Question 1

An essential part of follow-up is to determine how the organization's security was compromised so that it does not happen again.

Accepted Answer

A) True 
 B)False

Question 2

A(n)______________________________ is software and/or hardware that monitors system and network resources and activities,and notifies network security personnel when it identifies possible intrusions from outside the organization or misuse from within the organization.

Accepted Answer

intrusion

Question 3

Ethical behavior conforms to ____.

Accepted Answer

A)  legal guidelines 
B)  family rules 
C)  generally accepted social norms 
D)  company norms 
A)  legal guidelines 
B)  family rules 
C)  generally accepted social norms 
D)  company norms

Question 4

A ____ is an organization's review of potential threats to its computers and networks along with an analysis of the probability that these will occur and prevent the organization from meeting key business objectives.

Accepted Answer

A)  risk tool 
B)  penetration test 
C)  network assessment 
D)  risk assessment 
A)  risk tool 
B)  penetration test 
C)  network assessment 
D)  risk assessment

Question 5

It is crucial that antivirus software be updated continually with the latest virus detection information,called ____.

Accepted Answer

A)  pattern databases 
B)  virus definitions 
C)  virus signatures 
D)  database patterns 
A)  pattern databases 
B)  virus definitions 
C)  virus signatures 
D)  database patterns

Question 6

Define corporate ethics and explain the primary function of a corporate ethics policy.

Accepted Answer

Corporate ethics can be defined broadly

Question 7

Organizations should implement ____ to catch intruders in the act.

Accepted Answer

A)  detection systems 
B)  deflection systems 
C)  prevention systems 
D)  monitored systems 
A)  detection systems 
B)  deflection systems 
C)  prevention systems 
D)  monitored systems

Question 8

Most security experts recommend giving out specific information about a compromise in public forums,such as news reports,conferences,professional meetings,and online discussion groups.

Accepted Answer

A) True 
 B)False

Question 9

Why is it important to conduct periodic IT security audits?

Accepted Answer

An important prevention tool is a securi

Question 10

In a security incident,the primary goal must be ____.

Accepted Answer

A)  to attempt to monitor or catch an intruder 
B)  inflict damage to the intruder 
C)  to regain control and limit damage 
D)  to place the system back in service 
A)  to attempt to monitor or catch an intruder 
B)  inflict damage to the intruder 
C)  to regain control and limit damage 
D)  to place the system back in service

Question 11

____ refers to criminal activity in which a computer or a computer network is used as a tool to commit a crime or is the target of criminal activity.

Accepted Answer

A)  Ecrime 
B)  Virtual crime 
C)  Cybercrime 
D)  Network crime 
A)  Ecrime 
B)  Virtual crime 
C)  Cybercrime 
D)  Network crime

Question 12

When dealing with customer data,strong measures are required to avoid customer ___________________ problems.

Accepted Answer

The answer of When dealing with customer data,strong measures are...

Question 13

All ____ should be created with enough frequency to enable a full and quick restoration of data if an attack destroys the original.

Accepted Answer

A)  images 
B)  restorations 
C)  servers 
D)  backups 
A)  images 
B)  restorations 
C)  servers 
D)  backups

Question 14

____ work to prevent an attack by blocking viruses,malformed packets,and other threats from getting into the company network.

Accepted Answer

A)  Intrusion prevention systems 
B)  Firewalls 
C)  Concentrators 
D)  Routers 
A)  Intrusion prevention systems 
B)  Firewalls 
C)  Concentrators 
D)  Routers

Question 15

More than 90 percent of major U.S.firms find it necessary to record and review employee communications and activities on the job,including e-mail,Web surfing,and phone usage.

Accepted Answer

A) True 
 B)False

Question 16

In a nonprofit corporation,the board reports to shareholders,customers,employees,suppliers,and the community.

Accepted Answer

A) True 
 B)False

Question 17

Significant improvements in security can require years and do not come easy.

Accepted Answer

A) True 
 B)False

Question 18

Creating a detailed ____________________ of all events also will document the incident for later prosecution.

Accepted Answer

The answer of Creating a detailed ____________________ of all events...

Question 19

List three specific responsibilities of an ethics officer.

Accepted Answer

Specific responsibilities might include

Question 20

The experience from an incident should be used to update and revise the ____ plan.

