Exam 10: Securing Information Systems

Cyber criminals gain information on a victim by monitoring online activities,accessing databases,and so on and make false accusations that damage the reputation of the victim on blogs,Web sites,chat rooms,or e-commerce sites.Such acts are called ________.

________ is the use of computer and networking technologies,by individuals and organized groups,against persons or property to intimidate or coerce governments,civilians,or any segment of society in order to attain political,religious,or ideological goals.

Cyberwar refers to an organized attempt by a country's military to disrupt or destroy the information and communication systems of another country.

Ciscon Telecom is a mobile operator in the European Union.The company provides personalized services to its customers and its databases contain valuable information about its customers.The loss of customer information which is used to decide services would be extremely harmful to the organization.Which of the following strategies used by Ciscon is an example of risk transference?

A hot backup site is an empty warehouse with all necessary connections for power and communication.

Detective controls are used to prevent any potentially negative event from occurring,such as preventing outside intruders from accessing a facility.

Patents generally refer to creations of the mind such as music,literature,or software.

________ refers to an organized attempt by a country's military to disrupt or destroy the information and communication systems of another country.

Briefly explain cyberwar and cyberterrorism.

Briefly describe the concept of virtual private networks.

Explain various types of information systems controls.

A(n)________ typically consists of a distorted image displaying a combination of letters and/or numbers that a user has to input into a form before submitting it.

Controls that are used to assess whether anything went wrong,such as unauthorized access attempts,are called ________ controls.

Employees steal time on company computers to do personal business.This can be considered as an example of ________.

Which of the following is a part of a computer system designed to detect intrusion and prevent unauthorized access to or from a private network?

COBIT is a set of best practices that helps organizations maximize the benefits from their IS infrastructure and establish appropriate controls.

Which of the following is one of the main federal laws in the United States against computer crimes?

Which of the following terms represents junk newsgroup postings used for the purpose of advertising for some product or service?

What is computer crime? Explain your answer.

Insuring all the systems and information processing processes is an essential part of risk acceptance strategy.