Question 1

When companies attempt to counter _____ by requiring users to accurately select characters in turn from a series of boxes, attackers respond by using _____.

Accepted Answer

A)  keyloggers, screen scrapers 
B)  screen scrapers, uninstallers 
C)  keyloggers, spam 
D)  screen scrapers, keyloggers 
E)  spam, keyloggers 
A)  keyloggers, screen scrapers 
B)  screen scrapers, uninstallers 
C)  keyloggers, spam 
D)  screen scrapers, keyloggers 
E)  spam, keyloggers A

Question 2

Organizations use authentication to establish privileges to systems operations.

Accepted Answer

A) True 
 B)False  True

Question 3

_____ are software programs that hide in other computer programs and reveal their designed behavior only when they are activated.

Accepted Answer

A)  Viruses 
B)  Worms 
C)  Trojan horses 
D)  Back doors 
E)  Logic bombs 
A)  Viruses 
B)  Worms 
C)  Trojan horses 
D)  Back doors 
E)  Logic bombs E

Question 4

The term _____ refers to clandestine software that is installed on your PC through duplicitous channels but is not particularly malicious.

Accepted Answer

A)  Alien software 
B)  Virus 
C)  Worm 
D)  Back door 
E)  Logic bomb 
A)  Alien software 
B)  Virus 
C)  Worm 
D)  Back door 
E)  Logic bomb

Question 5

Access controls involve _____ before _____.

Accepted Answer

A)  biometrics, signature recognition 
B)  authentication, authorization 
C)  iris scanning, voice recognition 
D)  strong passwords, biometrics 
E)  authorization, authentication 
A)  biometrics, signature recognition 
B)  authentication, authorization 
C)  iris scanning, voice recognition 
D)  strong passwords, biometrics 
E)  authorization, authentication

Question 6

The cost of a stolen laptop includes all of the following except:

Accepted Answer

A)  Loss of intellectual property 
B)  Loss of data 
C)  Backup costs 
D)  Loss of productivity 
E)  Replacement cost 
A)  Loss of intellectual property 
B)  Loss of data 
C)  Backup costs 
D)  Loss of productivity 
E)  Replacement cost

Question 7

Define identity theft, and explain the types of problems that it creates for the victims.

Accepted Answer

The answer of Define identity theft, and explain the types...

Question 8

IT security is the responsibility of everyone in the organization.

Accepted Answer

A) True 
 B)False

Question 9

Dumpster diving is:

Accepted Answer

A)  always illegal because it is considered trespassing. 
B)  never illegal because it is not considered trespassing. 
C)  typically committed for the purpose of identity theft. 
D)  always illegal because individuals own the material in the dumpster. 
E)  always legal because the dumpster is not owned by private citizens. 
A)  always illegal because it is considered trespassing. 
B)  never illegal because it is not considered trespassing. 
C)  typically committed for the purpose of identity theft. 
D)  always illegal because individuals own the material in the dumpster. 
E)  always legal because the dumpster is not owned by private citizens.

Question 10

A _____ is intellectual work that is known only to a company and is not based on public information.

Accepted Answer

A)  copyright 
B)  patent 
C)  trade secret 
D)  knowledge base 
E)  private property 
A)  copyright 
B)  patent 
C)  trade secret 
D)  knowledge base 
E)  private property

Question 11

Which of the following statements concerning the difficulties in protecting information resources is not correct?

Accepted Answer

A)  Computing resources are typically decentralized. 
B)  Computer crimes often remain undetected for a long period of time. 
C)  Rapid technological changes ensure that controls are effective for years. 
D)  Employees typically do not follow security procedures when the procedures are inconvenient. 
E)  Computer networks can be located outside the organization. 
A)  Computing resources are typically decentralized. 
B)  Computer crimes often remain undetected for a long period of time. 
C)  Rapid technological changes ensure that controls are effective for years. 
D)  Employees typically do not follow security procedures when the procedures are inconvenient. 
E)  Computer networks can be located outside the organization.

Question 12

You start a new job, and human resources gives you a ten-page document that outlines the employee responsibilities for information security. Which of the following statements is most likely to be true?

Accepted Answer

A)  The document recommends that login passwords be left on a piece of paper in the center desk drawer so that others can use the laptop if necessary. 
B)  You are expected to read the document, and you could be reprimanded if you don't follow its guidelines. 
C)  You can back up sensitive data to a thumb drive so you can take them home to work with. 
D)  The document indicates that you can leave your laptop unlocked if you leave your desk for less than an hour. 
E)  The document permits you to lend your laptop to your brother for the weekend. 
A)  The document recommends that login passwords be left on a piece of paper in the center desk drawer so that others can use the laptop if necessary. 
B)  You are expected to read the document, and you could be reprimanded if you don't follow its guidelines. 
C)  You can back up sensitive data to a thumb drive so you can take them home to work with. 
D)  The document indicates that you can leave your laptop unlocked if you leave your desk for less than an hour. 
E)  The document permits you to lend your laptop to your brother for the weekend.

Question 13

You start a new job, and the first thing your new company wants you to do is create a user ID and a password. Which of the following would be a strong password?

Accepted Answer

A)  The name of the company 
B)  Your last name 
C)  Your birthdate 
D)  Your initials (capitalized) and the number of the floor you are on 
E)  The name of the company spelled backward 
A)  The name of the company 
B)  Your last name 
C)  Your birthdate 
D)  Your initials (capitalized) and the number of the floor you are on 
E)  The name of the company spelled backward

Question 14

Human errors cause more than half of the security-related problems in many organizations.

