Exam 17: Information Security: Barbarians at the Gateway and Just About Everywhere Else

Attacks that are so new that they have not been clearly identified, and so have not made it into security screening systems are called _____.

The virtual shutdown of websites by way of overloading them with seemingly legitimate requests sent simultaneously from thousands of machines is termed as _____ attacks.

What are some of the key managerial takeaways from the Target security breach?

Dumpster diving refers to physically trawling through trash to mine any valuable data or insights that can be stolen or used in a security attack.

Regularly updated software lowers a system's vulnerable attack surface.

Conforming to industry-standard guidelines and frameworks for organizational security ensures continued immunity from attacks on an organization's information.

One of the major problems with the Heartbleed bug in OpenSSL software is that:

Which of the following statements holds true for the term encryption?

Information security policies would be ineffective without _____ and _____.

Describe some of the factors at work that enabled the Target security breach to occur.

Sifting through trash in an effort to uncover valuable data or insights that can be stolen or used to launch a security attack is known as:

Cyber criminals who infiltrate systems and collect data for illegal resale are called _____.

In public-key encryption systems, the functions of the public and private keys are interchangeable.

_____ can be either software-based or deployed via ware, such as a recording "dongle" that is plugged in between a keyboard and a PC.

Almost all security breaches can be traced back to technology lapses personnel or procedural factors rarely factor in.

_____ are seemingly tempting, but bogus targets meant to draw hacking attempts.

A team working on organizational security should include representatives from general counsel, audit, public relations, and human resources, in addition to those from specialized security and broader technology and infrastructure functions.

The topic of U.S. government surveilance continues to be hotly debated, with strong opinions in favor of surveilance programs, as well as vocal protestations of government overreach. Briefly give the argument for and against U.S. government surveilance practices.

Which of the followings aspects of international law would enable a cyber-criminal operating across borders to evade prosecution?

_____ are systems that act as controls for network traffic, blocking unauthorized traffic while permitting acceptable use.