Exam 17: Information Security: Barbarians at the Gateway and Just About Everywhere Else

Spear phishing attacks specifically target a given organization or group of users.

One of the reasons organizations delay patches to plug holes in their security applications is:

_____________ refers to malware that encrypts a user's files (perhaps threatening to delete them), with demands that a user pay to regain control of their data and/or device.

Attacks that are so new that they have not been clearly identified, and so have not made it into security screening systems are called _____.

A protester seeking to make a political point by leveraging technology tools, often through system infiltration, defacement, or damage is called a(n) _____.

The e-mail password of a senior employee in an organization was compromised by someone observing this user as the employee accessed his account. This is most likely a case of:

Describe briefly how technology can be leveraged to offset the attempts of attackers to undermine information security.

_____ are scrambled character images used to thwart things like automated account setup or ticket buying.

A research scientist with a major pharmaceutical firm in New Jersey is caught passing on sensitive information, worth millions of dollars, regarding the composition and test results of his firm's latest drug to a rival company. What crime is he being held responsible for?

Hardware failure is the least likely of threats to one's data.

The phrase __________________ refers to security schemes that automatically send one-time use representations of a credit card that can be received and processed by banking and transaction firms at the time of payment. They are in use in ApplePay and Android Wallet.

An attack on the US power grid by terrorists or a foreign power is indicative of:

Cyber criminals who infiltrate systems and collect data for illegal resale are called _____.

Sifting through trash in an effort to uncover valuable data or insights that can be stolen or used to launch a security attack is known as:

Updates that plug existing holes in a software are called:

What are some of the key managerial takeaways from the Target security breach?

Which of these would be an example of a DDoS attack?

The term _____ originally referred to a particularly skilled programmer.

Describe some of the factors at work that enabled the Target security breach to occur.

Challenge questions offered by Web sites to automate password distribution and resets are formidable in protecting the privacy of email accounts.