Exam 3: Computer and Internet Crime

Employees and contract workers must be educated about the importance of security so that they will be motivated to understand and follow the security policies.

The is a partnership between the Department of Homeland Security and the public and private sectors, established in 2003 to protect the nation's Internet infrastructure against cyberattacks.

State the purpose of an IT security audit and briefly discuss the key elements of such an audit.

pledged to deliver on a trustworthy computing initiative and defined four pillars of trustworthy computing.

In a security incident, the primary goal must be to regain control and limit damage, and not to attempt to monitor or catch an intruder.

The Act went into effect in 2004 and states that it is legal to spam, provided the messages meet a few basic requirements.

A completed risk assessment identifies the most dangerous threats to a company and helps focus security efforts on the areas of highest payoff.

Trojan horse has become an umbrella term for many types of malicious code.

Spammers can defeat the registration process of free email services by launching a coordinated attack that can sign up for thousands of untraceable email accounts.

differ from viruses in that they propagate without human intervention, sending copies of themselves to other computers by email.

The encourages private industry to share confidential information about the nation's critical infrastructure with the Department of Homeland Security under the assurance that the information will be protected from public disclosure.

Computer viruses differ from worms in that viruses can propagate without human intervention, often sending copies of themselves to other computers by email.

Computer forensics is such a new field that there is little training or certification processes available to practioners.

The protects against unreasonable search and seizure.

Fraud by malicious insiders often involves some form of collusion, or cooperation, between an employee and an outsider.

Using text messaging (SMS) fraudulently to try to get the recipient to reveal personal data is called .

The Act addresses the disclosure of stored wired and electronic communications and transaction records by Internet service providers.

Whenever possible, automated system rules should mirror an organization's written policies.

A large group of computers controlled from one or more remote locations by hackers without the knowledge or consent of their owners is called a(n) .

The fundamental problem with trying to detect a rootkit is that the operating system cannot be trusted to provide _____.