Accepted Answer

A)  network plan 
B)  security incident response 
C)  security alert plan 
D)  network response plan 
A)  network plan 
B)  security incident response 
C)  security alert plan 
D)  network response plan

An essential part of follow-up is to determine how the organization's security was compromised so that it does not happen again.

A(n)______________________________ is software and/or hardware that monitors system and network resources and activities,and notifies network security personnel when it identifies possible intrusions from outside the organization or misuse from within the organization.

Ethical behavior conforms to ____.

A ____ is an organization's review of potential threats to its computers and networks along with an analysis of the probability that these will occur and prevent the organization from meeting key business objectives.

It is crucial that antivirus software be updated continually with the latest virus detection information,called ____.

Define corporate ethics and explain the primary function of a corporate ethics policy.

Organizations should implement ____ to catch intruders in the act.

Most security experts recommend giving out specific information about a compromise in public forums,such as news reports,conferences,professional meetings,and online discussion groups.

Why is it important to conduct periodic IT security audits?

In a security incident,the primary goal must be ____.

____ refers to criminal activity in which a computer or a computer network is used as a tool to commit a crime or is the target of criminal activity.

When dealing with customer data,strong measures are required to avoid customer ___________________ problems.

All ____ should be created with enough frequency to enable a full and quick restoration of data if an attack destroys the original.

____ work to prevent an attack by blocking viruses,malformed packets,and other threats from getting into the company network.

More than 90 percent of major U.S.firms find it necessary to record and review employee communications and activities on the job,including e-mail,Web surfing,and phone usage.

In a nonprofit corporation,the board reports to shareholders,customers,employees,suppliers,and the community.

Significant improvements in security can require years and do not come easy.

Creating a detailed ____________________ of all events also will document the incident for later prosecution.

List three specific responsibilities of an ethics officer.

The experience from an incident should be used to update and revise the ____ plan.

Managers: Key to Information Technology Results

Strategic Planning

Project Management

Business Processing and IT Outsourcing

Corporate Governance and IT

Collaboration Tools and Wireless Networks

E-Business

Enterprise Resource Planning

Business Intelligence

Knowledge Management

Enterprise Architecture

Filters

Exam 12: Ethical, privacy, and Security Issues

An essential part of follow-up is to determine how the organization's security was compromised so that it does not happen again.

A(n)______________________________ is software and/or hardware that monitors system and network resources and activities,and notifies network security personnel when it identifies possible intrusions from outside the organization or misuse from within the organization.

Ethical behavior conforms to ____.

A ____ is an organization's review of potential threats to its computers and networks along with an analysis of the probability that these will occur and prevent the organization from meeting key business objectives.

It is crucial that antivirus software be updated continually with the latest virus detection information,called ____.

Define corporate ethics and explain the primary function of a corporate ethics policy.

Organizations should implement ____ to catch intruders in the act.

Most security experts recommend giving out specific information about a compromise in public forums,such as news reports,conferences,professional meetings,and online discussion groups.

Why is it important to conduct periodic IT security audits?

In a security incident,the primary goal must be ____.

____ refers to criminal activity in which a computer or a computer network is used as a tool to commit a crime or is the target of criminal activity.

When dealing with customer data,strong measures are required to avoid customer ___________________ problems.

All ____ should be created with enough frequency to enable a full and quick restoration of data if an attack destroys the original.

____ work to prevent an attack by blocking viruses,malformed packets,and other threats from getting into the company network.

More than 90 percent of major U.S.firms find it necessary to record and review employee communications and activities on the job,including e-mail,Web surfing,and phone usage.

In a nonprofit corporation,the board reports to shareholders,customers,employees,suppliers,and the community.

Significant improvements in security can require years and do not come easy.

Creating a detailed ____________________ of all events also will document the incident for later prosecution.

List three specific responsibilities of an ethics officer.

The experience from an incident should be used to update and revise the ____ plan.

Managers: Key to Information Technology Results

Strategic Planning

Project Management

Business Processing and IT Outsourcing

Corporate Governance and IT

Collaboration Tools and Wireless Networks

E-Business

Enterprise Resource Planning

Business Intelligence

Knowledge Management

Enterprise Architecture

Filters