Question 1

________ present(s) the largest risk for an organization's infrastructure loss.

Accepted Answer

A)  Employees' dissatisfaction 
B)  Natural disasters 
C)  Hackers 
D)  Competitors 
E)  Electromagnetic pulse weapons 
A)  Employees' dissatisfaction 
B)  Natural disasters 
C)  Hackers 
D)  Competitors 
E)  Electromagnetic pulse weapons

Question 2

Which of the following is considered a computer crime?

Accepted Answer

A)  accidental deletion of important records 
B)  poorly written programs resulting in information loss 
C)  loss of data as a result of flooding 
D)  hacking of information systems 
E)  failure to correctly back up customer data 
A)  accidental deletion of important records 
B)  poorly written programs resulting in information loss 
C)  loss of data as a result of flooding 
D)  hacking of information systems 
E)  failure to correctly back up customer data

Question 3

________ is a technique for intercepting computer communications through a physical connection to a network or without a physical connection in the case of wireless networks.

Accepted Answer

A)  Spoofing 
B)  Phishing 
C)  Sniffing 
D)  Pretexting 
E)  Port scanning 
A)  Spoofing 
B)  Phishing 
C)  Sniffing 
D)  Pretexting 
E)  Port scanning

Question 4

Jason attempts to hack into a banking site to steal customer information. He finds the security of the Web site lacking and is able to access the site with ease. Jason is arrested the next day and charged with computer crime. The banking site was able to track Jason's IP address because he had unknowingly attacked a ________.

Accepted Answer

A)  botnet 
B)  hot site 
C)  honeypot 
D)  Web beacon 
E)  Trojan horse 
A)  botnet 
B)  hot site 
C)  honeypot 
D)  Web beacon 
E)  Trojan horse

Question 5

________ occurs through human error when employees do not follow proper procedures or when procedures have not been well designed.

Accepted Answer

A)  Unauthorized data disclosure 
B)  Incorrect data modification 
C)  Denial of service 
D)  Loss of infrastructure 
E)  Unauthorized data encryption 
A)  Unauthorized data disclosure 
B)  Incorrect data modification 
C)  Denial of service 
D)  Loss of infrastructure 
E)  Unauthorized data encryption

Question 6

Which of the following statements is True about losses due to computer security threats?

Accepted Answer

A)  Surveys on computer crimes provide accurate results since they use standard parameters to measure and tally computer crime costs. 
B)  Surveys suggest that some organizations do not report all their computer crime losses, and some will not report such losses at all. 
C)  Losses due to natural disasters can be measured accurately. 
D)  Losses due to human error are insignificant. 
E)  Losses due to hacking may be overstated. 
A)  Surveys on computer crimes provide accurate results since they use standard parameters to measure and tally computer crime costs. 
B)  Surveys suggest that some organizations do not report all their computer crime losses, and some will not report such losses at all. 
C)  Losses due to natural disasters can be measured accurately. 
D)  Losses due to human error are insignificant. 
E)  Losses due to hacking may be overstated.

Question 7

________ are small files that enables a browser to access Web sites without having to sign in every time.

Accepted Answer

A)  Cookies 
B)  Botnets 
C)  Payloads 
D)  Public keys 
E)  Web bugs 
A)  Cookies 
B)  Botnets 
C)  Payloads 
D)  Public keys 
E)  Web bugs

Question 8

Faulty service excludes problems that result due to incorrect data modification.

Accepted Answer

A) True 
 B)False

Question 9

A denial-of-service attack is launched when a hacker takes computers with wireless connections through an area and searches for unprotected wireless networks.

Accepted Answer

A) True 
 B)False

Question 10

Which of the following statements is True about the Secure Sockets Layer (SSL)?

Accepted Answer

A)  It uses asymmetric encryption exclusively. 
B)  It is used to send sensitive data such as credit card numbers. 
C)  It uses one set of encryption keys for multiple sessions. 
D)  It is a stronger version of https. 
E)  It is used in wireless encryption suites. 
A)  It uses asymmetric encryption exclusively. 
B)  It is used to send sensitive data such as credit card numbers. 
C)  It uses one set of encryption keys for multiple sessions. 
D)  It is a stronger version of https. 
E)  It is used in wireless encryption suites.

Question 11

________ take computers with wireless connections through an area and search for unprotected wireless networks, and then monitor and intercept wireless traffic on unsecured wireless networks.

Accepted Answer

A)  Keyloggers 
B)  Pretexters 
C)  Wardrivers 
D)  Phishers 
E)  Tibutors 
A)  Keyloggers 
B)  Pretexters 
C)  Wardrivers 
D)  Phishers 
E)  Tibutors

Question 12

Firewalls produce ________ that include lists of all dropped packets, infiltration attempts, and unauthorized access attempts from within the firewall.

Accepted Answer

A)  honeypots 
B)  blogs 
C)  activity logs 
D)  Rich Site Summary (RSS) feeds 
E)  blackboxes 
A)  honeypots 
B)  blogs 
C)  activity logs 
D)  Rich Site Summary (RSS) feeds 
E)  blackboxes

Question 13

Biometric authentication uses physical characteristics such as retinal scans to authenticate users.

Accepted Answer

A) True 
 B)False

Question 14

Symmetric encryption is simpler and much faster than asymmetric encryption.

Accepted Answer

A) True 
 B)False

Question 15

What are the three general sources of security threats?

