Question 1

A foreign country attempting to access government networks in order to disable a national power grid would be an example of:

Accepted Answer

A)  phishing. 
B)  denial-of-service attacks. 
C)  cyberwarfare. 
D)  ransomware. 
E)  injection attack. 
A)  phishing. 
B)  denial-of-service attacks. 
C)  cyberwarfare. 
D)  ransomware. 
E)  injection attack.

Question 2

Specific security challenges that threaten corporate servers in a client/server environment include:

Accepted Answer

A)  tapping, sniffing, message alteration, and radiation. 
B)  hacking, vandalism, and denial of service attacks. 
C)  theft, copying, alteration of data, and hardware or software failure. 
D)  unauthorized access, errors, and spyware. 
E)  vandalism, message alteration, and errors. 
A)  tapping, sniffing, message alteration, and radiation. 
B)  hacking, vandalism, and denial of service attacks. 
C)  theft, copying, alteration of data, and hardware or software failure. 
D)  unauthorized access, errors, and spyware. 
E)  vandalism, message alteration, and errors.

Question 3

What are the security challenges faced by the use of wireless networks?

Accepted Answer

Wireless networks are vulnerable because

Question 4

Statements ranking information risks and identifying security goals are included in a(n):

Accepted Answer

A)  security policy. 
B)  AUP. 
C)  risk assessment. 
D)  business impact analysis. 
E)  What-if analysis. 
A)  security policy. 
B)  AUP. 
C)  risk assessment. 
D)  business impact analysis. 
E)  What-if analysis.

Question 5

How can a firm's security policies contribute and relate to the six main business objectives? Give examples.

Accepted Answer

(1) Operational excellence: Security pol

Question 6

How does disaster recovery planning differ from business continuity planning?

Accepted Answer

Disaster recovery planning devises plans

Question 7

________ use scanning software to look for known problems such as bad passwords, the removal of important files, security attacks in progress, and system administration errors.

Accepted Answer

A)  Stateful inspections 
B)  Intrusion detection systems 
C)  Application proxy filtering technologies 
D)  Packet filtering technologies 
E)  Firewalls 
A)  Stateful inspections 
B)  Intrusion detection systems 
C)  Application proxy filtering technologies 
D)  Packet filtering technologies 
E)  Firewalls

Question 8

A practice in which eavesdroppers drive by buildings or park outside and try to intercept wireless network traffic is referred to as:

Accepted Answer

A)  war driving. 
B)  sniffing. 
C)  cybervandalism. 
D)  driveby tapping. 
E)  driveby downloading. 
A)  war driving. 
B)  sniffing. 
C)  cybervandalism. 
D)  driveby tapping. 
E)  driveby downloading.

Question 9

A salesperson clicks repeatedly on the online ads of a competitor's in order to drive the competitor's advertising costs up. This is an example of:

Accepted Answer

A)  phishing. 
B)  pharming. 
C)  spoofing. 
D)  click fraud. 
E)  sniffing. 
A)  phishing. 
B)  pharming. 
C)  spoofing. 
D)  click fraud. 
E)  sniffing.

Question 10

Tricking employees into revealing their passwords by pretending to be a legitimate member of a company is called:

Accepted Answer

A)  sniffing. 
B)  social engineering. 
C)  phishing. 
D)  pharming. 
E)  click fraud. 
A)  sniffing. 
B)  social engineering. 
C)  phishing. 
D)  pharming. 
E)  click fraud.

Question 11

Explain how an SQL injection attack works and what types of systems are vulnerable to this type of attack.

Accepted Answer

SQL injection attacks take advantage of

Question 12

Define computer forensics and describe the types of problems it is designed to address.

Accepted Answer

Computer forensics is the scientific col

Question 13

Conficker (also known as Downadup or Downup) is an example of which of the following?

Accepted Answer

A)  SQL injection attack 
B)  Browser parasite 
C)  Worm 
D)  Ransomware 
E)  Script virus 
A)  SQL injection attack 
B)  Browser parasite 
C)  Worm 
D)  Ransomware 
E)  Script virus

Question 14

Redirecting a web link to a different address is a form of:

Accepted Answer

A)  snooping. 
B)  spoofing. 
C)  sniffing. 
D)  war driving. 
E)  SQL injection attack. 
A)  snooping. 
B)  spoofing. 
C)  sniffing. 
D)  war driving. 
E)  SQL injection attack.

Question 15

Smartphones are not vulnerable to browser-based malware.

Accepted Answer

A) True 
 B)False

Question 16

Explain how two-factor authentication increases security.

Accepted Answer

Two-factor authentication increases secu

Question 17

Which of the following specifically makes malware distribution and hacker attacks to disable websites a federal crime?

Accepted Answer

A)  Computer Fraud and Abuse Act 
B)  Economic Espionage Act 
C)  Electronic Communications Privacy Act 
D)  Data Security and Breach Notification Act 
E)  National Information Infrastructure Protection Act 
A)  Computer Fraud and Abuse Act 
B)  Economic Espionage Act 
C)  Electronic Communications Privacy Act 
D)  Data Security and Breach Notification Act 
E)  National Information Infrastructure Protection Act

Question 18

Computer worms spread much more rapidly than computer viruses.

