Question 1

You have been hired as a security consultant for a law firm.Which of the following constitutes the greatest source for network security breaches to the firm?

Accepted Answer

A) wireless network 
B) employees 
C) authentication procedures 
D) lack of data encryption 
E) software quality 
A) wireless network 
B) employees 
C) authentication procedures 
D) lack of data encryption 
E) software quality

Question 2

Explain how an SQL injection attack works and what types of systems are vulnerable to this type of attack.

Accepted Answer

SQL injection attacks take advantage of

Question 3

The HIPAA Act of 1996

Accepted Answer

A) requires financial institutions to ensure the security of customer data. 
B) specifies best practices in information systems security and control. 
C) imposes responsibility on companies and management to safeguard the accuracy of financial information. 
D) outlines medical security and privacy rules. 
E) identifies computer abuse as a crime and defines abusive activities. 
A) requires financial institutions to ensure the security of customer data. 
B) specifies best practices in information systems security and control. 
C) imposes responsibility on companies and management to safeguard the accuracy of financial information. 
D) outlines medical security and privacy rules. 
E) identifies computer abuse as a crime and defines abusive activities.

Question 4

NAT conceals the IP addresses of the organization's internal host computers to deter sniffer programs.

Accepted Answer

A) True 
 B)False

Question 5

A Trojan horse

Accepted Answer

A) is software that appears to be benign but does something other than expected. 
B) is a virus that replicates quickly. 
C) is malware named for a breed of fast-moving Near-Eastern horses. 
D) installs spyware on users' computers. 
E) is a type of sniffer used to infiltrate corporate networks. 
A) is software that appears to be benign but does something other than expected. 
B) is a virus that replicates quickly. 
C) is malware named for a breed of fast-moving Near-Eastern horses. 
D) installs spyware on users' computers. 
E) is a type of sniffer used to infiltrate corporate networks.

Question 6

________ refers to policies,procedures,and technical measures used to prevent unauthorized access,alteration,theft,or physical damage to information systems.

Accepted Answer

A) "Security" 
B) "Controls" 
C) "Benchmarking" 
D) "Algorithms" 
E) "Identity management" 
A) "Security" 
B) "Controls" 
C) "Benchmarking" 
D) "Algorithms" 
E) "Identity management"

Question 7

Tricking employees to reveal their passwords by pretending to be a legitimate member of a company is called

Accepted Answer

A) sniffing. 
B) social engineering. 
C) phishing. 
D) pharming. 
E) snooping 
A) sniffing. 
B) social engineering. 
C) phishing. 
D) pharming. 
E) snooping

Question 8

Organizations can use existing network security software to secure mobile devices.

Accepted Answer

A) True 
 B)False

Question 9

How can a firm's security policies contribute and relate to the six main business objectives? Give examples.

Accepted Answer

(1)Operational excellence: Security poli

Question 10

A foreign country attempting to access government networks in order to disable a national power grid would be an example of

Accepted Answer

A) phishing. 
B) denial-of-service attacks. 
C) cyberwarfare. 
D) cyberterrorism. 
E) evil twins. 
A) phishing. 
B) denial-of-service attacks. 
C) cyberwarfare. 
D) cyberterrorism. 
E) evil twins.

Question 11

Zero defects cannot be achieved in larger software programs because fully testing programs that contain thousands of choices and millions of paths would require thousands of years.

Accepted Answer

A) True 
 B)False

Question 12

Which of the following is a type of ambient data?

Accepted Answer

A) computer log containing recent system errors 
B) a file deleted from a hard disk 
C) a file that contains an application's user settings 
D) a set of raw data from an environmental sensor 
E) data that has been recorded over 
A) computer log containing recent system errors 
B) a file deleted from a hard disk 
C) a file that contains an application's user settings 
D) a set of raw data from an environmental sensor 
E) data that has been recorded over

Question 13

Statements ranking information risks and identifying security goals are included in a(n)

Accepted Answer

A) security policy. 
B) AUP. 
C) risk assessment. 
D) business impact analysis. 
E) business continuity plan. 
A) security policy. 
B) AUP. 
C) risk assessment. 
D) business impact analysis. 
E) business continuity plan.

Question 14

Your company,an online discount stationers,has calculated that a loss of Internet connectivity for 3 hours results in a potential loss of $2,000 to $3,000 and that there is a 50% chance of this occurring each year.What is the annual expected loss from this exposure?

Accepted Answer

A) $500 
B) $1,000 
C) $1,250 
D) $1,500 
E) $2,500 
A) $500 
B) $1,000 
C) $1,250 
D) $1,500 
E) $2,500

Question 15

In controlling network traffic to minimize slow-downs,a technology called ________ is used to examine data files and sort low-priority data from high-priority data.

Accepted Answer

A) high availability computing 
B) deep-packet inspection 
C) application proxy filtering 
D) stateful inspection 
E) unified threat management 
A) high availability computing 
B) deep-packet inspection 
C) application proxy filtering 
D) stateful inspection 
E) unified threat management

Question 16

The dispersed nature of cloud computing makes it difficult to track unauthorized access.

Accepted Answer

A) True 
 B)False

Question 17

Which of the following is not an example of a computer used as a target of crime?

