Question 1

Describe public key encryption.

Accepted Answer

The answer of Describe public key encryption....

Question 2

A _____ is a document that grants the holder exclusive rights on an invention for 20 years.

Accepted Answer

A)  copyright 
B)  patent 
C)  trade secret 
D)  knowledge base 
E)  private property notice 
A)  copyright 
B)  patent 
C)  trade secret 
D)  knowledge base 
E)  private property notice

Question 3

Compare trade secrets, patents, and copyrights as forms of intellectual property.

Accepted Answer

The answer of Compare trade secrets, patents, and copyrights as...

Question 4

The computing skills necessary to be a hacker are decreasing.

Accepted Answer

A) True 
 B)False

Question 5

Passwords and passphrases are examples of:

Accepted Answer

A)  something the user is. 
B)  something the user wants. 
C)  something the user has. 
D)  something the user knows. 
E)  something the user does. 
A)  something the user is. 
B)  something the user wants. 
C)  something the user has. 
D)  something the user knows. 
E)  something the user does.

Question 6

You start a dog-walking service, and you store your client's records on your cell phone. You don't need to worry about information security.

Accepted Answer

A) True 
 B)False

Question 7

A password refers to "something the user is."

Accepted Answer

A) True 
 B)False

Question 8

Refer to IT's About Business 4.2 - Virus Attack Hits the University of Exeter. Which of the following statements about the virus attack is true?

Accepted Answer

A)  The attack was confined to the Exeter campus. 
B)  Telephone service was not disrupted. 
C)  It took three days to clean infected computers and bring the network back into operation. 
D)  Only the PCs owned by the University had to be scanned. 
E)  The attack did not affect the professors' ability to run their classes. 
A)  The attack was confined to the Exeter campus. 
B)  Telephone service was not disrupted. 
C)  It took three days to clean infected computers and bring the network back into operation. 
D)  Only the PCs owned by the University had to be scanned. 
E)  The attack did not affect the professors' ability to run their classes.

Question 9

In a process called _____, a company allows nothing to run unless it is approved, whereas in a process called _____, the company allows everything to run unless it is not approved.

Accepted Answer

A)  whitelisting, blacklisting 
B)  whitelisting, encryption 
C)  encryption, whitelisting 
D)  encryption, blacklisting 
E)  blacklisting, whitelisting 
A)  whitelisting, blacklisting 
B)  whitelisting, encryption 
C)  encryption, whitelisting 
D)  encryption, blacklisting 
E)  blacklisting, whitelisting

Question 10

Your company's headquarters was just hit head on by a hurricane, and the building has lost power. The company sends you to their hot site to minimize downtime from the disaster. Which of the following statements is true?

Accepted Answer

A)  The site will not have any servers. 
B)  The site will not have any workstations, so you need to bring your laptop. 
C)  The site is probably in the next town. 
D)  The site should be an almost exact replica of the IT configuration at headquarters. 
E)  The site will not have up-to-date data. 
A)  The site will not have any servers. 
B)  The site will not have any workstations, so you need to bring your laptop. 
C)  The site is probably in the next town. 
D)  The site should be an almost exact replica of the IT configuration at headquarters. 
E)  The site will not have up-to-date data.

Question 11

_____ is the process in which an organization assesses the value of each asset being protected, estimates the probability that it will be compromised, and compares the probable costs of an attack with the costs of protecting the asset.

Accepted Answer

A)  Risk management 
B)  Risk analysis 
C)  Risk mitigation 
D)  Risk acceptance 
E)  Risk transference 
A)  Risk management 
B)  Risk analysis 
C)  Risk mitigation 
D)  Risk acceptance 
E)  Risk transference

Question 12

Contrast unintentional and deliberate threats to an information resource. Provide examples of both.

Accepted Answer

The answer of Contrast unintentional and deliberate threats to an...

Question 13

Employees in which functional areas of the organization pose particularly grave threats to information security?

