Question 1

Three major concerns of system builders and users are disaster, security, and human error. Of the three, which do you think is most difficult to deal with? Why?

Accepted Answer

Student answers will vary. Example answe

Question 2

For 100 percent availability, online transaction processing requires:

Accepted Answer

A)  high-capacity storage. 
B)  a multi-tier server network. 
C)  fault-tolerant computer systems. 
D)  dedicated phone lines. 
E)  deep packet inspection. 
A)  high-capacity storage. 
B)  a multi-tier server network. 
C)  fault-tolerant computer systems. 
D)  dedicated phone lines. 
E)  deep packet inspection.

Question 3

Using numerous computers to inundate and overwhelm the network from numerous launch points is called a(n) ________ attack.

Accepted Answer

A)  DDoS 
B)  DoS 
C)  SQL injection 
D)  phishing 
E)  ransomware 
A)  DDoS 
B)  DoS 
C)  SQL injection 
D)  phishing 
E)  ransomware

Question 4

All of the following countries are popular sources of malware attacks except:

Accepted Answer

A)  the Netherlands. 
B)  the United Kingdom. 
C)  the United States. 
D)  Germany. 
E)  Mexico. 
A)  the Netherlands. 
B)  the United Kingdom. 
C)  the United States. 
D)  Germany. 
E)  Mexico.

Question 5

An authentication token:

Accepted Answer

A)  is a device the size of a credit card that contains access permission data. 
B)  is a type of smart card. 
C)  is a device that displays passcodes. 
D)  is an electronic marker attached to a digital authorization file. 
E)  compares a person's unique characteristics against a stored profile of these characteristics to determine any differences between these characteristics and the stored profile. 
A)  is a device the size of a credit card that contains access permission data. 
B)  is a type of smart card. 
C)  is a device that displays passcodes. 
D)  is an electronic marker attached to a digital authorization file. 
E)  compares a person's unique characteristics against a stored profile of these characteristics to determine any differences between these characteristics and the stored profile.

Question 6

Packet filtering catches most types of network attacks.

Accepted Answer

A) True 
 B)False

Question 7

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

Accepted Answer

A)  SSL 
B)  Symmetric key encryption 
C)  Public key encryption 
D)  Private key encryption 
E)  TLS 
A)  SSL 
B)  Symmetric key encryption 
C)  Public key encryption 
D)  Private key encryption 
E)  TLS

Question 8

________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

Accepted Answer

A)  Identity theft 
B)  Spoofing 
C)  Social engineering 
D)  Evil twins 
E)  Cybervandalism 
A)  Identity theft 
B)  Spoofing 
C)  Social engineering 
D)  Evil twins 
E)  Cybervandalism

Question 9

A firewall allows the organization to:

Accepted Answer

A)  enforce a security policy on data exchanged between its network and the Internet. 
B)  check the accuracy of all transactions between its network and the Internet. 
C)  create an enterprise system on the Internet. 
D)  check the content of all incoming and outgoing email messages. 
E)  authenticate users. 
A)  enforce a security policy on data exchanged between its network and the Internet. 
B)  check the accuracy of all transactions between its network and the Internet. 
C)  create an enterprise system on the Internet. 
D)  check the content of all incoming and outgoing email messages. 
E)  authenticate users.

Question 10

Analysis of an information system that rates the likelihood of a security incident occurring and its cost is included in a(n):

Accepted Answer

A)  security policy. 
B)  AUP. 
C)  risk assessment. 
D)  business impact analysis. 
E)  What-if analysis. 
A)  security policy. 
B)  AUP. 
C)  risk assessment. 
D)  business impact analysis. 
E)  What-if analysis.

Question 11

SSL is a protocol used to establish a secure connection between two computers.

Accepted Answer

A) True 
 B)False

Question 12

A digital certificate system:

Accepted Answer

A)  uses third-party CAs to validate a user's identity. 
B)  uses digital signatures to validate a user's identity. 
C)  uses tokens to validate a user's identity. 
D)  is used primarily by individuals for personal correspondence. 
E)  uses deep packet inspection to validate a user's identity. 
A)  uses third-party CAs to validate a user's identity. 
B)  uses digital signatures to validate a user's identity. 
C)  uses tokens to validate a user's identity. 
D)  is used primarily by individuals for personal correspondence. 
E)  uses deep packet inspection to validate a user's identity.

Question 13

Viruses cannot be spread through email.

Accepted Answer

A) True 
 B)False

Question 14

DoS attacks are used to destroy information and access restricted areas of a company's information system.

Accepted Answer

A) True 
 B)False

Question 15

Which of the following focuses primarily on the technical issues of keeping systems up and running?

