Exam 2: The Need for Security

A mail bomb is a form of DoS attack.

Some information gathering techniques are quite legal-for example, using a Web browser to perform market research. These legal techniques are called, collectively, competitive ____________________.

"4-1-9" fraud is an example of a ____________________ attack.

Human error or failure often can be prevented with training, ongoing awareness activities, and ____________________.

Much human error or failure can be prevented with effective training and ongoing awareness activities.

____  is any technology that aids in gathering information about a person or organization without their knowledge.

Organizations can use dictionaries to regulate password selection during the reset process and thus guard against easy-to-guess passwords.

The ____________________ hijacking attack uses IP spoofing to enable an attacker to impersonate another entity on the network.

In a ____________________ attack, the attacker sends a large number of connection or information requests to disrupt a target from a small number of sources.

A(n) ____________________ is a potential risk to an information asset.

A(n) ____________________ is a potential weakness in an asset or its defensive control(s).

Describe the capabilities of a sniffer.

A worm requires that another program is running before it can begin functioning.

The application of computing and network resources to try every possible combination of options of a password is called a dictionary attack. _________________________

When electronic information is stolen, the crime is readily apparent.

One form of e-mail attack that is also a DoS attack is called a mail spoof, in which an attacker overwhelms the receiver with excessive quantities of e-mail. _________________________

Which of the following functions does information security perform for an organization  

____________________ are malware programs that hide their true nature and reveal their designed behavior only when activated.

The malicious code attack includes the execution of viruses, worms, Trojan horses, and active Web scripts with the intent to destroy or steal information. _________________________

Media as a subset of information assets are the systems and networks that store, process, and transmit information.