Question 1

The loss of encryption keys by employees is referred to as key escrow.

Accepted Answer

A) True 
 B)False  False

Question 2

Spyware programs are installed on a user's computer without the user's knowledge.

Accepted Answer

A) True 
 B)False  True

Question 3

A(n) ________ is a measure that individuals or organizations take to block a threat from obtaining an asset.

Accepted Answer

A)  denial of service 
B)  safeguard 
C)  information silo 
D)  third-party cookie 
A)  denial of service 
B)  safeguard 
C)  information silo 
D)  third-party cookie B

Question 4

The Grey-Sloan hospital was attached by a virus. The interns should check the ________ for next steps.

Accepted Answer

A)  honeypot 
B)  activity log 
C)  disaster recovery procedures 
D)  incident-response plan 
A)  honeypot 
B)  activity log 
C)  disaster recovery procedures 
D)  incident-response plan

Question 5

A(n) ________ is a computer program that senses when another computer is attempting to scan a disk or access a computer.

Accepted Answer

A)  intrusion detection system 
B)  adware 
C)  packet-filtering firewall 
D)  network security system 
A)  intrusion detection system 
B)  adware 
C)  packet-filtering firewall 
D)  network security system

Question 6

Companies that spend more time on safeguards experience less computer crime.

Accepted Answer

A) True 
 B)False

Question 7

Adware and spyware are similar to each other in that they both ________.

Accepted Answer

A)  masquerade as useful programs 
B)  are specifically programmed to spread 
C)  are installed with a user's permission 
D)  reside in the background and observe a user's behavior 
A)  masquerade as useful programs 
B)  are specifically programmed to spread 
C)  are installed with a user's permission 
D)  reside in the background and observe a user's behavior

Question 8

Which of the following occurs when millions of bogus service requests flood a Web server and prevent it from servicing legitimate requests?

Accepted Answer

A)  spoofing 
B)  incorrect data modification 
C)  usurpation 
D)  denial of service 
A)  spoofing 
B)  incorrect data modification 
C)  usurpation 
D)  denial of service

Question 9

Hiring, training, and educating employees in an organization is a technical safeguard.

Accepted Answer

A) True 
 B)False

Question 10

Jack installed the incorrect security patch on the server. This is an example of what type of security problem?

Accepted Answer

A)  denial of service 
B)  faulty service 
C)  hacking 
D)  malicious third-party cookie 
A)  denial of service 
B)  faulty service 
C)  hacking 
D)  malicious third-party cookie

Question 11

Financial institutions must invest heavily in security safeguards because they are obvious targets for theft.

Accepted Answer

A) True 
 B)False

Question 12

Which of the following is considered a personal security safeguard?

Accepted Answer

A)  creating backup of cookies and temporary files 
B)  removing high-value assets from computers 
C)  using a single valid password for all accounts 
D)  conducting transactions using http rather than https 
A)  creating backup of cookies and temporary files 
B)  removing high-value assets from computers 
C)  using a single valid password for all accounts 
D)  conducting transactions using http rather than https

Question 13

What human safeguards should be taken against security threats for temporary personnel, vendors, and partner personnel?

Accepted Answer

Business requirements may necessitate op

Question 14

A(n) ________ sits outside an organizational network and is the first device that Internet traffic encounters.

Accepted Answer

A)  internal firewall 
B)  perimeter firewall 
C)  adware 
D)  malware 
A)  internal firewall 
B)  perimeter firewall 
C)  adware 
D)  malware

Question 15

A help-desk information system has answers to questions that only a true user of an account or system would know.

Accepted Answer

A) True 
 B)False

Question 16

Discuss briefly the pros and cons of biometric authentication.

Accepted Answer

Biometric authentication uses personal p

Question 17

The specifics of a policy depend on whether the organization is governmental or nongovernmental.

Accepted Answer

A) True 
 B)False

Question 18

Which of the following is a data safeguard against security threats?

Accepted Answer

A)  application design 
B)  accountability 
C)  physical security 
D)  malware protection 
A)  application design 
B)  accountability 
C)  physical security 
D)  malware protection

Question 19

Which of the following are the three independent factors that constitute the enforcement of security procedures and policies?

Accepted Answer

A)  centralized reporting, preparation, and practice 
B)  hiring, screening, and terminating 
C)  separation of duties, provision of maximum privilege, and position sensitivity 
D)  responsibility, accountability, and compliance 
A)  centralized reporting, preparation, and practice 
B)  hiring, screening, and terminating 
C)  separation of duties, provision of maximum privilege, and position sensitivity 
D)  responsibility, accountability, and compliance

Question 20

In the case of public key encryption, each site has a private key to encode a message and a public key to decode it.

Accepted Answer

A) True 
 B)False

Exam 10: Information Systems Security

The loss of encryption keys by employees is referred to as key escrow.

Spyware programs are installed on a user's computer without the user's knowledge.

A(n) ________ is a measure that individuals or organizations take to block a threat from obtaining an asset.

The Grey-Sloan hospital was attached by a virus. The interns should check the ________ for next steps.

A(n) ________ is a computer program that senses when another computer is attempting to scan a disk or access a computer.

Companies that spend more time on safeguards experience less computer crime.

Adware and spyware are similar to each other in that they both ________.

Which of the following occurs when millions of bogus service requests flood a Web server and prevent it from servicing legitimate requests?

Hiring, training, and educating employees in an organization is a technical safeguard.

Jack installed the incorrect security patch on the server. This is an example of what type of security problem?

Financial institutions must invest heavily in security safeguards because they are obvious targets for theft.

Which of the following is considered a personal security safeguard?

What human safeguards should be taken against security threats for temporary personnel, vendors, and partner personnel?

A(n) ________ sits outside an organizational network and is the first device that Internet traffic encounters.

A help-desk information system has answers to questions that only a true user of an account or system would know.

Discuss briefly the pros and cons of biometric authentication.

The specifics of a policy depend on whether the organization is governmental or nongovernmental.

Which of the following is a data safeguard against security threats?

Which of the following are the three independent factors that constitute the enforcement of security procedures and policies?

In the case of public key encryption, each site has a private key to encode a message and a public key to decode it.

The Importance of Mis

Business Processes, Information Systems, and Information

Organizational Strategy, Information Systems, and Competitive Advantage

Hardware and Software

Database Processing

The Cloud

Processes, Organizations, and Information Systems

Social Media Information Systems

Business Intelligence Systems

Information Systems Management

Information Systems Development

Collaboration Information Systems for Decision Making, Problem Solving, and Project Management

Collaborative Information Systems for Student Projects

Mobile Systems

Introduction to Microsoft Excel 2016

Database Design

Using Microsoft Access 2016

Using Excel and Access Together

Network and Cloud Technology

Enterprise Resource Planning Erp Systems

Supply Chain Management

Enterprise Social Networks and Knowledge Management

Database Marketing

Reporting Systems and Olap

Artificial Intelligence and Automation

Data Breaches

International Mis

Systems Development Project Management

Agile Development

Business Process Management

Filters