Question 1

These are used to create digital signatures.

Accepted Answer

A) Asymmetric encryption and hashing 
B) Hashing and packet filtering 
C) Packet filtering and encryption 
D) Symmetric encryption and hashing 
A) Asymmetric encryption and hashing 
B) Hashing and packet filtering 
C) Packet filtering and encryption 
D) Symmetric encryption and hashing A

Question 2

Multi-factor authentication

Accepted Answer

A) Involves the use of two or more basic authentication methods. 
B) Is a table specifying which portions of the systems users are permitted to access. 
C) Provides weaker authentication than the use of effective passwords. 
D) Requires the use of more than one effective password. 
A) Involves the use of two or more basic authentication methods. 
B) Is a table specifying which portions of the systems users are permitted to access. 
C) Provides weaker authentication than the use of effective passwords. 
D) Requires the use of more than one effective password. A

Question 3

Using a combination of symmetric and asymmetric key encryption,Chris Kai sent a report to her home office in Syracuse,New York.She received an email acknowledgement that the document had been received and then,a few minutes later,she received a second email that indicated that the hash calculated from the report differed from that sent with the report.This most likely explanation for this result is that

Accepted Answer

A) the public key had been compromised. 
B) the private key had been compromised. 
C) the symmetric encryption key had been compromised. 
D) the asymmetric encryption key had been compromised. 
A) the public key had been compromised. 
B) the private key had been compromised. 
C) the symmetric encryption key had been compromised. 
D) the asymmetric encryption key had been compromised. C

Question 4

This maintains a table that lists all established connections between the organization's computers and the Internet to determine whether an incoming packet is part of an ongoing communication initiated by an internal computer..

Accepted Answer

A) Access control list 
B) Deep packet inspection 
C) Stateful packet filtering 
D) Static packet filtering 
A) Access control list 
B) Deep packet inspection 
C) Stateful packet filtering 
D) Static packet filtering

Question 5

Preventive controls require two related functions,which are:

Accepted Answer

A) Access and control 
B) Authentication and authorization 
C) Detection and correction 
D) Physical access and logical access 
A) Access and control 
B) Authentication and authorization 
C) Detection and correction 
D) Physical access and logical access

Question 6

There are "white hat" hackers and "black hat" hackers.Cowboy451 was one of the latter.He had researched an exploit and determined that he could penetrate the target system,download a file containing valuable data,and cover his tracks in eight minutes.Six minutes into the attack he was locked out of the system.Using the notation of the time-based model of security,which of the following must be true?

Accepted Answer

A) P  6 
A) P  6

Question 7

Restricting access of users to specific portions of the system as well as specific tasks,is

Accepted Answer

A) Authentication 
B) Authorization 
C) Identification 
D) Threat monitoring 
A) Authentication 
B) Authorization 
C) Identification 
D) Threat monitoring

Question 8

On February 14,2008,students enrolled in an economics course at Swingline College received an email stating that class would be cancelled.The email claimed to be from the professor,but it wasn't.Computer forensic experts determined that the email was sent from a computer in one of the campus labs at 9:14 A.M.They were then able to uniquely identify the computer that was used by means of its network interface card's ______ address.Security cameras revealed the identity of the student responsible for spoofing the class.

Accepted Answer

A) TCP/IP 
B) MAC 
C) DMZ 
D) IDS 
A) TCP/IP 
B) MAC 
C) DMZ 
D) IDS

Question 9

Identify the four basic principles that contribute to systems reliability according to the Trust Services framework developed by the AICPA and the CICA.

Accepted Answer

Security,confidentia

Question 10

Which of the following is not associated with asymmetric encryption?

Accepted Answer

A) No need for key exchange 
B) Public keys 
C) Private keys 
D) Speed 
A) No need for key exchange 
B) Public keys 
C) Private keys 
D) Speed

Question 11

An electronic document that certifies the identity of the owner of a particular public key.

Accepted Answer

A) Asymmetric encryption 
B) Digital certificate 
C) Digital signature 
D) Public key 
A) Asymmetric encryption 
B) Digital certificate 
C) Digital signature 
D) Public key

Question 12

This creates logs of network traffic that was permitted to pass the firewall

Accepted Answer

A) Intrusion detection system 
B) Log analysis 
C) Penetration test 
D) Vulnerability scan 
A) Intrusion detection system 
B) Log analysis 
C) Penetration test 
D) Vulnerability scan

Question 13

These are established to deal with major security breaches.

Accepted Answer

A) CERTs 
B) CSOs 
C) FIRSTs 
D) Intrusion detection systems 
A) CERTs 
B) CSOs 
C) FIRSTs 
D) Intrusion detection systems

Question 14

The ___________ disseminates information about fraud,errors,breaches and other improper system uses and their consequences.

Accepted Answer

A) Chief information officer 
B) Chief operations officer 
C) Chief security officer 
D) Computer emergency response team 
A) Chief information officer 
B) Chief operations officer 
C) Chief security officer 
D) Computer emergency response team

Question 15

Which of the following is an example of a detective control?

