Question 1

________ is a social engineering technique in which a person pretends to be a legitimate company and sends e-mails requesting confidential data.

Accepted Answer

A)  Phishing 
B)  Spyware 
C)  Sniffing 
D)  Denial-of-service

Question 2

A smart card has a magnetic strip.

Accepted Answer

A) True 
 B)False

Question 3

A(n)________ is a formal description of a system's response to use and misuse scenarios.

Accepted Answer

A)  test plan 
B)  as-is model 
C)  digital certificate 
D)  code injection

Question 4

An organization purchases SAP's ERP system. After customizing the system and training employees, the organization shuts down the old system and implements the new one across all business processes. This is an example of ________ installation.

Accepted Answer

A)  parallel 
B)  plunge 
C)  pilot 
D)  phased

Question 5

Biometric authentication uses personal physical characteristics to authenticate users.

Accepted Answer

A) True 
 B)False

Question 6

Worms are specifically programmed to spread, and they spread faster than other virus types.

Accepted Answer

A) True 
 B)False

Question 7

What is spoofing? What are the two types of spoofing?

Accepted Answer

The answer of What is spoofing? What are the two...

Question 8

A malicious hacker flooded an online retailer's server with millions of bogus service requests. Due to this, the Web site's server was overloaded and the site was unable to service legitimate customer requests. This attack is an example of which of the following security threats?

Accepted Answer

A)  spoofing 
B)  sniffing 
C)  phishing 
D)  denial-of-service

Question 9

New process modeling is not necessary if a process change involves only alterations in human resources.

Accepted Answer

A) True 
 B)False

Question 10

What is hacking?

Accepted Answer

The answer of What is hacking?...

Question 11

Technical feasibility refers to whether existing information technology is likely to be able to meet the needs of a new information system.

Accepted Answer

A) True 
 B)False

Question 12

________ occurs when a person gains unauthorized access to a computer system.

Accepted Answer

A)  Phishing 
B)  Pretexting 
C)  Digital footprinting 
D)  Hacking

Question 13

A virus is a computer program that ________.

Accepted Answer

A)  observes the user's actions and keystrokes 
B)  replicates itself 
C)  encrypts data 
D)  prevents unauthorized network access

Question 14

Which of the following is the first activity in the SDLC process?

Accepted Answer

A)  design system components 
B)  determine requirements 
C)  define the system 
D)  develop technical safeguards

Question 15

Which of the following is true of systems analysts?

Accepted Answer

A)  They integrate the work of programmers, testers, and users. 
B)  They work primarily with business processes. 
C)  They are active mainly during the system conversion phase of the systems development process. 
D)  They focus on information systems development and lack knowledge on process design.

Question 16

The term system conversion refers to the process of testing software.

Accepted Answer

A) True 
 B)False

Question 17

Adware is a program that is installed on a system after seeking the user's permission.

Accepted Answer

A) True 
 B)False

Question 18

A group of intruders accessed RK Bank's IP address and accepted payments on the bank's behalf. This attack is an example of ________.

Accepted Answer

A)  sniffing 
B)  spyware 
C)  spoofing 
D)  denial-of-service

Question 19

Charko Chemicals is a firm that supplies chemicals to pharmaceutical companies in the United States. The company implements Oracle SCM to reduce its operational costs. Even after the implementation of the SCM system, the company does not shut down the old system and runs both the systems simultaneously. This is an example of ________ installation.

Accepted Answer

A)  plunge 
B)  pilot 
C)  phased 
D)  parallel

Question 20

Which of the following is a valid difference between a password and user name?

Accepted Answer

A)  A password is used to encode information whereas a user name is used to decode information. 
B)  A user name is more complex compared to a password. 
C)  A user name identifies the user whereas a password authenticates the user. 
D)  A user name is a primary authentication measure whereas a password is a secondary authentication measure.

Exam 12: MIS Management Processes: Process Management, Systems Development, and Security

________ is a social engineering technique in which a person pretends to be a legitimate company and sends e-mails requesting confidential data.

A smart card has a magnetic strip.

A(n) ________ is a formal description of a system's response to use and misuse scenarios.

An organization purchases SAP's ERP system. After customizing the system and training employees, the organization shuts down the old system and implements the new one across all business processes. This is an example of ________ installation.

Biometric authentication uses personal physical characteristics to authenticate users.

Worms are specifically programmed to spread, and they spread faster than other virus types.

What is spoofing? What are the two types of spoofing?

A malicious hacker flooded an online retailer's server with millions of bogus service requests. Due to this, the Web site's server was overloaded and the site was unable to service legitimate customer requests. This attack is an example of which of the following security threats?

New process modeling is not necessary if a process change involves only alterations in human resources.

What is hacking?

Technical feasibility refers to whether existing information technology is likely to be able to meet the needs of a new information system.

________ occurs when a person gains unauthorized access to a computer system.

A virus is a computer program that ________.

Which of the following is the first activity in the SDLC process?

Which of the following is true of systems analysts?

The term system conversion refers to the process of testing software.

Adware is a program that is installed on a system after seeking the user's permission.

A group of intruders accessed RK Bank's IP address and accepted payments on the bank's behalf. This attack is an example of ________.

Which of the following is a valid difference between a password and user name?