Accepted Answer

A) True 
 B)False

Question 19

A keylogger is a type of:

Accepted Answer

A)  worm. 
B)  Trojan horse. 
C)  virus. 
D)  spyware. 
E)  SQL injection attack. 
A)  worm. 
B)  Trojan horse. 
C)  virus. 
D)  spyware. 
E)  SQL injection attack.

Question 20

The HIPAA Act of 1996:

Accepted Answer

A)  requires financial institutions to ensure the security of customer data. 
B)  specifies best practices in information systems security and control. 
C)  imposes responsibility on companies and management to safeguard the accuracy of financial information. 
D)  outlines medical security and privacy rules. 
E)  requires that companies retain electronic records for at least 10 years. 
A)  requires financial institutions to ensure the security of customer data. 
B)  specifies best practices in information systems security and control. 
C)  imposes responsibility on companies and management to safeguard the accuracy of financial information. 
D)  outlines medical security and privacy rules. 
E)  requires that companies retain electronic records for at least 10 years.

A foreign country attempting to access government networks in order to disable a national power grid would be an example of:

Specific security challenges that threaten corporate servers in a client/server environment include:

What are the security challenges faced by the use of wireless networks?

Statements ranking information risks and identifying security goals are included in a(n):

How can a firm's security policies contribute and relate to the six main business objectives? Give examples.

How does disaster recovery planning differ from business continuity planning?

________ use scanning software to look for known problems such as bad passwords, the removal of important files, security attacks in progress, and system administration errors.

A practice in which eavesdroppers drive by buildings or park outside and try to intercept wireless network traffic is referred to as:

A salesperson clicks repeatedly on the online ads of a competitor's in order to drive the competitor's advertising costs up. This is an example of:

Tricking employees into revealing their passwords by pretending to be a legitimate member of a company is called:

Explain how an SQL injection attack works and what types of systems are vulnerable to this type of attack.

Define computer forensics and describe the types of problems it is designed to address.

Conficker (also known as Downadup or Downup) is an example of which of the following?

Redirecting a web link to a different address is a form of:

Smartphones are not vulnerable to browser-based malware.

Explain how two-factor authentication increases security.

Which of the following specifically makes malware distribution and hacker attacks to disable websites a federal crime?

Computer worms spread much more rapidly than computer viruses.

A keylogger is a type of:

The HIPAA Act of 1996:

Business Information Systems in Your Career

Global E-Business and Collaboration

Achieving Competitive Advantage With Information Systems

Ethical and Social Issues in Information Systems

It Infrastructure: Hardware and Software

Foundations of Business Intelligence: Databases and

Telecommunications, the Internet, and Wireless Technology

Achieving Operational Excellence and Customer Intimacy:

E-Commerce: Digital Markets, Digital Goods

Improving Decision Making and Managing Knowledge

Building Information Systems and Managing Projects

Filters

Exam 8: Securing Information Systems

A foreign country attempting to access government networks in order to disable a national power grid would be an example of:

Specific security challenges that threaten corporate servers in a client/server environment include:

What are the security challenges faced by the use of wireless networks?

Statements ranking information risks and identifying security goals are included in a(n):

How can a firm's security policies contribute and relate to the six main business objectives? Give examples.

How does disaster recovery planning differ from business continuity planning?

________ use scanning software to look for known problems such as bad passwords, the removal of important files, security attacks in progress, and system administration errors.

A practice in which eavesdroppers drive by buildings or park outside and try to intercept wireless network traffic is referred to as:

A salesperson clicks repeatedly on the online ads of a competitor's in order to drive the competitor's advertising costs up. This is an example of:

Tricking employees into revealing their passwords by pretending to be a legitimate member of a company is called:

Explain how an SQL injection attack works and what types of systems are vulnerable to this type of attack.

Define computer forensics and describe the types of problems it is designed to address.

Conficker (also known as Downadup or Downup) is an example of which of the following?

Redirecting a web link to a different address is a form of:

Smartphones are not vulnerable to browser-based malware.

Explain how two-factor authentication increases security.

Which of the following specifically makes malware distribution and hacker attacks to disable websites a federal crime?

Computer worms spread much more rapidly than computer viruses.

A keylogger is a type of:

The HIPAA Act of 1996:

Business Information Systems in Your Career

Global E-Business and Collaboration

Achieving Competitive Advantage With Information Systems

Ethical and Social Issues in Information Systems

It Infrastructure: Hardware and Software

Foundations of Business Intelligence: Databases and

Telecommunications, the Internet, and Wireless Technology

Achieving Operational Excellence and Customer Intimacy:

E-Commerce: Digital Markets, Digital Goods

Improving Decision Making and Managing Knowledge

Building Information Systems and Managing Projects

Filters