Exam 25: Valuing and Storing Organizational Informationdatabases

Which of the following is an example of a way to maintain information security that a company should include in their information security policies?

What is a program that secretly takes over another computer for the purpose of launching attacks on other computers?

Describe the relationship between information security policies and an information security plan.

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident are called insiders.

What is pretexting?

What is a data file that identifies individuals or organizations online and is comparable to a digital signature?

Phishing reroutes requests for legitimate websites to false websites.

Organizations address security risks through two lines of defense. The first is people and the second is technology.

What is an insider?

The most secure procedures combine which of the following authentication and authorization techniques?

The technique to gain personal information for the purpose of identity theft, often through fraudulent emails that look as though they came from legitimate businesses, is called phishing.

A smart card is a device the size of a credit card that contains embedded technology that stores information and small amounts of software, and can act as ________.

What is spear phishing?

Pretexting is a form of social engineering in which one individual lies to obtain confidential data about another individual.

Single-factor authentication is the traditional security process, which requires a username and password.

What is hardware or software that guards a private network by analyzing incoming and outgoing information for the correct markings?

Charles Mott works for a company called VeriSign that acts a trusted third party to verify information. One of Charles' largest clients is CheckMd, which holds and authenticates customer reviews of doctors and dentists online and having a third party validating the reviews is critical to CheckMd's success. What type of authentication technique is VeriSign providing for CheckMD?

Worms are computer viruses that wait for a specific date before executing their instructions.

Which of the following represents the three areas where technology can aid in the defense against information security attacks?

How do prevention and resistance technologies stop intruders from accessing and reading sensitive information?