Question 1

Which of the following definitions represents Website name stealing?

Accepted Answer

A) A problem that occurs when someone registers purposely misspelled variations of well-known domain names. 
B) The theft of a website's name that occurs when someone,posing as a site's administrator,changes the ownership of the domain name assigned to the website to another website owner. 
C) Government attempts to control Internet traffic,thus preventing some material from being viewed by a country's citizens 
D) An antispamming approach where the receiving computer launches a return attack against the spammer,sending email messages back to the computer that originated the suspected spam. 
A) A problem that occurs when someone registers purposely misspelled variations of well-known domain names. 
B) The theft of a website's name that occurs when someone,posing as a site's administrator,changes the ownership of the domain name assigned to the website to another website owner. 
C) Government attempts to control Internet traffic,thus preventing some material from being viewed by a country's citizens 
D) An antispamming approach where the receiving computer launches a return attack against the spammer,sending email messages back to the computer that originated the suspected spam.

Question 2

Information _______________ examines the organizational resource of information and regulates its definitions,uses,value,and distribution ensuring it has the types of data/information required to function and grow effectively.

Accepted Answer

The answer of Information _______________ examines the organizational resource of...

Question 3

Imagine you accidently mistype the URL for your bank and you are redirected to a fake website that collects your information.What type of identity theft were you just a victim of?

Accepted Answer

A) Pharming 
B) Worm holes 
C) Phishing 
D) Insider hacking 
A) Pharming 
B) Worm holes 
C) Phishing 
D) Insider hacking

Question 4

What is drive-by hacking?

Accepted Answer

A) A special class of adware that collects data about the user and transmits it over the Internet without the user's knowledge or permission. 
B) Experts in technology who use their knowledge to break into computers and computer networks,either for profit or just motivated by the challenge. 
C) A computer attack where an attacker accesses a wireless computer network,intercepts data,uses network services,and/or sends attack instructions without entering the office or organization that owns the network 
D) Software that,while purporting to serve some useful function and often fulfilling that function,also allows Internet advertisers to display advertisements without the consent of the computer user. 
A) A special class of adware that collects data about the user and transmits it over the Internet without the user's knowledge or permission. 
B) Experts in technology who use their knowledge to break into computers and computer networks,either for profit or just motivated by the challenge. 
C) A computer attack where an attacker accesses a wireless computer network,intercepts data,uses network services,and/or sends attack instructions without entering the office or organization that owns the network 
D) Software that,while purporting to serve some useful function and often fulfilling that function,also allows Internet advertisers to display advertisements without the consent of the computer user.

Question 5

Working at a ski resort in the mountains has its own unique security issues.Kenny is the chief information officer for Sundance Ski Resort,and he is faced with both physical and information security threats every month.Since the resort implemented a new software system,they have been having larger number of threats and breaches of company information.He suspects that this may be the cause of an internal employee.He needs to clarify and establish what type of plan to help reduce further problems?

Accepted Answer

A) An information security plan 
B) An ethical information policy 
C) An anti-virus plan 
D) None of the above 
A) An information security plan 
B) An ethical information policy 
C) An anti-virus plan 
D) None of the above

Question 6

Which of the below is not included as a common stipulation an organization would follow when creating an employee monitoring policy?

Accepted Answer

A) Be as specific as possible stating when and what will be monitored 
B) Do not state the consequences of violating the policy 
C) Always enforce the policy the same for everyone 
D) Expressly communicate that the company reserves the right to monitor all employees 
A) Be as specific as possible stating when and what will be monitored 
B) Do not state the consequences of violating the policy 
C) Always enforce the policy the same for everyone 
D) Expressly communicate that the company reserves the right to monitor all employees

Question 7

___________ is a special class of adware that collects data about the user and transmits it over the Internet without the user's knowledge or permission.

Accepted Answer

The answer of ___________ is a special class of adware...

Question 8

A patent is the legal protection afforded an expression of an idea,such as a song,book,or video game.

Accepted Answer

A) True 
 B)False

Question 9

What is a device that is around the same size as a credit card,containing embedded technologies that can store information and small amounts of software to perform some limited processing?

