Question 1

Spear phishing attacks specifically target a given organization or group of users.

Accepted Answer

A) True 
 B)False

Question 2

One of the reasons organizations delay patches to plug holes in their security applications is:

Accepted Answer

A)  the rising cost of labor. 
B)  lack of information on effectiveness of patches. 
C)  the fear that the new technology contains a change that will cause problems down the road. 
D)  redundancy of patches within a short span of time. 
E)  bureaucratic inefficiency.

Question 3

_____________ refers to malware that encrypts a user's files (perhaps threatening to delete them), with demands that a user pay to regain control of their data and/or device.

Accepted Answer

The answer of _____________ refers to malware that encrypts a...

Question 4

Attacks that are so new that they have not been clearly identified, and so have not made it into security screening systems are called _____.

Accepted Answer

A)  novel attacks 
B)  first mover attacks 
C)  non-precedent breaches 
D)  zero-day exploits 
E)  brute force attacks

Question 5

A protester seeking to make a political point by leveraging technology tools, often through system infiltration, defacement, or damage is called a(n) _____.

Accepted Answer

A)  activist 
B)  cyber agitator 
C)  hacktivist 
D)  ethical hacker 
E)  cybersquatter

Question 6

The e-mail password of a senior employee in an organization was compromised by someone observing this user as the employee accessed his account. This is most likely a case of:

Accepted Answer

A)  keylogging. 
B)  shoulder surfing. 
C)  dumpster diving. 
D)  screen capture. 
E)  spyware.

Question 7

Describe briefly how technology can be leveraged to offset the attempts of attackers to undermine information security.

Accepted Answer

The answer of Describe briefly how technology can be leveraged...

Question 8

_____ are scrambled character images used to thwart things like automated account setup or ticket buying.

Accepted Answer

The answer of _____ are scrambled character images used to...

Question 9

A research scientist with a major pharmaceutical firm in New Jersey is caught passing on sensitive information, worth millions of dollars, regarding the composition and test results of his firm's latest drug to a rival company. What crime is he being held responsible for?

Accepted Answer

A)  Cyber-fraud 
B)  Corporate espionage 
C)  Carrying out technology disruptions 
D)  Extortion 
E)  Illegal funds transfer

Question 10

Hardware failure is the least likely of threats to one's data.

Accepted Answer

A) True 
 B)False

Question 11

The phrase __________________ refers to security schemes that automatically send one-time use representations of a credit card that can be received and processed by banking and transaction firms at the time of payment. They are in use in ApplePay and Android Wallet.

Accepted Answer

The answer of The phrase __________________ refers to security schemes...

Question 12

An attack on the US power grid by terrorists or a foreign power is indicative of:

Accepted Answer

A)  DDoS attacks. 
B)  espionage. 
C)  cyberwarfare. 
D)  extortion. 
E)  phishing.

Question 13

Cyber criminals who infiltrate systems and collect data for illegal resale are called _____.

Accepted Answer

A)  cash-out fraudsters 
B)  data harvesters 
C)  corporate spies 
D)  ethical hackers 
E)  information hoarders

Question 14

Sifting through trash in an effort to uncover valuable data or insights that can be stolen or used to launch a security attack is known as:

Accepted Answer

A)  trash recovery. 
B)  junk exploring. 
C)  dumpster diving. 
D)  scrap sifting. 
E)  data sieving.

Question 15

Updates that plug existing holes in a software are called:

Accepted Answer

A)  patches. 
B)  compliance. 
C)  maculations. 
D)  keys. 
E)  dongles.

Question 16

What are some of the key managerial takeaways from the Target security breach?

Accepted Answer

The answer of What are some of the key managerial...

Question 17

Which of these would be an example of a DDoS attack?

Accepted Answer

A)  An extortion attempt where hackers threaten to reveal names and social security information stolen from medical records databases 
B)  Overloading a popular social networking site with inbound messages in order to shut down access to the site 
C)  Launching a targeted phishing campaign on a department of defense or other surveilance network. 
D)  Stealing proprietary data directly from mobile phones using a distributed network of difficult-to-trace online services. 
E)  Launching tough-to-track click-fraud efforts

Question 18

The term _____ originally referred to a particularly skilled programmer.

Accepted Answer

A)  data harvester 
B)  cracke 
C)  hacker 
D)  black hat 
E)  hacktivist

Question 19

Describe some of the factors at work that enabled the Target security breach to occur.

Accepted Answer

The answer of Describe some of the factors at work...

Question 20

Challenge questions offered by Web sites to automate password distribution and resets are formidable in protecting the privacy of email accounts.

Accepted Answer

A) True 
 B)False

Exam 17: Information Security: Barbarians at the Gateway and Just About Everywhere Else

Spear phishing attacks specifically target a given organization or group of users.

One of the reasons organizations delay patches to plug holes in their security applications is:

_____________ refers to malware that encrypts a user's files (perhaps threatening to delete them), with demands that a user pay to regain control of their data and/or device.

Attacks that are so new that they have not been clearly identified, and so have not made it into security screening systems are called _____.

A protester seeking to make a political point by leveraging technology tools, often through system infiltration, defacement, or damage is called a(n) _____.

The e-mail password of a senior employee in an organization was compromised by someone observing this user as the employee accessed his account. This is most likely a case of:

Describe briefly how technology can be leveraged to offset the attempts of attackers to undermine information security.

_____ are scrambled character images used to thwart things like automated account setup or ticket buying.

A research scientist with a major pharmaceutical firm in New Jersey is caught passing on sensitive information, worth millions of dollars, regarding the composition and test results of his firm's latest drug to a rival company. What crime is he being held responsible for?

Hardware failure is the least likely of threats to one's data.

The phrase __________________ refers to security schemes that automatically send one-time use representations of a credit card that can be received and processed by banking and transaction firms at the time of payment. They are in use in ApplePay and Android Wallet.

An attack on the US power grid by terrorists or a foreign power is indicative of:

Cyber criminals who infiltrate systems and collect data for illegal resale are called _____.

Sifting through trash in an effort to uncover valuable data or insights that can be stolen or used to launch a security attack is known as:

Updates that plug existing holes in a software are called:

What are some of the key managerial takeaways from the Target security breach?

Which of these would be an example of a DDoS attack?

The term _____ originally referred to a particularly skilled programmer.

Describe some of the factors at work that enabled the Target security breach to occur.

Challenge questions offered by Web sites to automate password distribution and resets are formidable in protecting the privacy of email accounts.