Accepted Answer

A)  human resources, finance 
B)  human resources, management information systems 
C)  finance, marketing 
D)  operations management, management information systems 
E)  finance, management information systems 
A)  human resources, finance 
B)  human resources, management information systems 
C)  finance, marketing 
D)  operations management, management information systems 
E)  finance, management information systems

Question 14

In _____, the organization purchases insurance as a means to compensate for any loss.

Accepted Answer

A)  risk management 
B)  risk analysis 
C)  risk mitigation 
D)  risk acceptance 
E)  risk transference 
A)  risk management 
B)  risk analysis 
C)  risk mitigation 
D)  risk acceptance 
E)  risk transference

Question 15

Bob is using public key encryption to send a message to Ted. Bob encrypts the message with Ted's _____ key, and Ted decrypts the message using his _____ key.

Accepted Answer

A)  public, public 
B)  public, private 
C)  private, private 
D)  private, public 
E)  none of these 
A)  public, public 
B)  public, private 
C)  private, private 
D)  private, public 
E)  none of these

Question 16

Compare a hot site, a warm site, and a cold site as strategies for business continuity.

Accepted Answer

The answer of Compare a hot site, a warm site,...

Question 17

Software can be copyrighted.

Accepted Answer

A) True 
 B)False

Question 18

Refer to Opening Case - Cybercriminals Use Social Networks for Targeted Attacks: Cybercriminals use Facebook for all of the following reasons except:

Accepted Answer

A)  It is easy to get into the Facebook code itself. 
B)  People trust messages from their Facebook friends. 
C)  Social networks aren't closely regulated in corporate network defense systems. 
D)  Many social network users aren't technology savvy and wouldn't realize their computer is under the control of outsiders. 
E)  There is a black market for Facebook usernames and passwords. 
A)  It is easy to get into the Facebook code itself. 
B)  People trust messages from their Facebook friends. 
C)  Social networks aren't closely regulated in corporate network defense systems. 
D)  Many social network users aren't technology savvy and wouldn't realize their computer is under the control of outsiders. 
E)  There is a black market for Facebook usernames and passwords.

Question 19

_____ controls are concerned with user identification, and they restrict unauthorized individuals from using information resources.

Accepted Answer

A)  Access 
B)  Physical 
C)  Data security 
D)  Administrative 
E)  Input 
A)  Access 
B)  Physical 
C)  Data security 
D)  Administrative 
E)  Input

Question 20

Cybercriminals can obtain the information they need in order to assume another person's identity by:

Accepted Answer

A)  Infiltrating an organization that stores large amounts of personal information. 
B)  Phishing. 
C)  Hacking into a corporate database. 
D)  Stealing mail. 
E)  All of the above are strategies to obtain information to assume another person's identity. 
A)  Infiltrating an organization that stores large amounts of personal information. 
B)  Phishing. 
C)  Hacking into a corporate database. 
D)  Stealing mail. 
E)  All of the above are strategies to obtain information to assume another person's identity.

Describe public key encryption.

A _____ is a document that grants the holder exclusive rights on an invention for 20 years.

Compare trade secrets, patents, and copyrights as forms of intellectual property.

The computing skills necessary to be a hacker are decreasing.

Passwords and passphrases are examples of:

You start a dog-walking service, and you store your client's records on your cell phone. You don't need to worry about information security.

A password refers to "something the user is."

Refer to IT's About Business 4.2 - Virus Attack Hits the University of Exeter. Which of the following statements about the virus attack is true?

In a process called _, a company allows nothing to run unless it is approved, whereas in a process called _, the company allows everything to run unless it is not approved.

Your company's headquarters was just hit head on by a hurricane, and the building has lost power. The company sends you to their hot site to minimize downtime from the disaster. Which of the following statements is true?

_____ is the process in which an organization assesses the value of each asset being protected, estimates the probability that it will be compromised, and compares the probable costs of an attack with the costs of protecting the asset.

Contrast unintentional and deliberate threats to an information resource. Provide examples of both.

