Exam 25: Valuing and Storing Organizational Informationdatabases

Ransomware is a form of social engineering in which one individual lies to obtain confidential data about another individual.

Applications allowed to be placed on the corporate network, like IM software, and corporate computer equipment used for personal reason on personal networks are two areas that should be addressed by managers in which of the below company policies?

A process of providing a user with permission including access levels and abilities such as file access, hours of access, and amount of allocated storage space is called authentication.

Information security policies detail how an organization will implement the information security plan.

What decodes information?

Identity theft is the category of computer security that addresses the protection of data from unauthorized disclosure and confirmation of data source authenticity.

What is it called when a hacker looks through your trash to find personal information?

What is the identification of a user based on a physical characteristic, such as a fingerprint, iris, face, voice, or handwriting?

What is a masquerading attack that combines spam with spoofing?

Two-factor authentication requires the user to provide two means of authentication, what the user knows (password) and what the user has (security token).

What is dumpster diving?

Which of the following is considered a type of biometrics?

What area of information security focuses on preventing identity theft, phishing, and pharming scams?

Spear phishing is a phone scam that attempts to defraud people by asking them to call a bogus telephone number to "confirm" their account information.

Which of the below represents the biggest problem of information security breaches?

What requires more than two means of authentication such as what the user knows (password), what the user has (security token), and what the user is (biometric verification)?

The best and most effective way to manage authentication is through ________.

A certificate authority is a trusted third party, such as VeriSign, that validates user identities by means of digital certificates.

What must you do with antivirus software to make it protect effectively?

Working at a ski resort in the mountains has its own unique security issues. Kenny is the chief information officer for Sundance Ski Resort, and he is faced with both physical and information security threats every month. Since the resort implemented a new software system, they have been having larger number of threats and breaches of company information. He suspects that this may be caused by an internal employee. He needs to clarify and establish what type of plan to help reduce further problems?