Question 1

Similar to phishing, _____ is directing Internet users to fraudulent Web sites with the intention of stealing their personal information, such as Social Security numbers, passwords, bank account numbers, and credit card numbers.

Accepted Answer

A) sniffing 
B) screening 
C) pharming 
D) cybersquatting

Question 2

In contrast to pharming, phishing involves hijacking an official Web site address by hacking a Domain Name System server.

Accepted Answer

A) True 
 B)False

Question 3

Auction fraud is sending fraudulent e-mails that seem to come from legitimate sources, such as a bank or university.

Accepted Answer

A) True 
 B)False

Question 4

One of the first steps to consider when developing an organization's comprehensive security plan should be to set up a security committee with representatives from all departments as well as upper management.

Accepted Answer

A) True 
 B)False

Question 5

In the context of computer and network security, a security system is said to possess _____ when it does not allow data to be corrupted or allow unauthorized changes to a corporate database.

Accepted Answer

A) integrity 
B) confidentiality 
C) validity 
D) availability

Question 6

A ________ is rented from a third party and usually contains telecommunication equipment.

Accepted Answer

A) McCumber cube 
B) data mine 
C) cold site 
D) co-location facility

Question 7

List the actions that a firewall can take after examining a packet.

Accepted Answer

The answer of List the actions that a firewall can...

Question 8

A(n)_____ network is often used so that remote users have a secure connection to an organization's network.

Accepted Answer

A) biometric security 
B) intrusion detection 
C) virtual private 
D) terminal resource

Question 9

In data encryption, the https in a browser address bar indicates a safe HTTP connection over _____.

Accepted Answer

A) Secure Sockets Layer 
B) Transport Layer Security 
C) User Datagram Protocol 
D) Transmission Control Protocol

Question 10

Before establishing a security program, organizations should __________.

Accepted Answer

A) check temperature and humidity levels 
B) conduct a basic risk analysis 
C) recycle or donate used computing devices 
D) use a co-location facility

Question 11

When developing a comprehensive security plan, which of the following steps is not recommended?

Accepted Answer

A) Design an audit trail for incoming and outgoing data. 
B) Avoid implementing zero trust security. 
C) Keep printouts locked in secure locations. 
D) Investigate any billing discrepancies.

Question 12

Which statement is true of symmetric encryption?

Accepted Answer

A) It uses two different keys to encrypt and decrypt a message. 
B) It requires more processing power than asymmetric encryption. 
C) It is difficult to share a key over the Internet in symmetric encryption. 
D) It is impossible to create digital signatures using symmetric encryption.

Question 13

When planning a comprehensive security system, the first step is designing _____ , which use a combination of hardware and software for improving reliability, a way of ensuring availability in case of a system failure.

Accepted Answer

A) database-resilient systems 
B) vulnerability-evade systems 
C) primary-defense systems 
D) fault-tolerant systems

Question 14

John downloaded Alten Cleaner, a program that poses as a computer registry cleaner, on his computer. Once he installed the program on his computer, the program illegitimately gained access to John's passwords and credit card information. In this scenario, it is evident that John was a victim of _____.

Accepted Answer

A) spoofing 
B) phishing 
C) baiting 
D) pharming

Question 15

_____  is one of the most popular password managers.

Accepted Answer

A) CounterSpy 
B) STOPzilla 
C) Dashlane 
D) FilePro

Question 16

In the context of data encryption, briefly describe asymmetric encryption.

Accepted Answer

The answer of In the context of data encryption, briefly...

Question 17

A _____  is a security threat that may launch a worm through a Trojan horse or launch a denial-of-service attack at a targeted IP address.

Accepted Answer

A) router threat 
B) magnetic threat 
C) signal threat 
D) blended threat

Question 18

Explain the use of callback modems as a nonbiometric security measure.

Accepted Answer

The answer of Explain the use of callback modems as...

Question 19

Describe how a virtual private network (VPN)works.

Accepted Answer

The answer of Describe how a virtual private network (VPN)works....

Question 20

Which statement best describes spyware?

Accepted Answer

A) It is software that secretly gathers information about users while they browse the Web. 
B) It is an attack that floods a server with service requests to prevent legitimate users' access to the system. 
C) It is encryption security that manages transmission security on the Internet. 
D) It is a programming routine built into a system by its designer to bypass system security and sneak back into the system later to access programs or files.

Exam 5: Protecting Information Resources

Similar to phishing, _____ is directing Internet users to fraudulent Web sites with the intention of stealing their personal information, such as Social Security numbers, passwords, bank account numbers, and credit card numbers.

In contrast to pharming, phishing involves hijacking an official Web site address by hacking a Domain Name System server.

Auction fraud is sending fraudulent e-mails that seem to come from legitimate sources, such as a bank or university.

One of the first steps to consider when developing an organization's comprehensive security plan should be to set up a security committee with representatives from all departments as well as upper management.

In the context of computer and network security, a security system is said to possess _____ when it does not allow data to be corrupted or allow unauthorized changes to a corporate database.

A ________ is rented from a third party and usually contains telecommunication equipment.

List the actions that a firewall can take after examining a packet.

A(n) _____ network is often used so that remote users have a secure connection to an organization's network.

In data encryption, the https in a browser address bar indicates a safe HTTP connection over _____.

Before establishing a security program, organizations should __________.

When developing a comprehensive security plan, which of the following steps is not recommended?

Which statement is true of symmetric encryption?

When planning a comprehensive security system, the first step is designing _____ , which use a combination of hardware and software for improving reliability, a way of ensuring availability in case of a system failure.

_____ is one of the most popular password managers.

In the context of data encryption, briefly describe asymmetric encryption.

A _____ is a security threat that may launch a worm through a Trojan horse or launch a denial-of-service attack at a targeted IP address.

Explain the use of callback modems as a nonbiometric security measure.

Describe how a virtual private network (VPN)works.

Which statement best describes spyware?