Exam 5: Protecting Information Resources

Which of the following is a biometric security measure?

When a computer is infected by a virus, _____.

When an organization develops a comprehensive security plan, it should set up a security committee with representatives from all departments as well as upper management.

In the context of computer and network security, _____ refers to the accuracy of information resources within an organization.

In the event of a network attack or intrusion, a _____ lists the tasks that must be performed by the organization to restore damaged data and equipment.

Which of the following statements is true of application-filtering firewalls?

_____ is a type of data encryption that enables users of the Internet to securely and privately exchange data through the use of a pair of keys that is obtained from a trusted authority and shared through that authority.

__________is an attempt to gain access to a network by posing as an authorized user in order to find sensitive information, such as passwords and credit card information.

In the context of security, _____ is an attack that takes advantage of the human element of security systems.

In the context of computer and network security, _____ means that a system must not allow the disclosing of information by anyone who is not authorized to access it.

In the context of the CIA triangle, confidentiality means that computers and networks are operating and authorized users can access the information they need.

Application-filtering firewalls are less expensive than packet-filtering firewalls.

When using mirror disks, if one of the two disks containing the same data fails, the other disk also fails.

_____ is a commonly used encryption protocol that manages transmission security on the Internet.

_____ uses a public key known to everyone and a private key known only to the recipient.

A level 1 security system is used to protect _____ against unauthorized access.

Which of the following is a nonbiometric security measure?

Social engineering is an attack that takes advantage of the backdoors in security systems.

When disaster strikes, an organization should contact the insurance company to resume normal operations as soon as possible.

In the context of e-commerce transaction security measures, authentication is a critical factor because it ensures that: