Exam 12: Managing Information Security and Privacy

The sources of security problems are human error, malicious activity, and ________.

PIPEDA stands for

What are the three general sources of IS security threats? Which one is the most dangerous? Which one is the easiest to plan for?

Organizations should store at least some of the ________ of the database contents off the premises, possibly in a remote location.

The existence of ________ user accounts is a serious security threat.

Despite warnings, users have a tendency to write their passwords on sticky notes next to the computer.

After installing anti-virus and antispyware, what is the best way to avoid malware?

Firewalls produce ________ of their activities, which include lists of all dropped packets, and attempts to gain unauthorized access.

An organization's security ________ has three components: senior management involvement, safeguards, and an incident response.

To protect against lost or sabotaged encryption keys, a trusted party should keep a copy of the key.

A(n) ________ must be entered when using a smart card in order to provide authentication.

Because encryption keys can be lost or destroyed, a copy of the key should be stored with a trusted third party called a(n)

A retinal scan would be considered a biometric authentication technique.

Unauthorized data disclosure can occur by simple human ________ when someone inadvertently releases data in violation of a policy.

What is the idea of a single sign-on for multiple systems? What are the benefits and negatives associated with single sign-on?

Sometimes, just opening a webpage can install ________ on your computer.

A hacker can launch a denial-of-service attack against a web server by ________ it with millions of bogus service requests.

According to PIPEDA, every organization needs to identify anyone in the organization who is responsible for ________ personal information.

________ considerations should be part of the hiring process.

Biometric authentication has been around for some time, and because of weaknesses is not likely to see much usage in the future.