Exam 14: Information Security: Barbarians at the Gateway and Just About Everywhere Else

Some of the most common guidelines issued by Web sites when designing a secure password include:

Offering financial or valuable incentives to gain information, access, or favors is a proven method used by social engineering experts.

What are the steps to be taken by an employee to ensure organizational security?

A system that monitors network use for potential hacking attempts and takes preventative action to block, isolate, or identify attempted infiltration, and raise further alarms to warn security personnel is known as a(n):

Which of the following is a valid statement on information security?

Which of the followings aspects of international law would enable a cyber-criminal operating across borders to evade prosecution?

Computer systems are often infected with malware by means of exploits that sneak in masquerading as something they are not. These exploits are called:

Multiple administrators jointly controlling key systems are an unnecessary burden that adds to the complexity of managing security in an organization.

_____ are systems that act as controls for network traffic, blocking unauthorized traffic while permitting acceptable use.

The ISO 27000 series of evolving standards represent the set of best practices for developing and improving organizational security.

A(n) _____ is someone who uncovers computer weaknesses without exploiting them.

The term _____ originally referred to a particularly skilled programmer.

What are some of the key lessons to be learned from the TJX security breach?

Implementation of information security in an organization should essentially start with:

Which of the following types of infiltration techniques does one open up to by posting sensitive personal information and details about one's workplace on social networking sites?

You have received an e-mail that looks suspiciously close to a phishing mail. What is the best course of action to be followed?

Which of the following statements holds true for the term encryption?

Lobbying for legislation that imposes severe penalties on crooks can help lower adversary costs.

_____, probably the most notorious known act of cyberwarfare effort to date (one expert called it "the most sophisticated worm ever created"), is suspected to have been launched by either U.S. or Israeli intelligence (or both), and it infiltrated Iranian nuclear facilities and reprogrammed the industrial control software operating hundreds of uranium-enriching centrifuges.

Attacks that exhaust all possible password combinations in order to break into an account are called _____ attacks.