Exam 12: Information Systems Development

Biometric authentication uses physical characteristics such as retinal scans to authenticate users.

________ occurs when a person breaks into a network to steal data such as customer lists, product inventory data, employee data, and other proprietary and confidential data.

In the context of information security, safeguards increase work efficiency by making common tasks easier.

A ________ is a person or an organization that seeks to obtain or alter data or other IS assets illegally, without the owner's permission and often without the owner's knowledge.

What is the basic information that a security policy must stipulate?

An Advanced Persistent Threat (APT) is a sophisticated computer hack that is perpetrated by large, well-funded organizations such as governments.

Which of the following is classified as a technical safeguard?

In asymmetric encryption, each site has a ________ for encoding messages.

________ are false targets for computer criminals to attack.

The senior management must establish a company-wide security policy that states the organization's posture regarding the data that it gathers.

________ are the primary means of authentication and are important not just for access to a user's computer, but also for authentication to other networks and servers to which the user may have access.

Symmetric encryption is simpler and much faster than asymmetric encryption.

Nonword passwords are also vulnerable to brute force attacks.

What is a virus? Differentiate between Trojan horses and worms.

________ a Web site means to take extraordinary measures to reduce a system's vulnerability, using special versions of the operating system.

Employee termination is a potential security threat for an organization.

Specific security policies should not depend on whether the organization is governmental or nongovernmental or whether it is publicly held or private.

Improper data disclosure and data damage and loss are possible consequences of an SQL injection attack.

A(n) ________ is a computer program that senses when another computer is attempting to scan the disk or otherwise access a computer.

A computer crime is committed if an employee inadvertently installs an old database on top of the current one.