Exam 17: Information Security: Barbarians at the Gateway and Just About Everywhere Else

Which of the following is a valid statement on information security?

Two-factor authentication is favored for most security situations since it's considered to be fast and conveient for customres.

What is the key takeaway from the Heartland breach?

Technologies that measure and analyze human body characteristics for identification or authentication are known as _____.

What are botnets and how are criminals using this technology?

The _____ technique zeros in on a sloppy programming practice where software developers don't validate user input.

_____, probably the most notorious known act of cyberwarfare effort to date (one expert called it "the most sophisticated worm ever created"), is suspected to have been launched by either U.S. or Israeli intelligence (or both), and it infiltrated Iranian nuclear facilities and reprogrammed the industrial control software operating hundreds of uranium-enriching centrifuges.

Fingerprint readers, retina scanners, voice and face recognition technologies are all part of _____.

Social networking sites such as Facebook and LinkedIn form valuable sources of vital information that can be used to craft a scam by con artists.

_____ are seemingly tempting, but bogus targets meant to draw hacking attempts.

Systems that deny the entry or exit of specific IP addresses, products, Internet domains, and other communication restrictions are said to employ a(n):

Viruses are programs that infect other software or files and require:

Dumpster diving refers to physically trawling through trash to mine any valuable data or insights that can be stolen or used in a security attack.

In security circles the phrase "compliance" refers to:

The topic of U.S. government surveilance continues to be hotly debated, with strong opinions in favor of surveilance programs, as well as vocal protestations of government overreach. Briefly give the argument for and against U.S. government surveilance practices.

Which of the following statements holds true for the term encryption?

_____ are systems that act as controls for network traffic, blocking unauthorized traffic while permitting acceptable use.

Hackers might infiltrate computer systems to enlist hardware for subsequent illegal acts.

Former CIA employee and NSA contractor, ____________ is seen by many as either a whistle-blowing hero or a traitorous villain. This person gathered sensitive digital documents from U.S., British, and Australian agencies, and leaked them to the press, exposing the extent of government surveillance efforts.

_____ refers to a trusted third party that provides authentication services in public key encryption schemes.