Question 1

Defining security policies and then centrally managing and enforcing those policies via security management products and services is known as:

Accepted Answer

A)  intrusion-based management. 
B)  policy-based management. 
C)  incident-based management. 
D)  None of the above 
A)  intrusion-based management. 
B)  policy-based management. 
C)  incident-based management. 
D)  None of the above

Question 2

A malicious program can be housed inside an innocent program that appears to be helpful.

Accepted Answer

A) True 
 B)False

Question 3

The top security concern among all organizations is:

Accepted Answer

A)  computer viruses. 
B)  identity theft. 
C)  data theft. 
D)  password breachs. 
A)  computer viruses. 
B)  identity theft. 
C)  data theft. 
D)  password breachs.

Question 4

Which of the following areas are considered important to maintaining a safe computing environment?

Accepted Answer

A)  Egress security 
B)  Facility security 
C)  Network security 
D)  All of the above 
A)  Egress security 
B)  Facility security 
C)  Network security 
D)  All of the above

Question 5

List four common profiles of an "insider" criminal.

Accepted Answer

1. mental health disorders,
2.

Question 6

Which of the following hacker tricks involves placing oneself between two communicating parties and either substituting one's own information in place of one of the parties' information or denying one party access to a session?

Accepted Answer

A)  Man-in-the-middle 
B)  Denial of service 
C)  Trojan horse 
D)  Network sniffing 
A)  Man-in-the-middle 
B)  Denial of service 
C)  Trojan horse 
D)  Network sniffing

Question 7

Computer attacks by insiders can be among the most expensive and most damaging security treats.

Accepted Answer

A) True 
 B)False

Question 8

Security is often thought by many to be a(n):

Accepted Answer

A)  business problem. 
B)  staff problem. 
C)  IT problem. 
D)  technological problem. 
A)  business problem. 
B)  staff problem. 
C)  IT problem. 
D)  technological problem.

Question 9

A certificate is a mechanism to verify an identity on a computer system over a computer network.

Accepted Answer

A) True 
 B)False

Question 10

The security technique used to protect systems against sniffing is called:

Accepted Answer

A)  Virtual Private Networks 
B)  Encryption 
C)  firewalls 
D)  Intrusion detection 
E)  None of the above 
A)  Virtual Private Networks 
B)  Encryption 
C)  firewalls 
D)  Intrusion detection 
E)  None of the above

Question 11

List five areas exposed to threats and vulnerabilities where security must be applied.

Accepted Answer

Any combination of the following.
• Pers

Question 12

Nonrepudiation is moving toward application-level security, requiring authentication for each application a user wants to access.

Accepted Answer

A) True 
 B)False

Question 13

List five steps that can be taken to protect from credit card fraud.

Accepted Answer

Any combination of the following.
1. Do

Question 14

The security technique that prevents parties from denying actions they have taken is known as:

Accepted Answer

A)  Authentication 
B)  Nonrepudiation 
C)  Identification 
D)  Indemnification 
E)  None of the above 
A)  Authentication 
B)  Nonrepudiation 
C)  Identification 
D)  Indemnification 
E)  None of the above

Question 15

Which of the following hacker tricks involves flooding a Web site, with so much useless traffic that the site becomes overwhelmed and freezes?

Accepted Answer

A)  Man-in-the-middle 
B)  Denial of service 
C)  Trojan horse 
D)  Network sniffing 
A)  Man-in-the-middle 
B)  Denial of service 
C)  Trojan horse 
D)  Network sniffing

Question 16

The most common public key encryption method is:

Accepted Answer

A)  RSA 
B)  DES 
C)  AES 
D)  SSL 
A)  RSA 
B)  DES 
C)  AES 
D)  SSL

Question 17

________ remain the source of the largest financial losses.

Accepted Answer

A)  Virus attacks 
B)  Denial of service attacks 
C)  Trojan horse attacks 
D)  Application vulnerabilities 
A)  Virus attacks 
B)  Denial of service attacks 
C)  Trojan horse attacks 
D)  Application vulnerabilities

Question 18

An estimation by the Computer Security Institute suggests that losses caused by insider attacks account for between________ percent of the entire organization's losses related to computer crimes.