Accepted Answer

A) Physical access controls 
B) Encryption 
C) Log analysis 
D) Emergency response teams 
A) Physical access controls 
B) Encryption 
C) Log analysis 
D) Emergency response teams

Question 16

What are the three fundamental information security concepts?

Accepted Answer

1.Security is a management iss

Question 17

Which of the following is not one of the three fundamental information security concepts?

Accepted Answer

A) Information security is a technology issue that hinges on prevention. 
B) Security is a management issue,not a technology issue. 
C) The idea of defense-in-depth employs multiple layers of controls. 
D) The time-based model of security focuses on the relationship between preventive,detective and corrective controls. 
A) Information security is a technology issue that hinges on prevention. 
B) Security is a management issue,not a technology issue. 
C) The idea of defense-in-depth employs multiple layers of controls. 
D) The time-based model of security focuses on the relationship between preventive,detective and corrective controls.

Question 18

Explain the value of penetration testing.

Accepted Answer

Penetration testing involves an authoriz

Question 19

Compatibility tests utilize a(n)__________,which is a list of authorized users,programs,and data files the users are authorized to access or manipulate.

Accepted Answer

A) validity test 
B) biometric matrix 
C) logical control matrix 
D) access control matrix 
A) validity test 
B) biometric matrix 
C) logical control matrix 
D) access control matrix

Question 20

The most effective way to protect network resources,like email servers,that are outside of the network and are exposed to the internet is

Accepted Answer

A) stateful packet filtering. 
B) employee training. 
C) a firewall. 
D) a demilitarized zone. 
A) stateful packet filtering. 
B) employee training. 
C) a firewall. 
D) a demilitarized zone.

These are used to create digital signatures.

Multi-factor authentication

This maintains a table that lists all established connections between the organization's computers and the Internet to determine whether an incoming packet is part of an ongoing communication initiated by an internal computer..

Preventive controls require two related functions,which are:

Restricting access of users to specific portions of the system as well as specific tasks,is

Identify the four basic principles that contribute to systems reliability according to the Trust Services framework developed by the AICPA and the CICA.

Which of the following is not associated with asymmetric encryption?

An electronic document that certifies the identity of the owner of a particular public key.

This creates logs of network traffic that was permitted to pass the firewall

These are established to deal with major security breaches.

The ___________ disseminates information about fraud,errors,breaches and other improper system uses and their consequences.

Which of the following is an example of a detective control?

What are the three fundamental information security concepts?

Which of the following is not one of the three fundamental information security concepts?

Explain the value of penetration testing.

Compatibility tests utilize a(n)__________,which is a list of authorized users,programs,and data files the users are authorized to access or manipulate.

The most effective way to protect network resources,like email servers,that are outside of the network and are exposed to the internet is

Accounting Information Systems

Overview of Business Processes

Systems Development and Documentation Techniques

Relational Databases

Computer Fraud and Security

Control and Accounting Information Systems

Auditing Computer-Based Information Systems

Auditing Computer-Based Informtion Systems

The Revenue Cycle: Sales an Cash Collections

The Expenditure Cycle: Purchasing and Cash Disbursements

The Production Cycle

The Human Resources Managementpayroll Cycle

General Ledger and Reporting System

Data Modeling and Database Design

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, Implementation and Operation

Filters

Exam 7: Infromation System Controls for Systems Reliability

These are used to create digital signatures.

Multi-factor authentication

This maintains a table that lists all established connections between the organization's computers and the Internet to determine whether an incoming packet is part of an ongoing communication initiated by an internal computer..

Preventive controls require two related functions,which are:

Restricting access of users to specific portions of the system as well as specific tasks,is

Identify the four basic principles that contribute to systems reliability according to the Trust Services framework developed by the AICPA and the CICA.

Which of the following is not associated with asymmetric encryption?

An electronic document that certifies the identity of the owner of a particular public key.

This creates logs of network traffic that was permitted to pass the firewall

These are established to deal with major security breaches.

The ___________ disseminates information about fraud,errors,breaches and other improper system uses and their consequences.

Which of the following is an example of a detective control?

What are the three fundamental information security concepts?

Which of the following is not one of the three fundamental information security concepts?

Explain the value of penetration testing.

Compatibility tests utilize a(n)__________,which is a list of authorized users,programs,and data files the users are authorized to access or manipulate.

The most effective way to protect network resources,like email servers,that are outside of the network and are exposed to the internet is

Accounting Information Systems

Overview of Business Processes

Systems Development and Documentation Techniques

Relational Databases

Computer Fraud and Security

Control and Accounting Information Systems

Auditing Computer-Based Information Systems

Auditing Computer-Based Informtion Systems

The Revenue Cycle: Sales an Cash Collections

The Expenditure Cycle: Purchasing and Cash Disbursements

The Production Cycle

The Human Resources Managementpayroll Cycle

General Ledger and Reporting System

Data Modeling and Database Design

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, Implementation and Operation

Filters