Accepted Answer

A security threat is a challenge to the

Question 16

A ________ examines each part of a message and determines whether to let that part pass.

Accepted Answer

A)  packet-filtering firewall 
B)  private key 
C)  mail server 
D)  wardriver 
E)  nmap 
A)  packet-filtering firewall 
B)  private key 
C)  mail server 
D)  wardriver 
E)  nmap

Question 17

If the incident-response plan is not well-prepared, there is substantial risk that the actions of well-meaning people will make the problem worse.

Accepted Answer

A) True 
 B)False

Question 18

Which of the following is considered a threat caused by human error?

Accepted Answer

A)  an employee inadvertently installing an old database on top of the current one 
B)  an employee intentionally destroying data and system components 
C)  a virus and worm writer infecting computer systems 
D)  a hacker breaking into a system to steal for financial gain 
E)  a tsunami floods a data center causing total data loss 
A)  an employee inadvertently installing an old database on top of the current one 
B)  an employee intentionally destroying data and system components 
C)  a virus and worm writer infecting computer systems 
D)  a hacker breaking into a system to steal for financial gain 
E)  a tsunami floods a data center causing total data loss

Question 19

Sarah was browsing an online shopping site when a program got downloaded onto her system without her knowledge. The next day she found that her search engine had been changed, and she received pop-up advertisements of the shopping site she had visited the previous day. The program on Sarah's system is ________.

Accepted Answer

A)  a cookie 
B)  adware 
C)  a payload 
D)  a Trojan horse 
E)  a stack smasher 
A)  a cookie 
B)  adware 
C)  a payload 
D)  a Trojan horse 
E)  a stack smasher

Question 20

________ is a function pertaining to a particular database that develops procedures and practices to control and protect the database.

Accepted Answer

A)  Data encryption 
B)  Database administration 
C)  Data authentication 
D)  Database normalization 
E)  Data access control 
A)  Data encryption 
B)  Database administration 
C)  Data authentication 
D)  Database normalization 
E)  Data access control

________ present(s) the largest risk for an organization's infrastructure loss.

Which of the following is considered a computer crime?

________ is a technique for intercepting computer communications through a physical connection to a network or without a physical connection in the case of wireless networks.

________ occurs through human error when employees do not follow proper procedures or when procedures have not been well designed.

Which of the following statements is True about losses due to computer security threats?

________ are small files that enables a browser to access Web sites without having to sign in every time.

Faulty service excludes problems that result due to incorrect data modification.

A denial-of-service attack is launched when a hacker takes computers with wireless connections through an area and searches for unprotected wireless networks.

Which of the following statements is True about the Secure Sockets Layer (SSL)?

________ take computers with wireless connections through an area and search for unprotected wireless networks, and then monitor and intercept wireless traffic on unsecured wireless networks.

Firewalls produce ________ that include lists of all dropped packets, infiltration attempts, and unauthorized access attempts from within the firewall.

Biometric authentication uses physical characteristics such as retinal scans to authenticate users.

Symmetric encryption is simpler and much faster than asymmetric encryption.

What are the three general sources of security threats?

A ________ examines each part of a message and determines whether to let that part pass.

If the incident-response plan is not well-prepared, there is substantial risk that the actions of well-meaning people will make the problem worse.

Which of the following is considered a threat caused by human error?

________ is a function pertaining to a particular database that develops procedures and practices to control and protect the database.

The Importance of Mis

Collaboration Information Systems

Strategy and Information Systems

Hardware, Software, and Mobile Systems

Database Processing

The Cloud

Processes, Organizations, and Information Systems

Social Media Information Systems

Business Intelligence Systems

Information Systems Management

Information Systems Development

Filters

Exam 10: Information Systems Security

________ present(s) the largest risk for an organization's infrastructure loss.

Which of the following is considered a computer crime?

________ is a technique for intercepting computer communications through a physical connection to a network or without a physical connection in the case of wireless networks.

________ occurs through human error when employees do not follow proper procedures or when procedures have not been well designed.

Which of the following statements is True about losses due to computer security threats?

________ are small files that enables a browser to access Web sites without having to sign in every time.

Faulty service excludes problems that result due to incorrect data modification.

A denial-of-service attack is launched when a hacker takes computers with wireless connections through an area and searches for unprotected wireless networks.

Which of the following statements is True about the Secure Sockets Layer (SSL)?

________ take computers with wireless connections through an area and search for unprotected wireless networks, and then monitor and intercept wireless traffic on unsecured wireless networks.

Firewalls produce ________ that include lists of all dropped packets, infiltration attempts, and unauthorized access attempts from within the firewall.

Biometric authentication uses physical characteristics such as retinal scans to authenticate users.

Symmetric encryption is simpler and much faster than asymmetric encryption.

What are the three general sources of security threats?

A ________ examines each part of a message and determines whether to let that part pass.

If the incident-response plan is not well-prepared, there is substantial risk that the actions of well-meaning people will make the problem worse.

Which of the following is considered a threat caused by human error?

________ is a function pertaining to a particular database that develops procedures and practices to control and protect the database.

The Importance of Mis

Collaboration Information Systems

Strategy and Information Systems

Hardware, Software, and Mobile Systems

Database Processing

The Cloud

Processes, Organizations, and Information Systems

Social Media Information Systems

Business Intelligence Systems

Information Systems Management

Information Systems Development

Filters