Accepted Answer

A)  10 and 20 
B)  30 and 50 
C)  40 and 60 
D)  20 and 80 
A)  10 and 20 
B)  30 and 50 
C)  40 and 60 
D)  20 and 80

Question 19

Memory management, access to I/O devices, file management, and hardware configuration are all examples of:

Accepted Answer

A)  Application security 
B)  Operating systems security 
C)  Network security 
D)  Middleware and Web services security 
E)  None of the above 
A)  Application security 
B)  Operating systems security 
C)  Network security 
D)  Middleware and Web services security 
E)  None of the above

Question 20

Managing security refers to a comprehensive set of activities that develop, implement, direct, and monitor the organization's security strategy and activities.

Accepted Answer

A) True 
 B)False

Defining security policies and then centrally managing and enforcing those policies via security management products and services is known as:

A malicious program can be housed inside an innocent program that appears to be helpful.

The top security concern among all organizations is:

Which of the following areas are considered important to maintaining a safe computing environment?

List four common profiles of an "insider" criminal.

Which of the following hacker tricks involves placing oneself between two communicating parties and either substituting one's own information in place of one of the parties' information or denying one party access to a session?

Computer attacks by insiders can be among the most expensive and most damaging security treats.

Security is often thought by many to be a(n):

A certificate is a mechanism to verify an identity on a computer system over a computer network.

The security technique used to protect systems against sniffing is called:

List five areas exposed to threats and vulnerabilities where security must be applied.

Nonrepudiation is moving toward application-level security, requiring authentication for each application a user wants to access.

List five steps that can be taken to protect from credit card fraud.

The security technique that prevents parties from denying actions they have taken is known as:

Which of the following hacker tricks involves flooding a Web site, with so much useless traffic that the site becomes overwhelmed and freezes?

The most common public key encryption method is:

________ remain the source of the largest financial losses.

An estimation by the Computer Security Institute suggests that losses caused by insider attacks account for between________ percent of the entire organization's losses related to computer crimes.

Memory management, access to I/O devices, file management, and hardware configuration are all examples of:

Managing security refers to a comprehensive set of activities that develop, implement, direct, and monitor the organization's security strategy and activities.

Information Systems Management in the Global Economy

The Top Is Job

Strategic Uses of Information Technology

Strategic Information Systems Planning

Designing Corporate It Architecture

Managing Telecommunications

Managing Corporate Information Resources

Managing Partnership-Based It Operations

Technology for Developing Effective Systems

Management Issues in System Development

Supporting Information-Centric Decision Making

Supporting It-Enabled Collaboration

Supporting Knowledge Work

The Opportunities and Challenges Ahead

Filters

Exam 11: Managing Information Security

Defining security policies and then centrally managing and enforcing those policies via security management products and services is known as:

A malicious program can be housed inside an innocent program that appears to be helpful.

The top security concern among all organizations is:

Which of the following areas are considered important to maintaining a safe computing environment?

List four common profiles of an "insider" criminal.

Which of the following hacker tricks involves placing oneself between two communicating parties and either substituting one's own information in place of one of the parties' information or denying one party access to a session?

Computer attacks by insiders can be among the most expensive and most damaging security treats.

Security is often thought by many to be a(n):

A certificate is a mechanism to verify an identity on a computer system over a computer network.

The security technique used to protect systems against sniffing is called:

List five areas exposed to threats and vulnerabilities where security must be applied.

Nonrepudiation is moving toward application-level security, requiring authentication for each application a user wants to access.

List five steps that can be taken to protect from credit card fraud.

The security technique that prevents parties from denying actions they have taken is known as:

Which of the following hacker tricks involves flooding a Web site, with so much useless traffic that the site becomes overwhelmed and freezes?

The most common public key encryption method is:

________ remain the source of the largest financial losses.

An estimation by the Computer Security Institute suggests that losses caused by insider attacks account for between________ percent of the entire organization's losses related to computer crimes.

Memory management, access to I/O devices, file management, and hardware configuration are all examples of:

Managing security refers to a comprehensive set of activities that develop, implement, direct, and monitor the organization's security strategy and activities.

Information Systems Management in the Global Economy

The Top Is Job

Strategic Uses of Information Technology

Strategic Information Systems Planning

Designing Corporate It Architecture

Managing Telecommunications

Managing Corporate Information Resources

Managing Partnership-Based It Operations

Technology for Developing Effective Systems

Management Issues in System Development

Supporting Information-Centric Decision Making

Supporting It-Enabled Collaboration

Supporting Knowledge Work

The Opportunities and Challenges Ahead

Filters