Accepted Answer

The answer of Human errors cause more than half of...

Question 15

In a _____ attack, a coordinated stream of requests is launched against a target system from many compromised computers at the same time.

Accepted Answer

A)  phishing 
B)  zero-day 
C)  worm 
D)  back door 
E)  distributed denial-of-service 
A)  phishing 
B)  zero-day 
C)  worm 
D)  back door 
E)  distributed denial-of-service

Question 16

Identify and discuss the factors that are contributing to the increasing vulnerability of organizational information assets.

Accepted Answer

The answer of Identify and discuss the factors that are...

Question 17

The area located between two firewalls within an organization is called the demilitarized zone.

Accepted Answer

A) True 
 B)False

Question 18

Contrast risk acceptance, risk limitation, and risk transference.

Accepted Answer

The answer of Contrast risk acceptance, risk limitation, and risk...

Question 19

An organization's e-mail policy has the least impact on which of the following software attacks?

Accepted Answer

A)  virus 
B)  worm 
C)  phishing 
D)  spear phishing 
E)  zero-day 
A)  virus 
B)  worm 
C)  phishing 
D)  spear phishing 
E)  zero-day

Question 20

Risk analysis involves determining whether security programs are working.

Accepted Answer

A) True 
 B)False

When companies attempt to counter _ by requiring users to accurately select characters in turn from a series of boxes, attackers respond by using _.

Organizations use authentication to establish privileges to systems operations.

_____ are software programs that hide in other computer programs and reveal their designed behavior only when they are activated.

The term _____ refers to clandestine software that is installed on your PC through duplicitous channels but is not particularly malicious.

Access controls involve _ before _.

The cost of a stolen laptop includes all of the following except:

Define identity theft, and explain the types of problems that it creates for the victims.

IT security is the responsibility of everyone in the organization.

Dumpster diving is:

A _____ is intellectual work that is known only to a company and is not based on public information.

Which of the following statements concerning the difficulties in protecting information resources is not correct?

You start a new job, and human resources gives you a ten-page document that outlines the employee responsibilities for information security. Which of the following statements is most likely to be true?

You start a new job, and the first thing your new company wants you to do is create a user ID and a password. Which of the following would be a strong password?

Human errors cause more than half of the security-related problems in many organizations.

In a _____ attack, a coordinated stream of requests is launched against a target system from many compromised computers at the same time.

Identify and discuss the factors that are contributing to the increasing vulnerability of organizational information assets.

The area located between two firewalls within an organization is called the demilitarized zone.

Contrast risk acceptance, risk limitation, and risk transference.

An organization's e-mail policy has the least impact on which of the following software attacks?

Risk analysis involves determining whether security programs are working.

Introduction to Information Systems

Organizational Strategy, Competitive Advantage, and Information Systems

Ethics and Privacy

Data and Knowledge Management

Telecommunications and Networking

E-Business and E-Commerce

Wireless, Mobile Computing, and Mobile Commerce

Social Computing

Information Systems Within the Organization

Customer Relationship Management and Supply Chain Management

Business Intelligence

Acquiring Information Systems and Applications

Technology Guide 1 Hardware

Technology Guide 2 Software

Technology Guide 3 Cloud Computing

Technology Guide 4 Intelligent Systems

Technology Guide 5 Protecting Your Information Assets

Filters

Exam 4: Information Security and Controls

When companies attempt to counter _____ by requiring users to accurately select characters in turn from a series of boxes, attackers respond by using _____.

Organizations use authentication to establish privileges to systems operations.

_____ are software programs that hide in other computer programs and reveal their designed behavior only when they are activated.

The term _____ refers to clandestine software that is installed on your PC through duplicitous channels but is not particularly malicious.

Access controls involve _____ before _____.

The cost of a stolen laptop includes all of the following except:

Define identity theft, and explain the types of problems that it creates for the victims.

IT security is the responsibility of everyone in the organization.

Dumpster diving is:

A _____ is intellectual work that is known only to a company and is not based on public information.

Which of the following statements concerning the difficulties in protecting information resources is not correct?

You start a new job, and human resources gives you a ten-page document that outlines the employee responsibilities for information security. Which of the following statements is most likely to be true?

You start a new job, and the first thing your new company wants you to do is create a user ID and a password. Which of the following would be a strong password?

Human errors cause more than half of the security-related problems in many organizations.

In a _____ attack, a coordinated stream of requests is launched against a target system from many compromised computers at the same time.

Identify and discuss the factors that are contributing to the increasing vulnerability of organizational information assets.

The area located between two firewalls within an organization is called the demilitarized zone.

Contrast risk acceptance, risk limitation, and risk transference.

An organization's e-mail policy has the least impact on which of the following software attacks?

Risk analysis involves determining whether security programs are working.

Introduction to Information Systems

Organizational Strategy, Competitive Advantage, and Information Systems

Ethics and Privacy

Data and Knowledge Management

Telecommunications and Networking

E-Business and E-Commerce

Wireless, Mobile Computing, and Mobile Commerce

Social Computing

Information Systems Within the Organization

Customer Relationship Management and Supply Chain Management

Business Intelligence

Acquiring Information Systems and Applications

Technology Guide 1 Hardware

Technology Guide 2 Software

Technology Guide 3 Cloud Computing

Technology Guide 4 Intelligent Systems

Technology Guide 5 Protecting Your Information Assets

Filters

When companies attempt to counter _ by requiring users to accurately select characters in turn from a series of boxes, attackers respond by using _.

Access controls involve _ before _.