Exam 17: Information Security: Barbarians at the Gateway and Just About Everywhere Else

Challenge questions offered by Web sites to automate password distribution and resets are formidable in protecting the privacy of email accounts.

When using a public wireless network, using VPN software is not advisable as it can reveal your communications to any network eavesdroppers.

Multiple administrators jointly controlling key systems are an unnecessary burden that adds to the complexity of managing security in an organization.

In security circles the phrase "compliance" refers to:

Conforming to industry-standard guidelines and frameworks for organizational security ensures continued immunity from attacks on an organization's information.

A(n) _____ is someone who uncovers computer weaknesses and reveals them to manufacturers or system owners, without exploiting these vulnerabilities.

What is the key takeaway from the Heartland breach?

Web sites of reputed companies can also be sources of malware.

_____________ refers to malware that encrypts a user's files (perhaps threatening to delete them), with demands that a user pay to regain control of their data and/or device.

Some of the most common guidelines issued by Web sites when designing a secure password include:

Two-factor authentication is favored for most security situations since it's considered to be fast and conveient for customres.

The term _____ originally referred to a particularly skilled programmer.

The e-mail password of a senior employee in an organization was compromised by someone observing this user as the employee accessed his account. This is most likely a case of:

Fingerprint readers, retina scanners, voice and face recognition technologies are all part of _____.

What are the steps to be taken with respect to firm employees in order to ensure organizational security?

A system that monitors network use for potential hacking attempts and takes preventative action to block, isolate, or identify attempted infiltration, and raise further alarms to warn security personnel is known as a(n):

Which of the following statements holds true for the term spoof?

Information security policies would be ineffective without _____ and _____.

Regularly updated software lowers a system's vulnerable attack surface.

_____ are scrambled character images used to thwart things like automated account setup or ticket buying.