Question 1

What is vishing?

Accepted Answer

A)  Reroutes requests for legitimate websites to false websites. 
B)  A technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses. 
C)  A masquerading attack that combines spam with spoofing. 
D)  A phone scam that attempts to defraud people by asking them to call a bogus telephone number to "confirm" their account information. 
A)  Reroutes requests for legitimate websites to false websites. 
B)  A technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses. 
C)  A masquerading attack that combines spam with spoofing. 
D)  A phone scam that attempts to defraud people by asking them to call a bogus telephone number to "confirm" their account information.

Question 2

A firewall scrambles information into an alternative form that requires a key or password to decrypt.

Accepted Answer

A) True 
 B)False

Question 3

What is a group of computers on which a hacker has planted zombie programs?

Accepted Answer

A)  Zombie 
B)  Zombie farm 
C)  Pharming attack 
D)  Time bomb 
A)  Zombie 
B)  Zombie farm 
C)  Pharming attack 
D)  Time bomb

Question 4

What is the category of computer security that addresses the protection of data from unauthorized disclosure and confirmation of data source authenticity?

Accepted Answer

A)  Information secrecy 
B)  Phishing 
C)  Phishing expedition 
D)  Spear phishing 
A)  Information secrecy 
B)  Phishing 
C)  Phishing expedition 
D)  Spear phishing

Question 5

What can encryption technology perform?

Accepted Answer

A)  Switch the order of characters 
B)  Replace characters with other characters 
C)  Insert or remove characters 
D)  All of these 
A)  Switch the order of characters 
B)  Replace characters with other characters 
C)  Insert or remove characters 
D)  All of these

Question 6

Dumpster diving is another security breach for companies and is where people not associated with the company jump into the company's outside garbage bins and try to gather and steal any valuable company products they can resell on eBay.

Accepted Answer

A) True 
 B)False

Question 7

What is forging of someone's identity for the purpose of fraud?

Accepted Answer

A)  Identity crisis 
B)  Identity theft 
C)  Ediscovery 
D)  All of these 
A)  Identity crisis 
B)  Identity theft 
C)  Ediscovery 
D)  All of these

Question 8

What type of encryption technology uses multiple keys, one for public and one for private?

Accepted Answer

A)  Private key encryption 
B)  Policy key encryption 
C)  Public key encryption 
D)  Protective key code 
A)  Private key encryption 
B)  Policy key encryption 
C)  Public key encryption 
D)  Protective key code

Question 9

The three primary information security areas are 1) authentication and authorization, 2) policies and rewards, and 3) detection and response.

Accepted Answer

A) True 
 B)False

Question 10

Which of the following occurs when organizations use software that filters content, such as email, to prevent the accidental or malicious transmission of unauthorized information?

Accepted Answer

A)  Antivirus software 
B)  Content filtering 
C)  Encryption 
D)  Firewalls 
A)  Antivirus software 
B)  Content filtering 
C)  Encryption 
D)  Firewalls

Question 11

Through pretexting, hackers use their social skills to trick people into revealing access credentials or other valuable information.

Accepted Answer

A) True 
 B)False

Question 12

Using one's social skills to trick people into revealing access credentials or other valuable information is called ________.

Accepted Answer

A)  social engineering 
B)  social media 
C)  social viruses 
D)  social processes 
A)  social engineering 
B)  social media 
C)  social viruses 
D)  social processes

Question 13

A voiceprint is a data file that identifies individuals or organizations online and is comparable to a digital signature.

Accepted Answer

A) True 
 B)False

Question 14

What scrambles information into an alternative form that requires a key or password to decrypt?

Accepted Answer

A)  Digital certificate 
B)  Encryption 
C)  Decrypt 
D)  Cryptography 
A)  Digital certificate 
B)  Encryption 
C)  Decrypt 
D)  Cryptography

Question 15

What is a phone scam that attempts to defraud people by asking them to call a bogus telephone number to "confirm" their account information?

Accepted Answer

A)  Pharming 
B)  Phishing 
C)  Phishing expedition 
D)  Vishing 
A)  Pharming 
B)  Phishing 
C)  Phishing expedition 
D)  Vishing

Question 16

Biometrics is the identification of a user based on a physical characteristic, such as a fingerprint, iris, face, voice, or handwriting.

Accepted Answer

A) True 
 B)False

Question 17

What is single-factor authentication?

