Exam 12: Information Security Management

Senior management has two critical security functions: overall policy and risk management.

Organizations should protect sensitive data by storing it in ________ form.

Most secure communication over the Internet uses a protocol called HTTP.

What are firewalls? What types of firewalls are commonly used?

The existence of accounts that are no longer necessary do not pose a serious security threat.

Discuss in brief the pros and cons of biometric authentication.

A(n)________ card has a microchip on it that is loaded with identifying data.

Which of the following steps of the Secure Socket Layer is NOT true?

Most spyware is benign in that it does not perform malicious acts or steal data.

Internal firewalls sit outside the organizational network.

Which of the following is an example of a security threat resulting from malicious human activity?

What is the difference between adware and spyware?

What should an organization do when a security breach occurs in its information systems?

Perimeter firewalls are the simplest type of firewalls.

Which of the following are malware masquerading as useful programs?

Differentiate between symmetric and asymmetric encryption.

Explain account management.

What are the three interdependent factors involved in the enforcement of security policies and procedures?

Denial-of-service attacks are caused by human error,not malicious intent.

Mark recently received an email from what appeared to be a legitimate company,asking him to update and verify his credit card details.Unknowingly,he obliged and later realized that the information had been misused.Mark is a victim of ________.