Accepted Answer

A) Token 
B) Password 
C) Smart card 
D) Biometrics 
A) Token 
B) Password 
C) Smart card 
D) Biometrics

Question 10

What is the primary difference between a worm and a virus?

Accepted Answer

A) A worm must attach to something to spread,where a virus does not need to attach to anything to spread and can tunnel itself into the computer 
B) A virus is copied and spread by a person,where a worm takes a string of tag words and deletes websites 
C) A virus must attach to something to spread,where a worm does not need to attach to anything to spread and can tunnel itself into the computer 
D) All of the above 
A) A worm must attach to something to spread,where a virus does not need to attach to anything to spread and can tunnel itself into the computer 
B) A virus is copied and spread by a person,where a worm takes a string of tag words and deletes websites 
C) A virus must attach to something to spread,where a worm does not need to attach to anything to spread and can tunnel itself into the computer 
D) All of the above

Question 11

Employee monitoring policies explicitly state how,when,and where the company monitors its employees.

Accepted Answer

A) True 
 B)False

Question 12

Information security is a high priority for protection of the company's information and it is critical to implement an information security procedure to combat misuse of this information.

Accepted Answer

A) True 
 B)False

Question 13

Which of the following definitions represents Teergrubing?

Accepted Answer

A) A problem that occurs when someone registers purposely misspelled variations of well-known domain names. 
B) The theft of a website's name that occurs when someone,posing as a site's administrator,changes the ownership of the domain name assigned to the website to another website owner. 
C) Government attempts to control Internet traffic,thus preventing some material from being viewed by a country's citizens 
D) An antispamming approach where the receiving computer launches a return attack against the spammer,sending email messages back to the computer that originated the suspected spam. 
A) A problem that occurs when someone registers purposely misspelled variations of well-known domain names. 
B) The theft of a website's name that occurs when someone,posing as a site's administrator,changes the ownership of the domain name assigned to the website to another website owner. 
C) Government attempts to control Internet traffic,thus preventing some material from being viewed by a country's citizens 
D) An antispamming approach where the receiving computer launches a return attack against the spammer,sending email messages back to the computer that originated the suspected spam.

Question 14

Which of the following represents the classic example of unintentional information reuse?

Accepted Answer

A) Phone number 
B) Social Security number 
C) Address 
D) Driver's license number 
A) Phone number 
B) Social Security number 
C) Address 
D) Driver's license number

Question 15

What is the identification of a user based on a physical characteristic,such as a fingerprint,iris,face,voice,or handwriting?

Accepted Answer

A) Smart card 
B) Token 
C) Biometrics 
D) Content filtering 
A) Smart card 
B) Token 
C) Biometrics 
D) Content filtering

Question 16

Backdoor programs open a way into the network for future attacks.

Accepted Answer

A) True 
 B)False

Question 17

Distributed denial-of-service attack (DDoS)attacks from multiple __________ that flood a website with so many requests for service that it slows down or crashes.

Accepted Answer

The answer of Distributed denial-of-service attack (DDoS)attacks from multiple __________...

Question 18

What is phishing?

Accepted Answer

A) Reroutes requests for legitimate websites to false websites. 
B) A technique to gain personal information for the purpose of identity theft,usually by means of fraudulent emails that look as though they came from legitimate businesses. 
C) A masquerading attack that combines spam with spoofing. 
D) A phishing expedition in which the emails are carefully designed to target a particular person or organization. 
A) Reroutes requests for legitimate websites to false websites. 
B) A technique to gain personal information for the purpose of identity theft,usually by means of fraudulent emails that look as though they came from legitimate businesses. 
C) A masquerading attack that combines spam with spoofing. 
D) A phishing expedition in which the emails are carefully designed to target a particular person or organization.

Question 19

Which of the following represents the three areas where technology can aid in the defense against information security attacks?

Accepted Answer

A) Authentication and authorization,prevention and resistance,prevention and response 
B) Authentication and authorization,prevention and response,detection and response 
C) Analyzing and authenticating,prevention and repositioning,detection and response 
D) Authentication and authorization,prevention and resistance,detection and response 
A) Authentication and authorization,prevention and resistance,prevention and response 
B) Authentication and authorization,prevention and response,detection and response 
C) Analyzing and authenticating,prevention and repositioning,detection and response 
D) Authentication and authorization,prevention and resistance,detection and response

Question 20

_______________ software is software that is manufactured to look like the real thing and sold as such.

Accepted Answer

The answer of _______________ software is software that is manufactured...

