Exam 10: Information Systems Security

A ________ is a person or an organization that seeks to obtain or alter data or other IS assets illegally, without the owner's permission and often without the owner's knowledge.

Most emails and IMs are protected by encryption.

Which of the following is a critical security function that should be addressed by the senior management of an organization?

Users of smart cards are required to enter a ________ to be authenticated.

Which of the following is likely to be accepted by a poorly designed application thereby leading to improper disclosure of data?

A person claiming to be from central IT called Chris and asked him to participate in a password reset audit. The person had Chris change his password to the word "123456", and then again to a secret passphrase only Chris knew. Later that day Chris noticed odd system behavior, and then the system crashed. Chris was a victim of ________.

A magnetic strip holds far more data than a microchip.

Describe the magnitude of security problems in the present day.

________ is a sophisticated, possibly long-running computer hack that is perpetrated by large, well-funded organizations such as governments.

Secure Sockets Layer is also known as ________.

When an employee is terminated, IS administrators should receive advance notice so that they can ________.

Discuss some human safeguards for employees that can ensure the security of information systems.

________ a Web site means to take extraordinary measures to reduce a system's vulnerability using special versions of the operating system.

PL Technologies suffered considerable data loss when its database was infected by a virus. George, an operations personnel, attempts to fix the damage by retrieving information from backed up data. George is involved in the process of ________.

What are spyware and adware programs?

Describe the difference between a perimeter firewall and an internal firewall?

A computer crime is committed if an employee inadvertently installs an old database on top of the current one.

Stan loves collecting stamps. He receives an email that appears to come from a well-known stamp auction site asking him to reset his username and password. He clicks on the link and it takes him to a site that looks similar to the auction site, but the Web address is "scrambled" and unreadable. He emails the customer service desk at the auction site and discovers they never sent the email. This scenario is an example of attempted ________.

Define pretexting, phishing, spoofing, and sniffing.

Which of the following statements is True about data administration?