Question 1

Name and describe four firewall screening technologies.

Accepted Answer

There are a number of firewall screening

Question 2

A salesperson clicks repeatedly on the online ads of a competitor in order to drive the competitor's advertising costs up. This is an example of:

Accepted Answer

A)  phishing. 
B)  pharming. 
C)  spoofing. 
D)  evil twins. 
E)  click fraud. 
A)  phishing. 
B)  pharming. 
C)  spoofing. 
D)  evil twins. 
E)  click fraud.

Question 3

A firewall allows the organization to:

Accepted Answer

A)  enforce a security policy on data exchanged between its network and the Internet. 
B)  check the accuracy of all transactions between its network and the Internet. 
C)  create an enterprise system on the Internet. 
D)  check the content of all incoming and outgoing email messages. 
E)  create access rules for a network. 
A)  enforce a security policy on data exchanged between its network and the Internet. 
B)  check the accuracy of all transactions between its network and the Internet. 
C)  create an enterprise system on the Internet. 
D)  check the content of all incoming and outgoing email messages. 
E)  create access rules for a network.

Question 4

In public key encryption the keys are mathematically related so that data encrypted with one key can be decrypted using only the other key.

Accepted Answer

A) True 
 B)False

Question 5

A computer virus replicates more quickly than a computer worm.

Accepted Answer

A) True 
 B)False

Question 6

Explain how an SQL injection attack works and what types of systems are vulnerable to this type of attack.

Accepted Answer

SQL injection attacks take advantage of

Question 7

The term cracker is used to identify a hacker with criminal or malicious intent.

Accepted Answer

A) True 
 B)False

Question 8

Which of the following refers to all of the methods, policies, and organizational procedures that ensure the safety of the organization's assets, the accuracy and reliability of its accounting records, and operational adherence to management standards?

Accepted Answer

A)  Legacy systems 
B)  SSID standards 
C)  Vulnerabilities 
D)  Security policy 
E)  Controls 
A)  Legacy systems 
B)  SSID standards 
C)  Vulnerabilities 
D)  Security policy 
E)  Controls

Question 9

A firewall is a combination of hardware and software that controls the flow of incoming and outgoing network traffic.

Accepted Answer

A) True 
 B)False

Question 10

A computer worm is a program that can copy itself to other computers on the network.

Accepted Answer

A) True 
 B)False

Question 11

Currently, the protocols used for secure information transfer over the Internet are:

Accepted Answer

A)  TCP/IP and SSL. 
B)  S-HTTP and CA. 
C)  HTTP and TCP/IP. 
D)  S-HTTP and SHTML. 
E)  SSL, TLS, and S-HTTP. 
A)  TCP/IP and SSL. 
B)  S-HTTP and CA. 
C)  HTTP and TCP/IP. 
D)  S-HTTP and SHTML. 
E)  SSL, TLS, and S-HTTP.

Question 12

Authentication refers to verifying that a person is who he or she claims to be.

Accepted Answer

A) True 
 B)False

Question 13

A digital certificate system:

Accepted Answer

A)  uses third party CAs to validate a user's identity. 
B)  uses digital signatures to validate a user's identity. 
C)  uses tokens to validate a user's identity. 
D)  is used primarily by individuals for personal correspondence. 
E)  protects a user's identity by substituting a certificate in place of identifiable traits. 
A)  uses third party CAs to validate a user's identity. 
B)  uses digital signatures to validate a user's identity. 
C)  uses tokens to validate a user's identity. 
D)  is used primarily by individuals for personal correspondence. 
E)  protects a user's identity by substituting a certificate in place of identifiable traits.

Question 14

Which of the following specifically makes malware distribution and hacker attacks to disable websites a federal crime?

Accepted Answer

A)  Computer Fraud and Abuse Act 
B)  Economic Espionage Act 
C)  Electronic Communications Privacy Act 
D)  Data Security and Breach Notification Act 
E)  National Information Infrastructure Protection Act 
A)  Computer Fraud and Abuse Act 
B)  Economic Espionage Act 
C)  Electronic Communications Privacy Act 
D)  Data Security and Breach Notification Act 
E)  National Information Infrastructure Protection Act

Question 15

Application proxy filtering examines the application content of packets.

Accepted Answer

A) True 
 B)False

Question 16

Which of the following is not an example of a computer used as a target of crime?

Accepted Answer

A)  Knowingly accessing a protected computer to commit fraud 
B)  Accessing a computer system without authority 
C)  Illegally accessing stored electronic communication 
D)  Threatening to cause damage to a protected computer 
E)  Breaching the confidentiality of protected computerized data 
A)  Knowingly accessing a protected computer to commit fraud 
B)  Accessing a computer system without authority 
C)  Illegally accessing stored electronic communication 
D)  Threatening to cause damage to a protected computer 
E)  Breaching the confidentiality of protected computerized data

Question 17

The HIPAA Act of 1996:

Accepted Answer

A)  requires financial institutions to ensure the security of customer data. 
B)  specifies best practices in information systems security and control. 
C)  imposes responsibility on companies and management to safeguard the accuracy of financial information. 
D)  outlines medical security and privacy rules. 
E)  identifies computer abuse as a crime and defines abusive activities. 
A)  requires financial institutions to ensure the security of customer data. 
B)  specifies best practices in information systems security and control. 
C)  imposes responsibility on companies and management to safeguard the accuracy of financial information. 
D)  outlines medical security and privacy rules. 
E)  identifies computer abuse as a crime and defines abusive activities.

