Exam 10: Securing Information Systems

Explain various types of information systems controls.

Robert receives an e-mail which says that he has won an online lottery worth $50 billion.Robert has his doubts as he does not remember buying a lottery ticket.He finds out that it is a spam e-mail intended to obtain his bank account details and credit card number.Which of the following is evident here?

Corrective controls are used to mitigate the impact of any problem after it has arisen,such as restoring compromised data.

Which of the following is the most accurate definition of a botnet?

With ________,employees may be identified by fingerprints,retinal patterns in the eye,facial features,or other bodily characteristics before being granted access to use a computer or to enter a facility.

What is unauthorized access? Provide a few examples for unauthorized access.

While adding information to the employee information database,Neil's computer crashed,and the entire database was erased.Which of the following types of viruses caused Neil's computer to crash?

________ refers to precautions taken to keep all aspects of information systems safe from destruction,manipulation,or unauthorized use or access.

Recovery point objectives are used to specify how current the backup data should be.

An organization takes active countermeasures to protect its systems,such as installing firewalls.This approach is known as ________.

The individuals who are knowledgeable enough to gain access to computer systems without authorization are referred to as ________.

Briefly explain cyberwar and cyberterrorism.

Briefly explain the concept of computer crime.

Independent citizens or supporters of a country that perpetrate attacks on perceived or real enemies are called ________.

The act of cybercriminals to gain information on a victim by monitoring online activities,accessing databases,and making false accusations are forms of ________.

When a company uses a fingerprint recognition system instead of access cards,it helps the company prevent unauthorized physical access.Which of the following technologies is used for authentication here?

An organization does not implement countermeasures against information threats; instead it simply absorbs the damages that occur.This approach is called ________.

________ is the use of computer and networking technologies by individuals and organized groups against persons or property to intimidate or coerce governments.

Which of the following is a valid observation about encryption?

Briefly describe the concept of virtual private networks.