Question 1

A(n)________ is a sophisticated,possibly long-running computer hack that is perpetrated by large,well-funded organizations like governments.

Accepted Answer

A) advanced persistent threat 
B) identity threat 
C) copyright theft 
D) network sniffer attack 
A) advanced persistent threat 
B) identity threat 
C) copyright theft 
D) network sniffer attack

Question 2

Which of the following statements is true of the financial losses due to computer crimes?

Accepted Answer

A) All studies on the costs of computer crimes are based on surveys. 
B) There are several set standards for tallying computer crime costs and financial losses. 
C) Companies are legally required to calculate their financial losses due to computer crime every month. 
D) Knowledge about the cost of computer crimes is restricted to large companies. 
A) All studies on the costs of computer crimes are based on surveys. 
B) There are several set standards for tallying computer crime costs and financial losses. 
C) Companies are legally required to calculate their financial losses due to computer crime every month. 
D) Knowledge about the cost of computer crimes is restricted to large companies.

Question 3

Damages to security systems caused by natural disasters are minimal when compared to the damages due to human errors.

Accepted Answer

A) True 
 B)False

Question 4

What are some of the recommended personal security safeguards against security threats?

Accepted Answer

Following are some of the recommended pe

Question 5

The loss of encryption keys by employees is referred to as key escrow.

Accepted Answer

A) True 
 B)False

Question 6

Davian,a professional hacker,tries every possible combination of characters to crack his victim's email password.Using this technique,he can crack a six-character password of either upper- or lowercase letters in about five minutes.Which of the following techniques is used by Davian to obtain access to his victim's email?

Accepted Answer

A) denial-of-service attack 
B) brute force attack 
C) pretexting 
D) spoofing 
A) denial-of-service attack 
B) brute force attack 
C) pretexting 
D) spoofing

Question 7

________ is a broad category of software that includes viruses,worms,Trojan horses,spyware,and adware.

Accepted Answer

A) Malware 
B) Payload 
C) Shareware 
D) Firewall 
A) Malware 
B) Payload 
C) Shareware 
D) Firewall

Question 8

A ________ is a plastic card that has a microchip loaded with identifying data.

Accepted Answer

A) credit card 
B) biometric passport 
C) smart card 
D) flashcard 
A) credit card 
B) biometric passport 
C) smart card 
D) flashcard

Question 9

To safeguard data against security threats,every information system today requires a user name and a password.In this case,which of the following functions is performed by the user name?

Accepted Answer

A) authentication 
B) identification 
C) decryption 
D) encryption 
A) authentication 
B) identification 
C) decryption 
D) encryption

Question 10

Which of the following is a human safeguard against security threats?

Accepted Answer

A) encryption 
B) firewall 
C) physical security 
D) procedure design 
A) encryption 
B) firewall 
C) physical security 
D) procedure design

Question 11

Explain how secure sockets layer works when a user communicates securely with a Web site.

Accepted Answer

Most secure communication over the Inter

Question 12

A threat is a person or an organization that seeks to obtain or alter data illegally,without the owner's permission or knowledge.

Accepted Answer

A) True 
 B)False

Question 13

Malware definitions are patterns that exist in malware code.

Accepted Answer

A) True 
 B)False

Question 14

Spoofing is a technique for intercepting computer communications.

Accepted Answer

A) True 
 B)False

Question 15

Wardrivers are those who engage in phishing to obtain unauthorized access to data.

Accepted Answer

A) True 
 B)False

Question 16

Which of the following are the three independent factors that constitute the enforcement of security procedures and policies?

Accepted Answer

A) centralized reporting,preparation,and practice 
B) hiring,screening,and terminating 
C) separation of duties,provision of maximum privilege,and position sensitivity 
D) responsibility,accountability,and compliance 
A) centralized reporting,preparation,and practice 
B) hiring,screening,and terminating 
C) separation of duties,provision of maximum privilege,and position sensitivity 
D) responsibility,accountability,and compliance

Question 17

Technical safeguards include encryption and usage of passwords.

Accepted Answer

A) True 
 B)False

Question 18

Technical safeguards involve both software and hardware components of an information system.

Accepted Answer

A) True 
 B)False

Question 19

In the case of public key encryption,each site has a private key to encode a message and a public key to decode it.

Accepted Answer

A) True 
 B)False

Question 20

A person calls the Stark residence and pretends to represent a credit card company.He asks Mrs.Stark to confirm her credit card number.This is an example of ________.

Accepted Answer

A) hacking 
B) data mining 
C) pretexting 
D) sniffing 
A) hacking 
B) data mining 
C) pretexting 
D) sniffing

Exam 10: Information Systems Security

A(n)________ is a sophisticated,possibly long-running computer hack that is perpetrated by large,well-funded organizations like governments.

Which of the following statements is true of the financial losses due to computer crimes?

Damages to security systems caused by natural disasters are minimal when compared to the damages due to human errors.

What are some of the recommended personal security safeguards against security threats?

The loss of encryption keys by employees is referred to as key escrow.

________ is a broad category of software that includes viruses,worms,Trojan horses,spyware,and adware.

A ________ is a plastic card that has a microchip loaded with identifying data.

To safeguard data against security threats,every information system today requires a user name and a password.In this case,which of the following functions is performed by the user name?

Which of the following is a human safeguard against security threats?

Explain how secure sockets layer works when a user communicates securely with a Web site.

A threat is a person or an organization that seeks to obtain or alter data illegally,without the owner's permission or knowledge.

Malware definitions are patterns that exist in malware code.

Spoofing is a technique for intercepting computer communications.

Wardrivers are those who engage in phishing to obtain unauthorized access to data.

Which of the following are the three independent factors that constitute the enforcement of security procedures and policies?

Technical safeguards include encryption and usage of passwords.

Technical safeguards involve both software and hardware components of an information system.

In the case of public key encryption,each site has a private key to encode a message and a public key to decode it.

A person calls the Stark residence and pretends to represent a credit card company.He asks Mrs.Stark to confirm her credit card number.This is an example of ________.

The Importance of MIS

Business Processes, information Systems, and Information

Organizational Strategy, information Systems, and Competitive Advantage

Hardware and Software

Database Processing

The Cloud

Organizations and Information Systems

Social Media Information Systems

Business Intelligence Systems

Information Systems Management

Information Systems Development

Collaboration Information Systems for Decision Making problem Solving and Project Management

Collaborative Information Systems for Student Projects

Mobile Systems

Introduction to Microsoft Excel 2013

Database Design

Using Microsoft Access 2013

Using Excel and Access Together

Network and Cloud Technology

Enterprise Resource Planning ERP Systems

Supply Chain Management

Enterprise Social Networks and Knowledge Management

Database Marketing

Reporting Systems and OLAP

Data Breaches

International Mis

Systems Development Project Management

Agile Development

Business Process Management

Filters