Question 1

In most cases, cookies track your path through Web sites and are therefore invasions of your privacy.

Accepted Answer

A) True 
 B)False

Question 2

Rank the following in terms of dollar value of the crime, from highest to lowest.

Accepted Answer

A)  robbery - white collar crime - cybercrime 
B)  white collar crime - extortion - robbery 
C)  cybercrime - white collar crime - robbery 
D)  cybercrime - robbery - white collar crime 
E)  white collar crime - burglary - robbery 
A)  robbery - white collar crime - cybercrime 
B)  white collar crime - extortion - robbery 
C)  cybercrime - white collar crime - robbery 
D)  cybercrime - robbery - white collar crime 
E)  white collar crime - burglary - robbery

Question 3

Define the principle of least privilege, and consider how an organization's senior executives might view the application of this principle.

Accepted Answer

The answer of Define the principle of least privilege, and...

Question 4

Which of the following factors is not increasing the threats to information security?

Accepted Answer

A)  smaller computing devices 
B)  downstream liability 
C)  the Internet 
D)  limited storage capacity on portable devices 
E)  due diligence 
A)  smaller computing devices 
B)  downstream liability 
C)  the Internet 
D)  limited storage capacity on portable devices 
E)  due diligence

Question 5

Public-key encryption uses two different keys, one public and one private.

Accepted Answer

A) True 
 B)False

Question 6

Cyberterrorism and cyberwarfare can attack supervisory control and data acquisition (SCADA) systems to cause widespread physical damage.

Accepted Answer

A) True 
 B)False

Question 7

Supervisory control and data acquisition (SCADA) systems require human data input.

Accepted Answer

A) True 
 B)False

Question 8

_____ are segments of computer code embedded within an organization's existing computer programs that activate and perform a destructive action at a certain time or date.

Accepted Answer

A)  Viruses 
B)  Worms 
C)  Trojan horses 
D)  Back doors 
E)  Logic bombs 
A)  Viruses 
B)  Worms 
C)  Trojan horses 
D)  Back doors 
E)  Logic bombs

Question 9

You receive an e-mail from your bank informing you that they are updating their records and need your password. Which of the following statements is true?

Accepted Answer

A)  The message could be an industrial espionage attack. 
B)  The message could be a phishing attack. 
C)  The message could be a denial of service attack. 
D)  The message could be a back door attack. 
E)  The message could be a Trojan horse attack. 
A)  The message could be an industrial espionage attack. 
B)  The message could be a phishing attack. 
C)  The message could be a denial of service attack. 
D)  The message could be a back door attack. 
E)  The message could be a Trojan horse attack.

Question 10

Tim ventured out into the world of retail by renting a cart at a local mall. His product is personalized coffee mugs. He uses his laptop to track sales and to process credit card sales. He has a customer mailing list that is updated by customers on the laptop as well. At the end of each day, Tim backs up all of his data to a thumb drive and puts the drive into the laptop case with the laptop. Discuss Tim's information security strategy.

Accepted Answer

The answer of Tim ventured out into the world of...

Question 11

Having one backup of your business data is sufficient for security purposes.

Accepted Answer

A) True 
 B)False

Question 12

Zero-day attacks use deceptive e-mails to acquire sensitive personal information.

Accepted Answer

A) True 
 B)False

Question 13

A URL that begins with https rather than http indicates that the site transmits using an extra layer of security called transport layer security.

Accepted Answer

A) True 
 B)False

Question 14

The computing skills necessary to be a hacker are decreasing for which of the following reasons?

Accepted Answer

A)  More information systems and computer science departments are teaching courses on hacking so that their graduates can recognize attacks on information assets. 
B)  Computer attack programs, called scripts, are available for download from the Internet. 
C)  International organized crime is training hackers. 
D)  Cybercrime is much more lucrative than regular white-collar crime. 
E)  Almost anyone can buy or access a computer today. 
A)  More information systems and computer science departments are teaching courses on hacking so that their graduates can recognize attacks on information assets. 
B)  Computer attack programs, called scripts, are available for download from the Internet. 
C)  International organized crime is training hackers. 
D)  Cybercrime is much more lucrative than regular white-collar crime. 
E)  Almost anyone can buy or access a computer today.

Question 15

Which of the following statements concerning firewalls is not true?

Accepted Answer

A)  Firewalls prevent unauthorized Internet users from accessing private networks. 
B)  Firewalls examine every message that enters or leaves an organization's network. 
C)  Firewalls filter network traffic according to categories of activities that are likely to cause problems. 
D)  Firewalls filter messages the same way as anti-malware systems do. 
E)  Firewalls are sometimes located inside an organization's private network. 
A)  Firewalls prevent unauthorized Internet users from accessing private networks. 
B)  Firewalls examine every message that enters or leaves an organization's network. 
C)  Firewalls filter network traffic according to categories of activities that are likely to cause problems. 
D)  Firewalls filter messages the same way as anti-malware systems do. 
E)  Firewalls are sometimes located inside an organization's private network.

