Question 1

________ refers to policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems.

Accepted Answer

A)  "Security" 
B)  "Controls" 
C)  "Benchmarking" 
D)  "Algorithms" 
E)  "Identity management" 
A)  "Security" 
B)  "Controls" 
C)  "Benchmarking" 
D)  "Algorithms" 
E)  "Identity management"

Question 2

________ identify the access points in a Wi-Fi network.

Accepted Answer

A)  NICs 
B)  Mac addresses 
C)  URLs 
D)  UTMs 
E)  SSIDs 
A)  NICs 
B)  Mac addresses 
C)  URLs 
D)  UTMs 
E)  SSIDs

Question 3

Rigorous password systems

Accepted Answer

A)  are one of the most effective security tools. 
B)  may hinder employee productivity. 
C)  are costly to implement. 
D)  are often disregarded by employees. 
A)  are one of the most effective security tools. 
B)  may hinder employee productivity. 
C)  are costly to implement. 
D)  are often disregarded by employees.

Question 4

How can a firm's security policies contribute and relate to the six main business objectives?
 Give examples.

Accepted Answer

(1) Operational excellence: Security pol

Question 5

Smartphones typically feature state-of-the-art encryption and security features, making them highly secure tools for businesses.

Accepted Answer

A) True 
 B)False

Question 6

A salesperson clicks repeatedly on the online ads of a competitor's in order to drive the competitor's advertising costs up. This is an example of

Accepted Answer

A)  phishing. 
B)  pharming. 
C)  spoofing. 
D)  evil twins. 
E)  click fraud. 
A)  phishing. 
B)  pharming. 
C)  spoofing. 
D)  evil twins. 
E)  click fraud.

Question 7

As discussed in the chapter opening case, magnetic stripes are an old technology that is vulnerable to counterfeit and theft.

Accepted Answer

A) True 
 B)False

Question 8

Smartphones have the same security flaws as other Internet-connected devices.

Accepted Answer

A) True 
 B)False

Question 9

Application controls

Accepted Answer

A)  can be classified as input controls, processing controls, and output controls. 
B)  govern the design, security, and use of computer programs and the security of data files in general throughout the organization. 
C)  apply to all computerized applications and consist of a combination of hardware, software, and manual procedures that create an overall control environment. 
D)  include software controls, computer operations controls, and implementation controls. 
E)  monitor the use of system software and prevent unauthorized access to software and programs. 
A)  can be classified as input controls, processing controls, and output controls. 
B)  govern the design, security, and use of computer programs and the security of data files in general throughout the organization. 
C)  apply to all computerized applications and consist of a combination of hardware, software, and manual procedures that create an overall control environment. 
D)  include software controls, computer operations controls, and implementation controls. 
E)  monitor the use of system software and prevent unauthorized access to software and programs.

Question 10

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

Accepted Answer

A)  SSL/TLS 
B)  symmetric key encryption 
C)  public key encryption 
D)  private key encryption 
E)  distributed encryption 
A)  SSL/TLS 
B)  symmetric key encryption 
C)  public key encryption 
D)  private key encryption 
E)  distributed encryption

Question 11

The most common type of electronic evidence is

Accepted Answer

A)  voice-mail. 
B)  spreadsheets. 
C)  instant messages. 
D)  e-mail. 
E)  VOIP data. 
A)  voice-mail. 
B)  spreadsheets. 
C)  instant messages. 
D)  e-mail. 
E)  VOIP data.

Question 12

Which of the following is a virus that uses flaws in Windows software to take over a computer remotely?

Accepted Answer

A)  Sasser 
B)  Zeus Trojan 
C)  Melissa 
D)  ILOVEYOU 
E)  Conficker 
A)  Sasser 
B)  Zeus Trojan 
C)  Melissa 
D)  ILOVEYOU 
E)  Conficker

Question 13

Tricking employees to reveal their passwords by pretending to be a legitimate member of a company is called

Accepted Answer

A)  sniffing. 
B)  social engineering. 
C)  phishing. 
D)  pharming. 
E)  snooping 
A)  sniffing. 
B)  social engineering. 
C)  phishing. 
D)  pharming. 
E)  snooping

Question 14

Malicious software programs referred to as spyware include a variety of threats such as computer viruses, worms, and Trojan horses.

Accepted Answer

A) True 
 B)False

Question 15

Biometric authentication

Accepted Answer

A)  is inexpensive. 
B)  is used widely in Europe for security applications. 
C)  can use a person's voice as a unique, measurable trait. 
D)  only uses physical measurements for identification. 
E)  only uses biographical details for identification. 
A)  is inexpensive. 
B)  is used widely in Europe for security applications. 
C)  can use a person's voice as a unique, measurable trait. 
D)  only uses physical measurements for identification. 
E)  only uses biographical details for identification.

Question 16

A digital certificate system

Accepted Answer

A)  uses third-party CAs to validate a user's identity. 
B)  uses digital signatures to validate a user's identity. 
C)  uses tokens to validate a user's identity. 
D)  is used primarily by individuals for personal correspondence. 
E)  protects a user's identity by substituting a certificate in place of identifiable traits. 
A)  uses third-party CAs to validate a user's identity. 
B)  uses digital signatures to validate a user's identity. 
C)  uses tokens to validate a user's identity. 
D)  is used primarily by individuals for personal correspondence. 
E)  protects a user's identity by substituting a certificate in place of identifiable traits.