Which of the following definitions represents Website name stealing?

Information _______________ examines the organizational resource of information and regulates its definitions,uses,value,and distribution ensuring it has the types of data/information required to function and grow effectively.

Imagine you accidently mistype the URL for your bank and you are redirected to a fake website that collects your information.What type of identity theft were you just a victim of?

What is drive-by hacking?

Which of the below is not included as a common stipulation an organization would follow when creating an employee monitoring policy?

___________ is a special class of adware that collects data about the user and transmits it over the Internet without the user's knowledge or permission.

A patent is the legal protection afforded an expression of an idea,such as a song,book,or video game.

What is a device that is around the same size as a credit card,containing embedded technologies that can store information and small amounts of software to perform some limited processing?

What is the primary difference between a worm and a virus?

Employee monitoring policies explicitly state how,when,and where the company monitors its employees.

Information security is a high priority for protection of the company's information and it is critical to implement an information security procedure to combat misuse of this information.

Which of the following definitions represents Teergrubing?

Which of the following represents the classic example of unintentional information reuse?

What is the identification of a user based on a physical characteristic,such as a fingerprint,iris,face,voice,or handwriting?

Backdoor programs open a way into the network for future attacks.

Distributed denial-of-service attack (DDoS)attacks from multiple __________ that flood a website with so many requests for service that it slows down or crashes.

What is phishing?

Which of the following represents the three areas where technology can aid in the defense against information security attacks?

_______________ software is software that is manufactured to look like the real thing and sold as such.

Management Information Systems: Business Driven MIS

Decisions and Processes: Value Driven Business

Ebusiness: Electronic Business Value

Infrastructures: Sustainable Technologies

Data: Business Intelligence

Networks: Mobile Business

Enterprise Applications: Business Communications

Systems Development and Project Management: Corporate Responsibility

Hardware and Software Basics

Networks and Telecommunications

Designing Databases

Filters

Exam 4: Ethics and Information Security: Mis Business Concerns

Which of the following definitions represents Website name stealing?

Information _______________ examines the organizational resource of information and regulates its definitions,uses,value,and distribution ensuring it has the types of data/information required to function and grow effectively.

Imagine you accidently mistype the URL for your bank and you are redirected to a fake website that collects your information.What type of identity theft were you just a victim of?

What is drive-by hacking?

Which of the below is not included as a common stipulation an organization would follow when creating an employee monitoring policy?

___________ is a special class of adware that collects data about the user and transmits it over the Internet without the user's knowledge or permission.

A patent is the legal protection afforded an expression of an idea,such as a song,book,or video game.

What is a device that is around the same size as a credit card,containing embedded technologies that can store information and small amounts of software to perform some limited processing?

What is the primary difference between a worm and a virus?

Employee monitoring policies explicitly state how,when,and where the company monitors its employees.

Information security is a high priority for protection of the company's information and it is critical to implement an information security procedure to combat misuse of this information.

Which of the following definitions represents Teergrubing?

Which of the following represents the classic example of unintentional information reuse?

What is the identification of a user based on a physical characteristic,such as a fingerprint,iris,face,voice,or handwriting?

Backdoor programs open a way into the network for future attacks.

Distributed denial-of-service attack (DDoS)attacks from multiple __________ that flood a website with so many requests for service that it slows down or crashes.

What is phishing?

Which of the following represents the three areas where technology can aid in the defense against information security attacks?

_______________ software is software that is manufactured to look like the real thing and sold as such.

Management Information Systems: Business Driven MIS

Decisions and Processes: Value Driven Business

Ebusiness: Electronic Business Value

Infrastructures: Sustainable Technologies

Data: Business Intelligence

Networks: Mobile Business

Enterprise Applications: Business Communications

Systems Development and Project Management: Corporate Responsibility

Hardware and Software Basics

Networks and Telecommunications

Designing Databases

Filters