Exam 10: Securing Information Systems

________ is the stealing of another person's Social Security number,credit card number,and other personal information for the purpose of using the victim's credit rating to borrow money,buy merchandise,and otherwise run up debts that are never repaid.

Which of the following US laws amended the Computer Fraud and Abuse Act to allow investigators access to voice-related communications?

Explain the concept of disaster planning in organizations.

Compare and contrast computer viruses and a Trojan horse.

Some violations of state and federal computer crime laws are punishable by fines and by not more than one year in prison.Such violations are charged as ________.

An organization builds a fully equipped backup facility,having everything from office chairs to a one-to-one replication of the most current data.This facility is called a ________.

Identify the policy that lists procedures for adding new users to systems and removing users who have left the organization.

While Shelly downloaded an arcade game from an unknown Internet Web site,an unauthorized connection unknown to Shelly had been established with her computer.The arcade game is most likely to be ________.

Computer criminals who attempt to break into systems or deface Web sites to promote political or ideological goals are called ________.

Those individuals who are knowledgeable enough to gain access to computer systems without authorization have long been referred to as ________.

List the six commonly used methods in which technology is employed to safeguard information systems.

An Internet hoax is a false message circulated online about new viruses.

Which of the following laws makes it mandatory for organizations to demonstrate that there are controls in place to prevent misuse or fraud,controls to detect any potential problems,and effective measures to correct any problems?

Today,people who break into computer systems with the intention of doing damage or committing a crime are usually called ________.

________ broadly refers to the use of a computer to communicate obscene,vulgar,or threatening content that causes a reasonable person to endure distress.

An organization does not implement countermeasures against information threats; instead it simply absorbs the damages that occur.This approach is called ________.

________ software is used to keep track of computer activity so that inspectors can spot suspicious activity and take action.

The ________ is a set of best practices that helps organizations both maximize the benefits from their IS infrastructure and establish appropriate controls.

Some data centers rent server space to multiple customers and provide necessary infrastructure in terms of power,backups,connectivity,and security.Such data centers are called ________.

In May 2001,an e-mail with "This is unbelievable!" in the subject field and an attached file spread to numerous computers in the world.Any user who downloaded the attached file complained of his or her systems slowing down and in some cases,files being erased.The attached file is most likely to be ________.