Employees in which functional areas of the organization pose particularly grave threats to information security?

In _____, the organization purchases insurance as a means to compensate for any loss.

Bob is using public key encryption to send a message to Ted. Bob encrypts the message with Ted's _ key, and Ted decrypts the message using his _ key.

Compare a hot site, a warm site, and a cold site as strategies for business continuity.

Software can be copyrighted.

Refer to Opening Case - Cybercriminals Use Social Networks for Targeted Attacks: Cybercriminals use Facebook for all of the following reasons except:

_____ controls are concerned with user identification, and they restrict unauthorized individuals from using information resources.

Cybercriminals can obtain the information they need in order to assume another person's identity by:

Introduction to Information Systems

Organizational Strategy, Competitive Advantage, and Information Systems

Ethics and Privacy

Data and Knowledge Management

Telecommunications and Networking

E-Business and E-Commerce

Wireless, Mobile Computing, and Mobile Commerce

Social Computing

Information Systems Within the Organization

Customer Relationship Management and Supply Chain Management

Business Intelligence

Acquiring Information Systems and Applications

Technology Guide 1 Hardware

Technology Guide 2 Software

Technology Guide 3 Cloud Computing

Technology Guide 4 Intelligent Systems

Technology Guide 5 Protecting Your Information Assets

Filters

Exam 4: Information Security and Controls

Describe public key encryption.

A _____ is a document that grants the holder exclusive rights on an invention for 20 years.

Compare trade secrets, patents, and copyrights as forms of intellectual property.

The computing skills necessary to be a hacker are decreasing.

Passwords and passphrases are examples of:

You start a dog-walking service, and you store your client's records on your cell phone. You don't need to worry about information security.

A password refers to "something the user is."

Refer to IT's About Business 4.2 - Virus Attack Hits the University of Exeter. Which of the following statements about the virus attack is true?

In a process called _____, a company allows nothing to run unless it is approved, whereas in a process called _____, the company allows everything to run unless it is not approved.

Your company's headquarters was just hit head on by a hurricane, and the building has lost power. The company sends you to their hot site to minimize downtime from the disaster. Which of the following statements is true?

_____ is the process in which an organization assesses the value of each asset being protected, estimates the probability that it will be compromised, and compares the probable costs of an attack with the costs of protecting the asset.

Contrast unintentional and deliberate threats to an information resource. Provide examples of both.

Employees in which functional areas of the organization pose particularly grave threats to information security?

In _____, the organization purchases insurance as a means to compensate for any loss.

Bob is using public key encryption to send a message to Ted. Bob encrypts the message with Ted's _____ key, and Ted decrypts the message using his _____ key.

Compare a hot site, a warm site, and a cold site as strategies for business continuity.

Software can be copyrighted.

Refer to Opening Case - Cybercriminals Use Social Networks for Targeted Attacks: Cybercriminals use Facebook for all of the following reasons except:

_____ controls are concerned with user identification, and they restrict unauthorized individuals from using information resources.

Cybercriminals can obtain the information they need in order to assume another person's identity by:

Introduction to Information Systems

Organizational Strategy, Competitive Advantage, and Information Systems

Ethics and Privacy

Data and Knowledge Management

Telecommunications and Networking

E-Business and E-Commerce

Wireless, Mobile Computing, and Mobile Commerce

Social Computing

Information Systems Within the Organization

Customer Relationship Management and Supply Chain Management

Business Intelligence

Acquiring Information Systems and Applications

Technology Guide 1 Hardware

Technology Guide 2 Software

Technology Guide 3 Cloud Computing

Technology Guide 4 Intelligent Systems

Technology Guide 5 Protecting Your Information Assets

Filters

In a process called _, a company allows nothing to run unless it is approved, whereas in a process called _, the company allows everything to run unless it is not approved.

Bob is using public key encryption to send a message to Ted. Bob encrypts the message with Ted's _ key, and Ted decrypts the message using his _ key.