Exam 10: Information Systems Security

Unauthorized data disclosure is possible due to human error.

The single most important computer security safeguard that can be implemented is the creation and use of passwords that are comprised of names.

________ a Web site means to take extraordinary measures to reduce a system's vulnerability using special versions of the operating system.

If the incident-response plan is not well-prepared, there is substantial risk that the actions of well-meaning people will make the problem worse.

A magnetic strip holds far more data than a microchip.

The losses due to human error are minimal, and hence, organizations tend to ignore these losses.

Nonword passwords are vulnerable to brute force attacks.

________ occurs when computer criminals invade a computer system and replace legitimate programs with their own, unauthorized ones that shut down legitimate applications.

Improper data disclosure and data damage and loss are possible consequences of an SQL injection attack.

It is safe to use the same password for all Web sites.

Which of the following is likely to be accepted by a poorly designed application thereby leading to improper disclosure of data?

What are the three general sources of security threats?

Biometric authentication uses physical characteristics such as retinal scans to authenticate users.

Which of the following statements is True about human safeguards for employees?

What is key escrow?

It is easy and economical to hold public users of Web sites accountable for security violations.

Which of the following is classified as a technical safeguard?

Removing and disabling ________ that may contain sensitive security data presents an excellent example of the trade-off between improved security and cost.

The existence of accounts that are no longer in use is not a security threat to an organization.

Hardening a site means to take extraordinary measures to reduce a system's vulnerability.