Accepted Answer

A)  The traditional security process, which requires a username and password. 
B)  Requires the user to provide two means of authentication, what the user knows (password) and what the user has (security token). 
C)  Requires more than two means of authentication such as what the user knows (password), what the user has (security token), and what the user is (biometric verification). 
D)  The identification of a user based on physical characteristic such as a fingerprint, iris, face, voice or handwriting. 
A)  The traditional security process, which requires a username and password. 
B)  Requires the user to provide two means of authentication, what the user knows (password) and what the user has (security token). 
C)  Requires more than two means of authentication such as what the user knows (password), what the user has (security token), and what the user is (biometric verification). 
D)  The identification of a user based on physical characteristic such as a fingerprint, iris, face, voice or handwriting.

Question 18

What is information secrecy?

Accepted Answer

A)  The category of computer security that addresses the protection of data from unauthorized disclosure and confirmation of data source authenticity. 
B)  A technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses. 
C)  A masquerading attack that combines spam with spoofing. 
D)  A phishing expedition in which the emails are carefully designed to target a particular person or organization. 
A)  The category of computer security that addresses the protection of data from unauthorized disclosure and confirmation of data source authenticity. 
B)  A technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses. 
C)  A masquerading attack that combines spam with spoofing. 
D)  A phishing expedition in which the emails are carefully designed to target a particular person or organization.

Question 19

Where do organizations typically place firewalls?

Accepted Answer

A)  Between a personal computer and the server 
B)  Between a personal computer and a printer 
C)  Between the server and the content filtering software 
D)  Between the server and the Internet 
A)  Between a personal computer and the server 
B)  Between a personal computer and a printer 
C)  Between the server and the content filtering software 
D)  Between the server and the Internet

Question 20

What is a form of social engineering in which one individual lies to obtain confidential data about another individual?

Accepted Answer

A)  Dumpster texting 
B)  Dumpster diving 
C)  Trash retrieval 
D)  Pretexting 
A)  Dumpster texting 
B)  Dumpster diving 
C)  Trash retrieval 
D)  Pretexting

Exam 25: Valuing and Storing Organizational Informationdatabases

What is vishing?

A firewall scrambles information into an alternative form that requires a key or password to decrypt.

What is a group of computers on which a hacker has planted zombie programs?

What is the category of computer security that addresses the protection of data from unauthorized disclosure and confirmation of data source authenticity?

What can encryption technology perform?

Dumpster diving is another security breach for companies and is where people not associated with the company jump into the company's outside garbage bins and try to gather and steal any valuable company products they can resell on eBay.

What is forging of someone's identity for the purpose of fraud?

What type of encryption technology uses multiple keys, one for public and one for private?

The three primary information security areas are 1) authentication and authorization, 2) policies and rewards, and 3) detection and response.

Which of the following occurs when organizations use software that filters content, such as email, to prevent the accidental or malicious transmission of unauthorized information?

Through pretexting, hackers use their social skills to trick people into revealing access credentials or other valuable information.

Using one's social skills to trick people into revealing access credentials or other valuable information is called ________.

A voiceprint is a data file that identifies individuals or organizations online and is comparable to a digital signature.

What scrambles information into an alternative form that requires a key or password to decrypt?

What is a phone scam that attempts to defraud people by asking them to call a bogus telephone number to "confirm" their account information?

Biometrics is the identification of a user based on a physical characteristic, such as a fingerprint, iris, face, voice, or handwriting.

What is single-factor authentication?

What is information secrecy?

Where do organizations typically place firewalls?

What is a form of social engineering in which one individual lies to obtain confidential data about another individual?

Business Driven Technology

Identifying Competitive Advantages

Strategic Initiatives for Implementing Competitive Advantages

Measuring the Success of Strategic Initiatives

Organizational Structures That Support Strategic Initiatives

Valuing and Storing Organizational Informationdatabases

Accessing Organizational Informationdata Warehouses

Understanding Big Data and Its Impact on Business

Enabling the Organizationdecision Making

Extending the Organizationsupply Chain Management

Building a Customer-Centric Organizationcustomer Relationship Management

Integrating the Organization From End to Endenterprise Resource Planning

Creating Innovative Organizations

Ebusiness

Creating Collaborative Partnerships

Integrating Wireless Technology in Business

Developing Software to Streamline Operations

Methodologies for Supporting Agile Organizations

Managing Organizational Projects

Business Driven Technology

Identifying Competitive Advantages

Strategic Initiatives for Implementing Competitive Advantages

Measuring the Success of Strategic Initiatives

Organizational Structures That Support Strategic Initiatives

Accessing Organizational Informationdata Warehouses

Understanding Big Data and Its Impact on Business

Enabling the Organizationdecision Making

Extending the Organizationsupply Chain Management

Building a Customer-Centric Organizationcustomer Relationship Management

Integrating the Organization From End to Endenterprise Resource Planning

Filters