Deck 1: Introduction

Question 1

Information security is defined as

A) Protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide incentives, confidence and avoidance
B) Protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide intelligence, control and evidence
C) Protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide insights, competence and advantage
D) Protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide integrity, confidentiality and availability

Answer 1

D

Question 2

The Internet is relevant for information security because

A) It exposed computers to attacks from around the world
B) It caused one of the most significant Internet outages ever
C) It led to exploits from weakness is wireless networks
D) It caused falsification of financial records at publicly traded companies

Answer 2

A

Question 3

The Sarbanes-Oxley act is important to information security for

A) Compelling investments in specified information security procedures
B) Stealing commercial information by exploiting weakness is wireless networks
C) Exposing the implications of international differences in cyber-law
D) Popularizing computers among the masses

Answer 3

A

Question 4

Information security is becoming increasingly important because of

A) The increasing criticality of information to individuals and organizations
B) There is a general increase in criminal behavior in society
C) People are greedier these days
D) Organizations are wealthier these days

Question 5

As the use of personal devices for work has increased, the work of information security professionals has

A) Decreased
B) Stayed the same
C) Increased
D) None of the above

Question 6

Windows 95 is important to information security for

A) Intruding into a number of high profile computer installations
B) Stealing commercial information by exploiting weakness is wireless networks
C) Causing one of the most significant Internet outages ever
D) Popularizing computers among the masses

Question 7

Information security professional do not report spending a lot of time on

A) Researching new technologies
B) Political issues
C) Developing internal security policies, standards and procedures
D) Fixing software bugs

Question 8

Albert Gonzalez and T J Maxx are well known in the information security literature for

A) Intruding into a number of high profile computer installations
B) Stealing commercial information by exploiting weakness is wireless networks
C) Causing one of the most significant Internet outages ever
D) Falsification of financial records at publicly traded companies

Question 9

HIPAA is important to information security for

A) Intruding into a number of high profile computer installations
B) Driving demand for information security in a large sector of the US economy
C) Causing one of the most significant Internet outages ever
D) Popularizing computers among the masses

Question 10

A desired competency for information security professionals is

A) Marketing
B) End user awareness
C) Financial planning
D) Accounting

Question 11

The Sarbanes-Oxley act was enacted in 2002 to prevent

A) Intruding into a number of high profile computer installations
B) Causing one of the most significant Internet outages ever
C) Stealing commercial information by exploiting weakness is wireless networks
D) Falsification of financial records at publicly traded companies

Question 12

HIPAA stands for

A) Health Insurance Portability and Accountability Act
B) Health Insurance Privacy and Accountability Act
C) Health Insurance Privacy and Awareness Act
D) Health Insurance Portability and Awareness Act

Question 13

The war between Russia and Georgia in 2008 is important to information security for

A) Its impact on global warming
B) The use of nuclear weapons
C) Making people aware of the possibility of state-sponsored cyber-attacks
D) The heavy loss of life

Question 14

The biggest time-consuming activity for most Information security professionals is

A) Responding to information security incidents
B) Fixing software bugs
C) Researching new technologies
D) Helping customers

Question 15

Desired competencies for information security professionals include all of the following except

A) Marketing
B) Risk management
C) Secure SDLC
D) Forensics

Question 16

The Morris worm is well known in the information security literature for

A) Intruding into a number of high profile computer installations
B) Stealing commercial information by exploiting weakness is wireless networks
C) Causing one of the most significant Internet outages ever
D) Falsification of financial records at publicly traded companies

Question 17

Many users are vulnerable to

A) Attacks on ATM machines
B) Stolen usernames and passwords from a compromised site being used to compromise their bank accounts
C) Hackers compromising the IT systems at large financial institutions
D) Demands for usernames and passwords at gun-point

Question 18

Information security professional report spending a lot of time on

A) Researching new technologies
B) Political issues
C) Developing internal security policies, standards and procedures
D) Fixing software bugs

Question 19

The ILOVEYOU virus is important to information security for

A) Intruding into a number of high profile computer installations
B) Stealing commercial information by exploiting weakness is wireless networks
C) Exposing the implications of international differences in cyber-law
D) Popularizing computers among the masses

Question 20

The gang of 414 is famous in the information security literature for

A) Causing one of the most significant Internet outages ever
B) Intruding into a number of high profile computer installations
C) Stealing commercial information by exploiting weakness is wireless networks
D) Falsification of financial records at publicly traded companies

Question 21

Availability is

A) Protecting information and information systems from unauthorized use
B) Preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information Choices
C) Guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity
D) Ensuring timely and reliable access to and use of information

Question 22

Confidentiality is

A) Protecting information and information systems from unauthorized use
B) Preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information Choices
C) Guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity
D) Ensuring timely and reliable access to and use of information

Question 23

Of the measures you can take to improve your personal security, the least important is

A) Spending lot of money
B) Using end-point virus) protection
C) Automating software updates
D) Using appropriate passwords

Question 24

The term CIA in information security refers to

A) Confidentiality, integrity and availability
B) Central intelligence agency
C) Common information awareness
D) Critical information analysis

Question 25

Integrity is

A) Protecting information and information systems from unauthorized use
B) Preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information Choices
C) Guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity
D) Ensuring timely and reliable access to and use of information