Exam 10: Information Systems Security

Existence of accounts that are no longer necessary does not pose a security threat.

A(n)________ is a sophisticated, possibly long-running computer hack that is perpetrated by large, well-funded organizations like governments.

Breaking into computers, servers, or networks to steal proprietary and confidential data is referred to as ________.

Explain the concept of denial of service (DOS)in information management.

A ________ is a plastic card that has a microchip loaded with identifying data.

Explain how defining positions in an organization can safeguard against security threats.

IP spoofing occurs when an intruder uses another site's IP address to masquerade as that other site.

Which of the following occurs when millions of bogus service requests flood a Web server and prevent it from servicing legitimate requests?

What are the two critical security functions that an organization's senior management needs to address?

Incident-response plans should provide centralized reporting of all security incidents.

________ occurs when computer criminals invade a computer system and replace legitimate programs with their own unauthorized ones.

A key is a number used with an encryption algorithm to encrypt data.

A(n)________ is a computer program that senses when another computer is attempting to scan a disk or access a computer.

Which of the following is a synonym for phishing?

The loss of encryption keys by employees is referred to as key escrow.

Most secure communications over the Internet use a protocol called ________.

Which of the following is a human safeguard against security threats?

A help-desk information system has answers to questions that only a true user of an account or system would know.

Malware protection is an example of a technical safeguard.

Which of the following is a technical safeguard against security threats?