Exam 5: Information Systems Security

In most cases,companies can screen vendor,partner personnel and public users.

Which of the following is a valid difference between a password and user name?

The ___________ should also gather and preserve evidence for legal action.

Many organizations create honey-pots,which are false targets for hackers to attack.

A __________ is a systematic evaluation of security by assessing how well the security safeguards conform to established criteria.

Standard human resource policies should ensure that system administrators receive notification in advance of the employee's last day so they can remove accounts and passwords.

A vulnerability is some measure that individuals or organizations take to block the threat from obtaining the asset.

Companies often allow employees to use their own personal mobile device to conduct company activities,a policy called Bring Your Own Device (BYOD).

A company-wide security policy should include how employees and others can request changes to inaccurate data.

In a typical _________ attack,the criminal posts a reply to a discussion board but along with The plaintext reply adds malicious code invisible to the discussion board.

Provide a brief explanation for each of the three categories of security losses:

Malware definitions-patterns that exist in malware code-should be downloaded frequently.

Why should every company have a security incident response plan? What steps are involved?

______________ concerns the creation of new user accounts,the modification of existing account permissions,and the removal of unneeded accounts.

Removing and disabling cookies improves security,but your computer will be more difficult to use.

Few individuals take security as seriously as they should,and most fail to implement even low-cost safeguards.

Malware protection is an example of a data safeguard.

Firewalls are an example of what type of safeguard?

The preventative measures used by organizations to reduce IS security are called:

A number used to encrypt data is called a(n)________.