Question 16

Voice and signature recognition are examples of:

Accepted Answer

A)  something the user is. 
B)  something the user wants. 
C)  something the user has. 
D)  something the user knows. 
E)  something the user does. 
A)  something the user is. 
B)  something the user wants. 
C)  something the user has. 
D)  something the user knows. 
E)  something the user does.

Question 17

Contrast the four types of authentication.

Accepted Answer

The answer of Contrast the four types of authentication....

Question 18

Cyberterrorism is usually carried out by nations.

Accepted Answer

A) True 
 B)False

Question 19

Which of the following is(are) designed to use your computer as a launch pad for sending unsolicited e-mail to other computers?

Accepted Answer

A)  Spyware 
B)  Spamware 
C)  Adware 
D)  Viruses 
E)  Worms 
A)  Spyware 
B)  Spamware 
C)  Adware 
D)  Viruses 
E)  Worms

Question 20

Which of the following is not a consequence of poor information security practices?

Accepted Answer

A)  Stolen information 
B)  Stolen identities 
C)  Financial loss 
D)  Loss of service 
E)  All of the above are consequences of poor information security practices. 
A)  Stolen information 
B)  Stolen identities 
C)  Financial loss 
D)  Loss of service 
E)  All of the above are consequences of poor information security practices.

In most cases, cookies track your path through Web sites and are therefore invasions of your privacy.

Rank the following in terms of dollar value of the crime, from highest to lowest.

Define the principle of least privilege, and consider how an organization's senior executives might view the application of this principle.

Which of the following factors is not increasing the threats to information security?

Public-key encryption uses two different keys, one public and one private.

Cyberterrorism and cyberwarfare can attack supervisory control and data acquisition (SCADA) systems to cause widespread physical damage.

Supervisory control and data acquisition (SCADA) systems require human data input.

_____ are segments of computer code embedded within an organization's existing computer programs that activate and perform a destructive action at a certain time or date.

You receive an e-mail from your bank informing you that they are updating their records and need your password. Which of the following statements is true?

Having one backup of your business data is sufficient for security purposes.

Zero-day attacks use deceptive e-mails to acquire sensitive personal information.

A URL that begins with https rather than http indicates that the site transmits using an extra layer of security called transport layer security.

The computing skills necessary to be a hacker are decreasing for which of the following reasons?

Which of the following statements concerning firewalls is not true?

Voice and signature recognition are examples of:

Contrast the four types of authentication.

Cyberterrorism is usually carried out by nations.

Which of the following is(are) designed to use your computer as a launch pad for sending unsolicited e-mail to other computers?

Which of the following is not a consequence of poor information security practices?

Introduction to Information Systems

Organizational Strategy, Competitive Advantage, and Information Systems

Ethics and Privacy

Data and Knowledge Management

Telecommunications and Networking

E-Business and E-Commerce

Wireless, Mobile Computing, and Mobile Commerce

Social Computing

Information Systems Within the Organization

Customer Relationship Management and Supply Chain Management

Business Intelligence

Acquiring Information Systems and Applications

Technology Guide 1 Hardware

Technology Guide 2 Software

Technology Guide 3 Cloud Computing

Technology Guide 4 Intelligent Systems

Technology Guide 5 Protecting Your Information Assets

Filters

Exam 4: Information Security and Controls

In most cases, cookies track your path through Web sites and are therefore invasions of your privacy.

Rank the following in terms of dollar value of the crime, from highest to lowest.

Define the principle of least privilege, and consider how an organization's senior executives might view the application of this principle.

Which of the following factors is not increasing the threats to information security?

Public-key encryption uses two different keys, one public and one private.

Cyberterrorism and cyberwarfare can attack supervisory control and data acquisition (SCADA) systems to cause widespread physical damage.

Supervisory control and data acquisition (SCADA) systems require human data input.

_____ are segments of computer code embedded within an organization's existing computer programs that activate and perform a destructive action at a certain time or date.

You receive an e-mail from your bank informing you that they are updating their records and need your password. Which of the following statements is true?

Having one backup of your business data is sufficient for security purposes.

Zero-day attacks use deceptive e-mails to acquire sensitive personal information.

A URL that begins with https rather than http indicates that the site transmits using an extra layer of security called transport layer security.

The computing skills necessary to be a hacker are decreasing for which of the following reasons?

Which of the following statements concerning firewalls is not true?

Voice and signature recognition are examples of:

Contrast the four types of authentication.

Cyberterrorism is usually carried out by nations.

Which of the following is(are) designed to use your computer as a launch pad for sending unsolicited e-mail to other computers?

Which of the following is not a consequence of poor information security practices?

Introduction to Information Systems

Organizational Strategy, Competitive Advantage, and Information Systems

Ethics and Privacy

Data and Knowledge Management

Telecommunications and Networking

E-Business and E-Commerce

Wireless, Mobile Computing, and Mobile Commerce

Social Computing

Information Systems Within the Organization

Customer Relationship Management and Supply Chain Management

Business Intelligence

Acquiring Information Systems and Applications

Technology Guide 1 Hardware

Technology Guide 2 Software

Technology Guide 3 Cloud Computing

Technology Guide 4 Intelligent Systems

Technology Guide 5 Protecting Your Information Assets

Filters