Question 1

The use of voice mail to tell someone to call a phone number, or access a Web site, in an attempt to gain personal information about that person is called .

Accepted Answer

The answer of The use of voice mail to tell...

Question 2

is an annual gathering in Las Vegas of computer hackers.

Accepted Answer

A)  Woodstock 
B)  DEFCON 
C)  Computer Security Institute convention 
D)  CAPTCHA

Question 3

The Fifth Amendment regulates the collection of the content of wire and electronic communications.

Accepted Answer

A) True 
 B)False

Question 4

The leads the federal government's efforts in "securing civilian government computer systems, and works with industry and state, local, tribal, and territorial governments to secure critical infrastructure and information systems."

Accepted Answer

The answer of The leads the federal government's efforts in...

Question 5

Rootkit is a set of programs that enables its users to gain administrator-level access to a computer without the end
user's consent or knowledge.

Accepted Answer

A) True 
 B)False

Question 6

In computing, a(n) is a term for any sort of general attack on an information system that takes advantage of a particular system vulnerability.

Accepted Answer

A)  exploit 
B)  patch 
C)  firewall 
D)  security audit

Question 7

A spear-phishing attack typically employs a group of zombies to keep the target so busy responding to a stream of automated requests that legitimate users cannot access the target.

Accepted Answer

A) True 
 B)False

Question 8

The USA Patriot Act defines cyberterrorism as hacking attempts that cause $5,000 in aggregate damage in one year to medical equipment, or that cause injury to any person.

Accepted Answer

A) True 
 B)False

Question 9

The security of any system or network is a combination of technology, policy, and people and requires a wide range of activities to be effective.

Accepted Answer

A) True 
 B)False

Question 10

A software and/or hardware that monitors system and network resources and activities, and notifies network security personnel when it identifies network traffic that attempts to circumvent the security measures of a networked computer environment is a(n) .

Accepted Answer

A)  anti-virus device 
B)  intrusion prevention system 
C)  intrusion detection system 
D)  virtual private network

Question 11

is the abuse of email systems to send unsolicited email to large numbers of people.

Accepted Answer

A)  A botnet 
B)  Spam 
C)  Logic bombing 
D)  A worm

Question 12

To initiate a denial­of­service attack, a tiny program is downloaded surreptitiously from the attacker's computer to dozens, hundreds, or even thousands of computers all over the world. Based on a command by the attacker or at a preset time, the botnet computers, called , go into action, each sending a simple request for access to the target site again and again.

Accepted Answer

The answer of To initiate a denial­of­service attack, a tiny...

Question 13

A attack keeps the target so busy responding to a stream of automated requests that legitimate users cannot get in.

Accepted Answer

A)  spam 
B)  rootkit 
C)  logic bomb 
D)  distributed denial-of-service

Question 14

A strong security program begins by .

Accepted Answer

A)  assessing the threats to an organization's computers and network 
B)  authorizing a large budget to pay for the necessary hardware and software 
C)  hiring a chief security officer 
D)  monitoring the network for potential intrusions

Question 15

Often a successful attack on an information system is due to poor system design or implementation. Once such a vulnerability is discovered, software developers quickly create and issue a to eliminate the problem.

Accepted Answer

A)  patch 
B)  bot 
C)  rootkit 
D)  Trojan horse

Question 16

A security policy outlines exactly what needs to be done to safeguard computers and their data, but not how it must be accomplished.

Accepted Answer

A) True 
 B)False

Question 17

The cost of creating an email campaign for a product or a service is typically more expensive and takes longer to conduct than a direct-mail campaign.

Accepted Answer

A) True 
 B)False

Question 18

Discussing security attacks through public trials and the associated publicity has not only enormous potential costs in public relations but real monetary costs as well.

Accepted Answer

A) True 
 B)False

Question 19

Even when preventive measures are implemented, no organization is completely secure from a determined computer attack.

Accepted Answer

A) True 
 B)False

Question 20

As a safeguard against attacks by malicious insiders, organizations must define employee roles so that a single employee can input as well as approve purchase orders.

Accepted Answer

A) True 
 B)False

Exam 3: Computer and Internet Crime

The use of voice mail to tell someone to call a phone number, or access a Web site, in an attempt to gain personal information about that person is called .

is an annual gathering in Las Vegas of computer hackers.

The Fifth Amendment regulates the collection of the content of wire and electronic communications.

The leads the federal government's efforts in "securing civilian government computer systems, and works with industry and state, local, tribal, and territorial governments to secure critical infrastructure and information systems."

Rootkit is a set of programs that enables its users to gain administrator-level access to a computer without the end user's consent or knowledge.

In computing, a(n) is a term for any sort of general attack on an information system that takes advantage of a particular system vulnerability.

A spear-phishing attack typically employs a group of zombies to keep the target so busy responding to a stream of automated requests that legitimate users cannot access the target.

The USA Patriot Act defines cyberterrorism as hacking attempts that cause $5,000 in aggregate damage in one year to medical equipment, or that cause injury to any person.

The security of any system or network is a combination of technology, policy, and people and requires a wide range of activities to be effective.

A software and/or hardware that monitors system and network resources and activities, and notifies network security personnel when it identifies network traffic that attempts to circumvent the security measures of a networked computer environment is a(n) .

is the abuse of email systems to send unsolicited email to large numbers of people.

A attack keeps the target so busy responding to a stream of automated requests that legitimate users cannot get in.

A strong security program begins by .

Often a successful attack on an information system is due to poor system design or implementation. Once such a vulnerability is discovered, software developers quickly create and issue a to eliminate the problem.

A security policy outlines exactly what needs to be done to safeguard computers and their data, but not how it must be accomplished.

The cost of creating an email campaign for a product or a service is typically more expensive and takes longer to conduct than a direct-mail campaign.

Discussing security attacks through public trials and the associated publicity has not only enormous potential costs in public relations but real monetary costs as well.

Even when preventive measures are implemented, no organization is completely secure from a determined computer attack.

As a safeguard against attacks by malicious insiders, organizations must define employee roles so that a single employee can input as well as approve purchase orders.