Exam 5: Cybersecurity and Risk Management

Robust data security is the responsibility of IT and data managers.

LulzSec is a hacker group and spin-off of the loosely organized hacking group called Anonymous.

Business operations are controlled by apps,systems,and networks that are so interconnected that anyone's ________ is an entry point for attacks.

One of ________ specialties is finding websites with poor security,and then stealing and posting information from them online.

Cyber-security experts warn that battling distributed denial-of-service and malware attacks has become part of everyday business for all organizations.

Detection and damage containment are the most desirable fraud controls.

A business impact analysis estimates the consequences of disruption of a business function and collects data to develop recovery strategies.

People who have their social security or credit card numbers stolen and used by thieves are frequently victims of ___________________.

In the United States,the Sarbanes-Oxley Act (SOX),Gramm-Leach-Bliley Act (GLB),Federal Information Security Management Act (FISMA),and USA Patriot Act all require businesses to __________________________.

A biometric control is an automated method of verifying the identity of a person,based on physical or behavioral characteristics.

The Payment Card Industry Data Security Standard (PCI DSS)created by Visa,MasterCard,American Express,and Discover is a __________.

.The IT security defense-in-depth model ends with ________.

Samuel received an email that looked like it came from his bank.The email told him to click a link that opened an official looking Webpage where he was asked to enter his account information.But when Samuel examined the URL,he noticed it was a strange address he did not recognize.Most likely,someone was attempting to steal Samuel's confidential information using a technique called __________.

The main cause of a data breach is malware,but the reason hacking is so successful is negligence-management not doing enough to defend against cyberthreats.

The preferred method of hackers who want to steal trade secrets and other confidential information from business organizations is ___________.

Internal fraud prevention measures are based on the same controls used to prevent external intrusions-perimeter defense technologies,such as firewalls,e-mail scanners,and biometric access.

In cybersecurity terms,the function of a password together with a username is to __________ a user's identity to verify that the person has the right to access a computer or network.

Access to top secret or highly secure networks associated with Homeland Security or national defense use authentication methods based on a biological feature,such as a fingerprint or retinal scan to identify a person.These methods are called _____________.

The cybersecurity defense strategy and controls that should be used depend on __________.

Internal fraud prevention and detection measures are based on __________ and __________.