Exam 17: Information Security: Barbarians at the Gateway and Just About Everywhere Else

An attack on the US power grid by terrorists or a foreign power is indicative of:

Hordes of surreptitiously infiltrated computers, linked and controlled remotely, are known as zombie networks or:

The use of public wireless connections can increase a user's vulnerability to monitoring and compromise. ____________ software can be used to encrypt transmissions over public networks, making it more difficult for a user's PC to be penetrated.

Public wireless networks are often vulnerable to monitoring and attack. The use of _______ software can limit threats by encrypting network transmissions over a network.

Many U.S. technology firms believe that U.S. government surveillance techniques put them at a disadvantage relative to foreign firms because:

_____ can be either software-based or deployed via hardware, such as a recording "dongle" that is plugged in between a keyboard and a PC.

Cyber criminals who infiltrate systems and collect data for illegal resale are called _____.

Information security policies would be ineffective without _____ and _____.

Computer systems are often infected with malware by means of exploits that sneak in masquerading as something they are not. These exploits are called:

Several surprising findings were revealed in the wake of the Target breach, providing a cautionary tale for all executives and security professionals. Which of the following was not thought to have occurred during the Target security breach?

Online backup services are considered a poor choice for end-users, since this only increases the liklihood that an individual's data will be hacked.

A team working on organizational security should include representatives from general counsel, audit, public relations, and human resources, in addition to those from specialized security and broader technology and infrastructure functions.

_____ refers to a trusted third party that provides authentication services in public key encryption schemes.

What are some of the key managerial takeaways from the Target security breach?

Updates that plug existing holes in a software are called:

URL-shortening services such as bit.ly limit the impact of phishing posts since the shortened URL will clearly reveal the destination arrived at when clicked on.

_____ are systems that act as controls for network traffic, blocking unauthorized traffic while permitting acceptable use.

Dumpster diving refers to physically trawling through trash to mine any valuable data or insights that can be stolen or used in a security attack.

The _____ technique zeros in on a sloppy programming practice where software developers don't validate user input.

The virtual shutdown of websites by way of overloading them with seemingly legitimate requests sent simultaneously from thousands of machines is termed as _____ attacks.