Exam 8: Securing Information Systems

Which of the following does not pose a security threat to wireless networks?

Three major concerns of system builders and users are disaster, security, and human error. Of the three, which do you think is most difficult to deal with? Why?

The WEP specification calls for an access point and its users to share the same 40-bit encrypted password.

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

An acceptable use policy defines the acceptable level of access to information assets for different users.

Evil twins are

SSL is a protocol used to establish a secure connection between two computers.

The most common type of electronic evidence is

High-availability computing is also referred to as fault tolerance.

Hackers create a botnet by

On the whole, ________ controls apply to all computerized applications and consist of a combination of hardware, software, and manual procedures that create an overall control environment.

Comprehensive security management products, with tools for firewalls, VPNs, intrusion detection systems, and more, are called ________ systems.

Hackers and their companion viruses are an increasing problem, especially on the Internet. What are the most important measurers for a firm to take to protect itself from this? Is full protection feasible? Why or why not?

Discuss the issue of security challenges on the Internet as that issue applies to a global enterprise. List at least 5 Internet security challenges.

In which technique are network communications are analyzed to see whether packets are part of an ongoing dialogue between a sender and a receiver?

Packet filtering catches most types of network attacks.

Why is software quality important to security? What specific steps can an organization take to ensure software quality?

When errors are discovered in software programs, the sources of the errors are found and eliminated through a process called ________.

One form of spoofing involves forging the return address on an e-mail so that the e-mail message appears to come from someone other than the sender.

________ is the scientific collection, examination, authentication, preservation, and analysis of data held on or retrieved from computer storage media in such a way that the information can be used as evidence in a court of law.