Accepted Answer

A)  Business continuity planning 
B)  Security policies 
C)  Disaster recovery planning 
D)  An AUP 
E)  An information systems audit 
A)  Business continuity planning 
B)  Security policies 
C)  Disaster recovery planning 
D)  An AUP 
E)  An information systems audit

Question 16

Pharming involves:

Accepted Answer

A)  redirecting users to a fraudulent website even when the user has typed in the correct address in the web browser. 
B)  pretending to be a legitimate business's representative in order to garner information about a security system. 
C)  setting up fake websites to ask users for confidential information. 
D)  using emails for threats or harassment. 
E)  malware that displays annoying pop-up messages. 
A)  redirecting users to a fraudulent website even when the user has typed in the correct address in the web browser. 
B)  pretending to be a legitimate business's representative in order to garner information about a security system. 
C)  setting up fake websites to ask users for confidential information. 
D)  using emails for threats or harassment. 
E)  malware that displays annoying pop-up messages.

Question 17

Computer forensics tasks include all of the following except:

Accepted Answer

A)  presenting collected evidence in a court of law. 
B)  securely storing recovered electronic data. 
C)  collecting physical evidence on the computer. 
D)  finding significant information in a large volume of electronic data. 
E)  recovering data from computers while preserving evidential integrity. 
A)  presenting collected evidence in a court of law. 
B)  securely storing recovered electronic data. 
C)  collecting physical evidence on the computer. 
D)  finding significant information in a large volume of electronic data. 
E)  recovering data from computers while preserving evidential integrity.

Question 18

When errors are discovered in software programs, the sources of the errors are found and eliminated through a process called debugging.

Accepted Answer

A) True 
 B)False

Question 19

CryptoLocker is an example of which of the following?

Accepted Answer

A)  Trojan Horse 
B)  SQL injection attack 
C)  Sniffer 
D)  Evil twin 
E)  Ransomware 
A)  Trojan Horse 
B)  SQL injection attack 
C)  Sniffer 
D)  Evil twin 
E)  Ransomware

Question 20

Which of the following specifications replaced WEP with a stronger security standard that features changing encryption keys?

Accepted Answer

A)  TLS 
B)  AUP 
C)  VPN 
D)  WPA2 
E)  S-HTTP 
A)  TLS 
B)  AUP 
C)  VPN 
D)  WPA2 
E)  S-HTTP

Three major concerns of system builders and users are disaster, security, and human error. Of the three, which do you think is most difficult to deal with? Why?

For 100 percent availability, online transaction processing requires:

Using numerous computers to inundate and overwhelm the network from numerous launch points is called a(n) ________ attack.

All of the following countries are popular sources of malware attacks except:

An authentication token:

Packet filtering catches most types of network attacks.

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

A firewall allows the organization to:

Analysis of an information system that rates the likelihood of a security incident occurring and its cost is included in a(n):

SSL is a protocol used to establish a secure connection between two computers.

A digital certificate system:

Viruses cannot be spread through email.

DoS attacks are used to destroy information and access restricted areas of a company's information system.

Which of the following focuses primarily on the technical issues of keeping systems up and running?

Pharming involves:

Computer forensics tasks include all of the following except:

When errors are discovered in software programs, the sources of the errors are found and eliminated through a process called debugging.

CryptoLocker is an example of which of the following?

Which of the following specifications replaced WEP with a stronger security standard that features changing encryption keys?

Business Information Systems in Your Career

Global E-Business and Collaboration

Achieving Competitive Advantage With Information Systems

Ethical and Social Issues in Information Systems

It Infrastructure: Hardware and Software

Foundations of Business Intelligence: Databases and

Telecommunications, the Internet, and Wireless Technology

Achieving Operational Excellence and Customer Intimacy:

E-Commerce: Digital Markets, Digital Goods

Improving Decision Making and Managing Knowledge

Building Information Systems and Managing Projects

Filters

Exam 8: Securing Information Systems

Three major concerns of system builders and users are disaster, security, and human error. Of the three, which do you think is most difficult to deal with? Why?

For 100 percent availability, online transaction processing requires:

Using numerous computers to inundate and overwhelm the network from numerous launch points is called a(n) ________ attack.

All of the following countries are popular sources of malware attacks except:

An authentication token:

Packet filtering catches most types of network attacks.

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

A firewall allows the organization to:

Analysis of an information system that rates the likelihood of a security incident occurring and its cost is included in a(n):

SSL is a protocol used to establish a secure connection between two computers.

A digital certificate system:

Viruses cannot be spread through email.

DoS attacks are used to destroy information and access restricted areas of a company's information system.

Which of the following focuses primarily on the technical issues of keeping systems up and running?

Pharming involves:

Computer forensics tasks include all of the following except:

When errors are discovered in software programs, the sources of the errors are found and eliminated through a process called debugging.

CryptoLocker is an example of which of the following?

Which of the following specifications replaced WEP with a stronger security standard that features changing encryption keys?

Business Information Systems in Your Career

Global E-Business and Collaboration

Achieving Competitive Advantage With Information Systems

Ethical and Social Issues in Information Systems

It Infrastructure: Hardware and Software

Foundations of Business Intelligence: Databases and

Telecommunications, the Internet, and Wireless Technology

Achieving Operational Excellence and Customer Intimacy:

E-Commerce: Digital Markets, Digital Goods

Improving Decision Making and Managing Knowledge

Building Information Systems and Managing Projects

Filters