Exam 12: Information Systems Development

Which of the following is likely to be accepted by a poorly designed application, leading to improper disclosure of data?

Sniffing occurs when an intruder uses another site's IP address to masquerade as that other site.

What is meant by denial of service?

When referring to security threats, pretexting, sniffing, spoofing, and phishing are all examples of ________.

________ is the term used to denote viruses, worms, and Trojan horses.

________ present the largest risk for an organization's infrastructure loss.

A ________ pretends to be a legitimate company and sends an email requesting confidential data, such as account numbers, Social Security numbers, account passwords, and so forth.

Define encryption and explain symmetric and asymmetric encryption for computer systems.

Which of the following usually happens in a malicious denial-of-service attack?

________ are small files that the browser stores on the user's computer when he/she visits Web sites and enables him/her to access Web sites without having to sign in every time.

Data safeguards are measures used to protect computer hardware from external threat.

The computers that run the DBMS and all devices that store database data should reside in locked, controlled-access facilities. This is done to ________.

What are spyware and adware programs?

Firewalls produce ________ which include lists of all dropped packets, infiltration attempts, and unauthorized access attempts from within the firewall.

Which of the following statements is true about losses due to computer security threats?

Which of the following statements is true of data administration?

Which of the following is considered a threat caused by human error?

If the incident-response plan is not well-prepared, there is substantial risk that the actions of well-meaning people will make the problem worse.

A ________ is a number used to encrypt data.

Email spoofing is a synonym for ________.