Exam 14: Information Security: Barbarians at the Gateway and Just About Everywhere Else

Cyber criminals who infiltrate systems and collect data for illegal resale are called _____.

Challenge questions offered by Web sites to automate password distribution and resets are formidable in protecting the privacy of email accounts.

Briefly explain the steps one should take to ensure that their highest priority accounts are not compromised easily by hackers.

_____ refers to confidence scams executed through technology.

Con games that trick employees into revealing information or performing other tasks that compromise a firm are known as _____ in security circles.

A team working on organizational security should include representatives from general counsel, audit, public relations, and human resources, in addition to those from specialized security and broader technology and infrastructure functions.

A security group's R&D function would be involved in:

Fingerprint readers, retina scanners, voice and face recognition technologies are all part of _____.

Spear phishing attacks specifically target a given organization or group of users.

Hackers might infiltrate computer systems to enlist hardware for subsequent illegal acts.

Briefly explain the threat posed by botnets.

What type of tool enforces access privileges and helps verify that systems are not being accessed by the unauthorized, or in suspicious ways?

What security risk could be posed by a botnet large enough to hold a few million zombie computers?

A research scientist with a major pharmaceutical firm in New Jersey is caught passing on sensitive information, worth millions of dollars, regarding the composition and test results of his firm's latest drug to a rival company. What crime is he being held responsible for?

_____ refers to a term that either means breaking into a computer system or a particularly clever solution.

Web sites of reputed companies can also be sources of malware.

According to research firm Gartner, the majority of loss-causing security incidents involve the handiwork of international cyber-criminal gangs.

Information security policies would be ineffective without _____ and _____.

Worms require an executable (a running program) to spread, attaching to other executables.

Which of the following actions should users take to protect themselves from security attacks?