Question 18

Which of the following refers to eavesdroppers driving by buildings or parking outside and trying to intercept wireless network traffic?

Accepted Answer

A)  War driving 
B)  Sniffing 
C)  Cybervandalism 
D)  Drive-by tapping 
E)  Snooping 
A)  War driving 
B)  Sniffing 
C)  Cybervandalism 
D)  Drive-by tapping 
E)  Snooping

Question 19

All of the following are specific security challenges that threaten corporate systems in a client/server environment except:

Accepted Answer

A)  theft of data. 
B)  copying of data. 
C)  alteration of data. 
D)  radiation. 
E)  hardware failure. 
A)  theft of data. 
B)  copying of data. 
C)  alteration of data. 
D)  radiation. 
E)  hardware failure.

Question 20

All of the following are specific security challenges that threaten corporate servers in a client/server environment except:

Accepted Answer

A)  hacking. 
B)  malware. 
C)  denial-of-service attacks. 
D)  sniffing. 
E)  vandalism. 
A)  hacking. 
B)  malware. 
C)  denial-of-service attacks. 
D)  sniffing. 
E)  vandalism.

Name and describe four firewall screening technologies.

A salesperson clicks repeatedly on the online ads of a competitor in order to drive the competitor's advertising costs up. This is an example of:

A firewall allows the organization to:

In public key encryption the keys are mathematically related so that data encrypted with one key can be decrypted using only the other key.

A computer virus replicates more quickly than a computer worm.

Explain how an SQL injection attack works and what types of systems are vulnerable to this type of attack.

The term cracker is used to identify a hacker with criminal or malicious intent.

Which of the following refers to all of the methods, policies, and organizational procedures that ensure the safety of the organization's assets, the accuracy and reliability of its accounting records, and operational adherence to management standards?

A firewall is a combination of hardware and software that controls the flow of incoming and outgoing network traffic.

A computer worm is a program that can copy itself to other computers on the network.

Currently, the protocols used for secure information transfer over the Internet are:

Authentication refers to verifying that a person is who he or she claims to be.

A digital certificate system:

Which of the following specifically makes malware distribution and hacker attacks to disable websites a federal crime?

Application proxy filtering examines the application content of packets.

Which of the following is not an example of a computer used as a target of crime?

The HIPAA Act of 1996:

Which of the following refers to eavesdroppers driving by buildings or parking outside and trying to intercept wireless network traffic?

All of the following are specific security challenges that threaten corporate systems in a client/server environment except:

All of the following are specific security challenges that threaten corporate servers in a client/server environment except:

Business Information Systems in Your Career

Global E-Business and Collaboration

Achieving Competitive Advantage With Information Systems

Ethical and Social Issues in Information Systems

It Infrastructure: Hardware and Software

Foundations of Business Intelligence: Databases and Information Management

Telecommunications, the Internet, and Wireless Technology

Achieving Operational Excellence and Customer Intimacy: Enterprise Applications

E-Commerce: Digital Markets, Digital Goods

Improving Decision Making and Managing Knowledge

Building Information Systems and Managing Projects

Filters

Exam 8: Securing Information Systems

Name and describe four firewall screening technologies.

A salesperson clicks repeatedly on the online ads of a competitor in order to drive the competitor's advertising costs up. This is an example of:

A firewall allows the organization to:

In public key encryption the keys are mathematically related so that data encrypted with one key can be decrypted using only the other key.

A computer virus replicates more quickly than a computer worm.

Explain how an SQL injection attack works and what types of systems are vulnerable to this type of attack.

The term cracker is used to identify a hacker with criminal or malicious intent.

Which of the following refers to all of the methods, policies, and organizational procedures that ensure the safety of the organization's assets, the accuracy and reliability of its accounting records, and operational adherence to management standards?

A firewall is a combination of hardware and software that controls the flow of incoming and outgoing network traffic.

A computer worm is a program that can copy itself to other computers on the network.

Currently, the protocols used for secure information transfer over the Internet are:

Authentication refers to verifying that a person is who he or she claims to be.

A digital certificate system:

Which of the following specifically makes malware distribution and hacker attacks to disable websites a federal crime?

Application proxy filtering examines the application content of packets.

Which of the following is not an example of a computer used as a target of crime?

The HIPAA Act of 1996:

Which of the following refers to eavesdroppers driving by buildings or parking outside and trying to intercept wireless network traffic?

All of the following are specific security challenges that threaten corporate systems in a client/server environment except:

All of the following are specific security challenges that threaten corporate servers in a client/server environment except:

Business Information Systems in Your Career

Global E-Business and Collaboration

Achieving Competitive Advantage With Information Systems

Ethical and Social Issues in Information Systems

It Infrastructure: Hardware and Software

Foundations of Business Intelligence: Databases and Information Management

Telecommunications, the Internet, and Wireless Technology

Achieving Operational Excellence and Customer Intimacy: Enterprise Applications

E-Commerce: Digital Markets, Digital Goods

Improving Decision Making and Managing Knowledge

Building Information Systems and Managing Projects

Filters