP
A)  
B)  Equal Educational Opportunities Act of 1974 
C)  Smith-Lever Act of 1914 
D)  Federal Information Security Management Act (FISM
A)

Question 13

The Gramm-Leach-Bliley Act (GLBA) is a universal regulatory law that applies to all types of industries.

Accepted Answer

A) True 
 B)False

Question 14

Jobs Dot Com, an online recruitment site, was hacked into, and personal information of a number of users was stolen. What information should Jobs Dot Com include in its data breach notification to its users?

Accepted Answer

A)  the costs incurred due to the breach 
B)  a sincere apology and an acceptance of responsibility for the incident 
C)  details of how the breach occurred and the reasons for the breach 
D)  a report on the current security measures 
A)  the costs incurred due to the breach 
B)  a sincere apology and an acceptance of responsibility for the incident 
C)  details of how the breach occurred and the reasons for the breach 
D)  a report on the current security measures

Question 15

Personally identifiable information includes a person's bank account numbers, personal identification numbers, email address, and social security numbers.

Accepted Answer

A) True 
 B)False

Question 16

Explain the basic countermeasures to be taken by organizations to protect themselves against data breaches.

Accepted Answer

There is no list of countermeasures for

Question 17

Spear phishing is used by organizations to monitor traffic passing through their internal network.

Accepted Answer

A) True 
 B)False

Question 18

Each type of data breach is different because hackers are continually developing new tools and techniques that enable them to steal more data.

Accepted Answer

A) True 
 B)False

Question 19

A(n) ________ is used to examine traffic passing through an organization's internal network.

Accepted Answer

A)  honeypot 
B)  attack vector 
C)  security protocols open repository 
D)  network intrusion detection system 
A)  honeypot 
B)  attack vector 
C)  security protocols open repository 
D)  network intrusion detection system

Question 20

Sam is a hacker who makes money by stealing and selling credit cards. He has targeted the employees of a local firm and is looking for details such as names, addresses, dates of birth, social security numbers, credit card numbers, or health records. In this case, Sam is looking for ________.

Accepted Answer

A)  firewall security measures 
B)  business continuity plans 
C)  malware definitions 
D)  personally identifiable information 
A)  firewall security measures 
B)  business continuity plans 
C)  malware definitions 
D)  personally identifiable information

Exam 27: Data Breaches

Attack vectors refer to the ways hackers attack a target.

A group of hackers use a targeted phishing attack to breach a company's firewalls and hack into its security system. Which of the following techniques have the hackers used?

List some of the regulatory laws that govern the secure storage of data in certain industries.

Adam owns and manages a large insurance company. In order to protect his organization from data breach, Adam has to ensure that he has incorporated the security measures required by the ________.

Data breach notifications should state that the existing security policies and procedures are inadequate and that changes are being made to prevent similar breaches in the future.

According to the reports in Ponemon's 2014 Cost of Data Breach Study, organizations are more likely to lose larger amounts of data than smaller amounts of data.

Organizations can implement countermeasures that make data breaches impossible to occur.

Explain how data breach occurs with an example.

The ________ is a regulatory law that requires security precautions for government agencies.

Bob, a hacker, encountered a vulnerability in a bank's firewall when he was trying to hack into its Web site. Which of the following can Bob use to take advantage of this liability?

The ________ is a regulatory law that provides protection for student education records.

The Gramm-Leach-Bliley Act (GLBA) is a universal regulatory law that applies to all types of industries.

Jobs Dot Com, an online recruitment site, was hacked into, and personal information of a number of users was stolen. What information should Jobs Dot Com include in its data breach notification to its users?

Personally identifiable information includes a person's bank account numbers, personal identification numbers, email address, and social security numbers.

Explain the basic countermeasures to be taken by organizations to protect themselves against data breaches.

Spear phishing is used by organizations to monitor traffic passing through their internal network.

Each type of data breach is different because hackers are continually developing new tools and techniques that enable them to steal more data.

A(n) ________ is used to examine traffic passing through an organization's internal network.

Sam is a hacker who makes money by stealing and selling credit cards. He has targeted the employees of a local firm and is looking for details such as names, addresses, dates of birth, social security numbers, credit card numbers, or health records. In this case, Sam is looking for ________.

The Importance of Mis

Business Processes, Information Systems, and Information

Organizational Strategy, Information Systems, and Competitive Advantage

Hardware and Software

Database Processing

The Cloud

Processes, Organizations, and Information Systems

Social Media Information Systems

Business Intelligence Systems

Information Systems Security

Information Systems Management

Information Systems Development

Collaboration Information Systems for Decision Making, Problem Solving, and Project Management

Collaborative Information Systems for Student Projects

Mobile Systems

Introduction to Microsoft Excel 2016

Database Design

Using Microsoft Access 2016

Using Excel and Access Together

Network and Cloud Technology

Enterprise Resource Planning Erp Systems

Supply Chain Management

Enterprise Social Networks and Knowledge Management

Database Marketing

Reporting Systems and Olap

Artificial Intelligence and Automation

International Mis

Systems Development Project Management

Agile Development

Business Process Management

Filters