Accepted Answer

A) knowingly accessing a protected computer to commit fraud 
B) sccessing a computer system without authority 
C) illegally accessing stored electronic communication 
D) threatening to cause damage to a protected computer 
E) breaching the confidentiality of protected computerized data 
A) knowingly accessing a protected computer to commit fraud 
B) sccessing a computer system without authority 
C) illegally accessing stored electronic communication 
D) threatening to cause damage to a protected computer 
E) breaching the confidentiality of protected computerized data

Question 18

Hackers and their companion viruses are an increasing problem,especially on the Internet.What are the most important measurers for a firm to take to protect itself from this? Is full protection feasible? Why or why not?

Accepted Answer

For protection,a company must institute

Question 19

When errors are discovered in software programs,the sources of the errors are found and eliminated through a process called debugging.

Accepted Answer

A) True 
 B)False

Question 20

The most common type of electronic evidence is

Accepted Answer

A) voice-mail. 
B) spreadsheets. 
C) instant messages. 
D) e-mail. 
E) VOIP data. 
A) voice-mail. 
B) spreadsheets. 
C) instant messages. 
D) e-mail. 
E) VOIP data.

You have been hired as a security consultant for a law firm.Which of the following constitutes the greatest source for network security breaches to the firm?

Explain how an SQL injection attack works and what types of systems are vulnerable to this type of attack.

The HIPAA Act of 1996

NAT conceals the IP addresses of the organization's internal host computers to deter sniffer programs.

A Trojan horse

________ refers to policies,procedures,and technical measures used to prevent unauthorized access,alteration,theft,or physical damage to information systems.

Tricking employees to reveal their passwords by pretending to be a legitimate member of a company is called

Organizations can use existing network security software to secure mobile devices.

How can a firm's security policies contribute and relate to the six main business objectives? Give examples.

A foreign country attempting to access government networks in order to disable a national power grid would be an example of

Zero defects cannot be achieved in larger software programs because fully testing programs that contain thousands of choices and millions of paths would require thousands of years.

Which of the following is a type of ambient data?

Statements ranking information risks and identifying security goals are included in a(n)

Your company,an online discount stationers,has calculated that a loss of Internet connectivity for 3 hours results in a potential loss of $2,000 to $3,000 and that there is a 50% chance of this occurring each year.What is the annual expected loss from this exposure?

In controlling network traffic to minimize slow-downs,a technology called ________ is used to examine data files and sort low-priority data from high-priority data.

The dispersed nature of cloud computing makes it difficult to track unauthorized access.

Which of the following is not an example of a computer used as a target of crime?

Hackers and their companion viruses are an increasing problem,especially on the Internet.What are the most important measurers for a firm to take to protect itself from this? Is full protection feasible? Why or why not?

When errors are discovered in software programs,the sources of the errors are found and eliminated through a process called debugging.

The most common type of electronic evidence is

Information Systems in Global Business Today

Global E-Business and Collaboration

Information Systems, Organizations, and Strategy

Ethical and Social Issues in Information Systems

IT Infrastructure and Emerging Technologies

Foundations of Business Intelligence: Databases and Information Management

Telecommunications, the Internet, and Wireless Technology

Achieving Operational Excellence and Customer Intimacy: Enterprise Applications

E-Commerce: Digital Markets, Digital Goods

Managing Knowledge

Enhancing Decision Making

Building Information Systems

Managing Projects

Managing Global Systems

Filters

Exam 8: Securing Information Systems

You have been hired as a security consultant for a law firm.Which of the following constitutes the greatest source for network security breaches to the firm?

Explain how an SQL injection attack works and what types of systems are vulnerable to this type of attack.

The HIPAA Act of 1996

NAT conceals the IP addresses of the organization's internal host computers to deter sniffer programs.

A Trojan horse

________ refers to policies,procedures,and technical measures used to prevent unauthorized access,alteration,theft,or physical damage to information systems.

Tricking employees to reveal their passwords by pretending to be a legitimate member of a company is called

Organizations can use existing network security software to secure mobile devices.

How can a firm's security policies contribute and relate to the six main business objectives? Give examples.

A foreign country attempting to access government networks in order to disable a national power grid would be an example of

Zero defects cannot be achieved in larger software programs because fully testing programs that contain thousands of choices and millions of paths would require thousands of years.

Which of the following is a type of ambient data?

Statements ranking information risks and identifying security goals are included in a(n)

Your company,an online discount stationers,has calculated that a loss of Internet connectivity for 3 hours results in a potential loss of $2,000 to $3,000 and that there is a 50% chance of this occurring each year.What is the annual expected loss from this exposure?

In controlling network traffic to minimize slow-downs,a technology called ________ is used to examine data files and sort low-priority data from high-priority data.

The dispersed nature of cloud computing makes it difficult to track unauthorized access.

Which of the following is not an example of a computer used as a target of crime?

Hackers and their companion viruses are an increasing problem,especially on the Internet.What are the most important measurers for a firm to take to protect itself from this? Is full protection feasible? Why or why not?

When errors are discovered in software programs,the sources of the errors are found and eliminated through a process called debugging.

The most common type of electronic evidence is

Information Systems in Global Business Today

Global E-Business and Collaboration

Information Systems, Organizations, and Strategy

Ethical and Social Issues in Information Systems

IT Infrastructure and Emerging Technologies

Foundations of Business Intelligence: Databases and Information Management

Telecommunications, the Internet, and Wireless Technology

Achieving Operational Excellence and Customer Intimacy: Enterprise Applications

E-Commerce: Digital Markets, Digital Goods

Managing Knowledge

Enhancing Decision Making

Building Information Systems

Managing Projects

Managing Global Systems

Filters