Question 1

Describe an incident-response plan.

Accepted Answer

Every organization should have an incident-response plan as part of its security program.The plan should include how employees are to respond to security problems,whom they should contact,the reports they should make,and steps they can take to reduce further loss.
The plan should provide centralized reporting of all security incidents that will enable an organization to determine if it is under systematic attack or whether an incident is isolated.Centralized reporting also allows the organization to learn about security threats,take consistent actions in response,and apply specialized expertise to all security problems.Viruses and worms can spread very quickly across an organization's networks,and a fast response will help to mitigate the consequences.Because of the need for speed,preparation pays.The incident-response plan should identify critical personnel and their off-hours contact information.These personnel should be trained on where to go and what to do when they get there.Finally,organizations should periodically practice incident response.

Question 2

Hiring,training,and educating employees in an organization is a technical safeguard.

Accepted Answer

A) True 
 B)False  False

Question 3

Which of the following is a technical safeguard against security threats?

Accepted Answer

A) password 
B) encryption 
C) compliance 
D) firewall 
A) password 
B) encryption 
C) compliance 
D) firewall D

Question 4

Discuss briefly the pros and cons of biometric authentication.

Accepted Answer

Biometric authentication uses personal p

Question 5

While making online purchases,a person should buy only from vendors who support https.

Accepted Answer

A) True 
 B)False

Question 6

As one of the safeguards against security threats,a person should preferably use the same password for different sites so as to avoid confusion.

Accepted Answer

A) True 
 B)False

Question 7

Which of the following uses an individual's personal physical characteristics such as fingerprints,facial features,and retinal scans for verification purposes?

Accepted Answer

A) credit card 
B) smart card 
C) biometric authentication 
D) symmetric encryption 
A) credit card 
B) smart card 
C) biometric authentication 
D) symmetric encryption

Question 8

Explain the functions performed by packet-filtering firewalls.

Accepted Answer

A packet-filtering firewall examines eac

Question 9

Most secure communications over the Internet use a protocol called ________.

Accepted Answer

A) smtp 
B) ftp 
C) https 
D) nntp 
A) smtp 
B) ftp 
C) https 
D) nntp

Question 10

Explain the concept of denial of service (DOS)in information management.

Accepted Answer

Human errors in a procedure or a lack of

Question 11

________ occurs when computer criminals invade a computer system and replace legitimate programs with their own unauthorized ones.

Accepted Answer

A) Usurpation 
B) Cyber stalking 
C) Spoofing 
D) Sniffing 
A) Usurpation 
B) Cyber stalking 
C) Spoofing 
D) Sniffing

Question 12

With https,data are encrypted using a protocol called the ________.

Accepted Answer

A) Secure Shell (SSH) 
B) Secure Sockets Layer (SSL) 
C) File Transfer Protocol (FTP) 
D) Post Office Protocol (POP) 
A) Secure Shell (SSH) 
B) Secure Sockets Layer (SSL) 
C) File Transfer Protocol (FTP) 
D) Post Office Protocol (POP)

Question 13

________ are created by companies as false targets for computer criminals to attack.

Accepted Answer

A) Negatives 
B) Honeypots 
C) Cookies 
D) Trojan horses 
A) Negatives 
B) Honeypots 
C) Cookies 
D) Trojan horses

Question 14

A key is a number used with an encryption algorithm to encrypt data.

Accepted Answer

A) True 
 B)False

Question 15

With asymmetric encryption,two different keys are used for encoding and decoding a message.

Accepted Answer

A) True 
 B)False

Question 16

________ is the process of transforming clear text into coded,unintelligible text for secure storage or communication.

Accepted Answer

A) Usurpation 
B) Authentication 
C) Malware protection 
D) Encryption 
A) Usurpation 
B) Authentication 
C) Malware protection 
D) Encryption

Question 17

What human safeguards should be taken against security threats for temporary personnel,vendors,and partner personnel?

Accepted Answer

Business requirements may necessitate op

Question 18

Smart cards are convenient to use because they do not require a personal identification number for authentication.

Accepted Answer

A) True 
 B)False

Question 19

Mark receives an email from his bank asking him to update and verify his credit card details.He replies to the mail with all the requested details.Mark later learns that the mail was not actually sent by his bank and that the information he had shared has been misused.Mark is a victim of ________.

Accepted Answer

A) hacking 
B) sniffing 
C) data mining 
D) phishing 
A) hacking 
B) sniffing 
C) data mining 
D) phishing

Question 20

Which of the following is considered a personal security safeguard?

Accepted Answer

A) creating backup of cookies and temporary files 
B) removing high-value assets from computers 
C) using a single valid password for all accounts 
D) conducting transactions using http rather than https 
A) creating backup of cookies and temporary files 
B) removing high-value assets from computers 
C) using a single valid password for all accounts 
D) conducting transactions using http rather than https

Exam 10: Information Systems Security

Describe an incident-response plan.

Hiring,training,and educating employees in an organization is a technical safeguard.

Which of the following is a technical safeguard against security threats?

Discuss briefly the pros and cons of biometric authentication.

While making online purchases,a person should buy only from vendors who support https.

As one of the safeguards against security threats,a person should preferably use the same password for different sites so as to avoid confusion.

Which of the following uses an individual's personal physical characteristics such as fingerprints,facial features,and retinal scans for verification purposes?

Explain the functions performed by packet-filtering firewalls.

Most secure communications over the Internet use a protocol called ________.

Explain the concept of denial of service (DOS)in information management.

________ occurs when computer criminals invade a computer system and replace legitimate programs with their own unauthorized ones.

With https,data are encrypted using a protocol called the ________.

________ are created by companies as false targets for computer criminals to attack.

A key is a number used with an encryption algorithm to encrypt data.

With asymmetric encryption,two different keys are used for encoding and decoding a message.

________ is the process of transforming clear text into coded,unintelligible text for secure storage or communication.

What human safeguards should be taken against security threats for temporary personnel,vendors,and partner personnel?

Smart cards are convenient to use because they do not require a personal identification number for authentication.

Mark receives an email from his bank asking him to update and verify his credit card details.He replies to the mail with all the requested details.Mark later learns that the mail was not actually sent by his bank and that the information he had shared has been misused.Mark is a victim of ________.

Which of the following is considered a personal security safeguard?

The Importance of MIS

Business Processes, information Systems, and Information

Organizational Strategy, information Systems, and Competitive Advantage

Hardware and Software

Database Processing

The Cloud

Organizations and Information Systems

Social Media Information Systems

Business Intelligence Systems

Information Systems Management

Information Systems Development

Collaboration Information Systems for Decision Making problem Solving and Project Management

Collaborative Information Systems for Student Projects

Mobile Systems

Introduction to Microsoft Excel 2013

Database Design

Using Microsoft Access 2013

Using Excel and Access Together

Network and Cloud Technology

Enterprise Resource Planning ERP Systems

Supply Chain Management

Enterprise Social Networks and Knowledge Management

Database Marketing

Reporting Systems and OLAP

Data Breaches

International Mis

Systems Development Project Management

Agile Development

Business Process Management

Filters