Question 17

In 2013, Panda Security reported approximately 30 million new kinds of malware strains.

Accepted Answer

A) True 
 B)False

Question 18

The Internet poses specific security problems because

Accepted Answer

A)  it was designed to be easily accessible. 
B)  Internet data is not run over secure lines. 
C)  Internet standards are universal. 
D)  it changes so rapidly. 
E)  there is no formal controlling body. 
A)  it was designed to be easily accessible. 
B)  Internet data is not run over secure lines. 
C)  Internet standards are universal. 
D)  it changes so rapidly. 
E)  there is no formal controlling body.

Question 19

A firewall allows the organization to

Accepted Answer

A)  enforce a security policy on data exchanged between its network and the Internet. 
B)  check the accuracy of all transactions between its network and the Internet. 
C)  create an enterprise system on the Internet. 
D)  check the content of all incoming and outgoing e-mail messages. 
E)  create access rules for a network. 
A)  enforce a security policy on data exchanged between its network and the Internet. 
B)  check the accuracy of all transactions between its network and the Internet. 
C)  create an enterprise system on the Internet. 
D)  check the content of all incoming and outgoing e-mail messages. 
E)  create access rules for a network.

Question 20

Social networking sites have become a new conduit for malware because

Accepted Answer

A)  they are used by so many people. 
B)  they allow users to post media and image files. 
C)  they are especially vulnerable to social engineering. 
D)  they allow users to post software code. 
E)  they have poor user authentication. 
A)  they are used by so many people. 
B)  they allow users to post media and image files. 
C)  they are especially vulnerable to social engineering. 
D)  they allow users to post software code. 
E)  they have poor user authentication.

________ refers to policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems.

________ identify the access points in a Wi-Fi network.

Rigorous password systems

How can a firm's security policies contribute and relate to the six main business objectives? Give examples.

Smartphones typically feature state-of-the-art encryption and security features, making them highly secure tools for businesses.

A salesperson clicks repeatedly on the online ads of a competitor's in order to drive the competitor's advertising costs up. This is an example of

As discussed in the chapter opening case, magnetic stripes are an old technology that is vulnerable to counterfeit and theft.

Smartphones have the same security flaws as other Internet-connected devices.

Application controls

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

The most common type of electronic evidence is

Which of the following is a virus that uses flaws in Windows software to take over a computer remotely?

Tricking employees to reveal their passwords by pretending to be a legitimate member of a company is called

Malicious software programs referred to as spyware include a variety of threats such as computer viruses, worms, and Trojan horses.

Biometric authentication

A digital certificate system

In 2013, Panda Security reported approximately 30 million new kinds of malware strains.

The Internet poses specific security problems because

A firewall allows the organization to

Social networking sites have become a new conduit for malware because

Information Systems in Global Business Today

Global E-Business and Collaboration

Information Systems, Organizations, and Strategy

Ethical and Social Issues in Information Systems

It Infrastructure and Emerging Technologies

Foundations of Business Intelligence: Databases and Information Management

Telecommunications, the Internet, and Wireless Technology

Achieving Operational Excellence and Customer Intimacy: Enterprise Applications

E-Commerce: Digital Markets, Digital Goods

Managing Knowledge

Enhancing Decision Making

Building Information Systems

Managing Projects

Managing Global Systems

Filters

Exam 8: Securing Information Systems

________ refers to policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems.

________ identify the access points in a Wi-Fi network.

Rigorous password systems

How can a firm's security policies contribute and relate to the six main business objectives? Give examples.

Smartphones typically feature state-of-the-art encryption and security features, making them highly secure tools for businesses.

A salesperson clicks repeatedly on the online ads of a competitor's in order to drive the competitor's advertising costs up. This is an example of

As discussed in the chapter opening case, magnetic stripes are an old technology that is vulnerable to counterfeit and theft.

Smartphones have the same security flaws as other Internet-connected devices.

Application controls

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

The most common type of electronic evidence is

Which of the following is a virus that uses flaws in Windows software to take over a computer remotely?

Tricking employees to reveal their passwords by pretending to be a legitimate member of a company is called

Malicious software programs referred to as spyware include a variety of threats such as computer viruses, worms, and Trojan horses.

Biometric authentication

A digital certificate system

In 2013, Panda Security reported approximately 30 million new kinds of malware strains.

The Internet poses specific security problems because

A firewall allows the organization to

Social networking sites have become a new conduit for malware because

Information Systems in Global Business Today

Global E-Business and Collaboration

Information Systems, Organizations, and Strategy

Ethical and Social Issues in Information Systems

It Infrastructure and Emerging Technologies

Foundations of Business Intelligence: Databases and Information Management

Telecommunications, the Internet, and Wireless Technology

Achieving Operational Excellence and Customer Intimacy: Enterprise Applications

E-Commerce: Digital Markets, Digital Goods

Managing Knowledge

Enhancing Decision Making

Building Information Systems

Managing Projects

Managing Global Systems

Filters