Exam 25: Valuing and Storing Organizational Informationdatabases

A zombie is a program that secretly takes over another computer for the purpose of launching attacks on other computers.

Cryptography is the science that studies encryption, which is the hiding of messages so that only the sender and receiver can read them.

eBay is an example of an online company that has been faced with numerous security issues. For example, imagine you purchase a digital camera on eBay. Three months later you might receive an email asking you to log in to the system to update your credit card or PayPal information. Of course, this email is not actually from eBay and as soon as you log in your information will be stolen. What type of information security breach would you consider this to be?

What reroutes requests for legitimate websites to false websites?

What uses of a zombie farm, often by an organized crime association, to launch a massive phishing attack?

What is a phishing expedition?

What is the science that studies encryption, which is the hiding of messages so that only the sender and receiver can read them?

What is a technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses?

Imagine you accidently mistype the URL for your bank and you are redirected to a fake website that collects your information. What type of identity theft were you just a victim of?

Tokens are small electronic devices that change user passwords automatically.

A phishing expedition is a masquerading attack that combines spam with spoofing. The perpetrator sends millions of spam emails that appear to be from a respectable company. The emails contain a link to a website that is designed to look exactly like the company's website. The victim is encouraged to enter his or her username, password, and sometimes credit card information.

One of the most ineffective ways to set up authentication techniques is by setting up user IDs and passwords.

Which of the following authentication methods is 100 percent accurate?

Which of the following protection techniques scans and searches hard drives to prevent, detect, and remove known viruses, adware, and spyware?

Provide an example of each of the three primary information security areas: (1) authentication and authorization, (2) prevention and resistance, and (3) detection and response.

What reroutes requests for legitimate websites to false website?

What are the first two lines of defense a company should take when addressing security risks?

Single-factor authentication requires the user to provide two means of authentication, what the user knows (password) and what the user has (security token).

Insiders are illegitimate users who purposely or accidentally misuse their access to the environment to do business.

What requires the user to provide two means of authentication, what the user knows (password) and what the user has (security token)?