Exam 4: Information Security and Controls

_______________ assesses the value of each asset being protected, estimates the probability it might be compromised, and compares the probable costs of it being compromised with the cost of protecting it.

Discuss the possible consequences of a terrorist attack on a supervisory control and data acquisition (SCADA)system.

_______________ is a process whereby the organization takes concrete actions against risks, such as implementing controls and developing a disaster recovery plan.

Social engineers often impersonate legitimate employees.

______________ is when permission is issued to individuals and groups to do certain activities that can be performed by users of the system.

You start a dog-walking service, and you store your client's records on your smart phone. You don't need to worry about information security.

The computing skills necessary to be a hacker are decreasing for which of the following reasons?

Organizations use hot sites, warm sites, and cold sites to insure business continuity. Which of the following statements is not true?

Backup plans are not always necessary.

The higher the level of an employee in organization, the greater the threat that he or she poses to the organization.

Explain why anti-malware software is classified as reactive.

Risk analysis involves determining whether security programs are working.

Zero-day attacks use deceptive e-mails to acquire sensitive personal information.

Voice and signature recognition are examples of:

You start a new job, and the first thing your new company wants you to do is create a user ID and a password. Which of the following would be a strong password?

A _____ is a document that grants the holder exclusive rights on an invention for 20 years.

The main purpose for the attack on Sony Pictures Entertainment on November 24, 2014, was to stop the release of the movie The Interview.

Social engineering is when the attacker uses _____________ to trick a legitimate employee into providing confidential company information such as passwords.

A copyright provides creators of intellectual property with ownership of the property for the life of the creator plus _________ years.

_____ are segments of computer code embedded within an organization's existing computer programs that activate and perform a destructive action at a certain time or date.