Question 1

What is a digital signature? How could a digital signature ensure data integrity when conducting e-business?

Accepted Answer

The answer of What is a digital signature? How could...

Question 2

A Certificate Authority (CA) issues digital certificates to bond the subscriber with a public key and a private key.

Accepted Answer

A) True 
 B)False

Question 3

Which of the following statements is incorrect about digital signatures?
A. A digital signature can ensure data integrity.
B. A digital signature also authenticates the document creator.
C. A digital signature is an encrypted message digest.
D. A digital signature is a message digest encrypted using the document creator's public key.

Accepted Answer

The answer of Which of the following statements is incorrect...

Question 4

A magnetic tape used to store data backups was lost while it was being transported to an offsite storage location. The data on the tape includes customers' credit card and personal information. Which preventive control(s) should have been used to minimize the potential loss?

Accepted Answer

The answer of A magnetic tape used to store data...

Question 5

A disaster recovery approach should include which of the following elements?
A. Encryption.
B. Firewalls.
C. Regular backups.
D. Surge protectors.

Accepted Answer

The answer of A disaster recovery approach should include which...

Question 6

Asymmetric-key encryption uses which of the following techniques to allow users to communicate securely?
A. A message digest.
B. A 16-bit encryption key.
C. A public key and a private key.
D. A digital signature.

Accepted Answer

The answer of Asymmetric-key encryption uses which of the following...

Question 7

Which of the following groups is responsible for conducting fraud risk assessment for an organization?
A. The External Auditor.
B. The Audit Committee.
C. The Internal Audit group.
D. Management.

Accepted Answer

The answer of Which of the following groups is responsible...

Question 8

The fraud triangle includes incentive, opportunity and an attitude to rationalize the fraud.

Accepted Answer

A) True 
 B)False

Question 9

An entity doing business on the internet most likely could use any of the following methods to prevent unauthorized intruders from accessing proprietary information except:
A. Password management.
B. Data encryption
C. Digital certificates.
D. Batch processing.

Accepted Answer

The answer of An entity doing business on the internet...

Question 10

An information technology director collected the names and locations of key vendors, current hardware configuration, names of team members, and an alternative processing location. What is the director most likely preparing?
A. Data restoration plan.
B. Disaster recovery plan.
C. System security policy.
D. System hardware policy.

Accepted Answer

The answer of An information technology director collected the names...

Question 11

Asymmetric-key encryption is suitable for encrypting large data sets or messages.

Accepted Answer

A) True 
 B)False

Question 12

The goal of information security management is to enhance the confidence, integrity and authority (CIA) of a firm's information.

Accepted Answer

A) True 
 B)False

Exam 12: Information Security and Computer Fraud

What is a digital signature? How could a digital signature ensure data integrity when conducting e-business?

A Certificate Authority (CA) issues digital certificates to bond the subscriber with a public key and a private key.

A magnetic tape used to store data backups was lost while it was being transported to an offsite storage location. The data on the tape includes customers' credit card and personal information. Which preventive control(s) should have been used to minimize the potential loss?

A disaster recovery approach should include which of the following elements? A. Encryption. B. Firewalls. C. Regular backups. D. Surge protectors.

Asymmetric-key encryption uses which of the following techniques to allow users to communicate securely? A. A message digest. B. A 16-bit encryption key. C. A public key and a private key. D. A digital signature.

Which of the following groups is responsible for conducting fraud risk assessment for an organization? A. The External Auditor. B. The Audit Committee. C. The Internal Audit group. D. Management.

The fraud triangle includes incentive, opportunity and an attitude to rationalize the fraud.

An entity doing business on the internet most likely could use any of the following methods to prevent unauthorized intruders from accessing proprietary information except: A. Password management. B. Data encryption C. Digital certificates. D. Batch processing.

Asymmetric-key encryption is suitable for encrypting large data sets or messages.

The goal of information security management is to enhance the confidence, integrity and authority (CIA) of a firm's information.