Question 1

Employees and contract workers must be educated about the importance of security so that they will be motivated to understand and follow the security policies.

Accepted Answer

A) True 
 B)False

Question 2

The is a partnership between the Department of Homeland Security and the public and private sectors, established in 2003 to protect the nation's Internet infrastructure against cyberattacks.

Accepted Answer

A)  Carnegie Mellon's Computer Response Team 
B)  U.S. Computer Emergency Readiness Team 
C)  The National Institute of Standards and Technology 
D)  The Science and Technology Directorate of Homeland Security

Question 3

State the purpose of an IT security audit and briefly discuss the key elements of such an audit.

Accepted Answer

The answer of State the purpose of an IT security...

Question 4

pledged to deliver on a trustworthy computing initiative and defined four pillars of trustworthy computing.

Accepted Answer

A)  IBM 
B)  Microsoft 
C)  Oracle 
D)  Hewlett Packard

Question 5

In a security incident, the primary goal must be to regain control and limit damage, and not to attempt to monitor or catch an intruder.

Accepted Answer

A) True 
 B)False

Question 6

The Act went into effect in 2004 and states that it is legal to spam, provided the messages meet a few basic requirements.

Accepted Answer

The answer of The Act went into effect in 2004...

Question 7

A completed risk assessment identifies the most dangerous threats to a company and helps focus security efforts on the areas of highest payoff.

Accepted Answer

A) True 
 B)False

Question 8

Trojan horse has become an umbrella term for many types of malicious code.

Accepted Answer

A) True 
 B)False

Question 9

Spammers can defeat the registration process of free email services by launching a coordinated attack that can sign up for thousands of untraceable email accounts.

Accepted Answer

A)  distributed denial-of-service 
B)  bot 
C)  CAPTCHA 
D)  logic bomb

Question 10

differ from viruses in that they propagate without human intervention, sending copies of themselves to other computers by email.

Accepted Answer

The answer of differ from viruses in that they propagate...

Question 11

The encourages private industry to share confidential information about the nation's critical infrastructure with the Department of Homeland Security under the assurance that the information will be protected from public disclosure.

Accepted Answer

The answer of The encourages private industry to share confidential...

Question 12

Computer viruses differ from worms in that viruses can propagate without human intervention, often sending copies of themselves to other computers by email.

Accepted Answer

A) True 
 B)False

Question 13

Computer forensics is such a new field that there is little training or certification processes available to practioners.

Accepted Answer

A) True 
 B)False

Question 14

The protects against unreasonable search and seizure.

Accepted Answer

A)  Fourth Amendment 
B)  Fifth Amendment 
C)  Wiretap Act 
D)  Pen Registers and Trap and Trace Devices Statute

Question 15

Fraud by malicious insiders often involves some form of collusion, or cooperation, between an employee and an outsider.

Accepted Answer

A) True 
 B)False

Question 16

Using text messaging (SMS) fraudulently to try to get the recipient to reveal personal data is called .

Accepted Answer

The answer of Using text messaging (SMS) fraudulently to try...

Question 17

The Act addresses the disclosure of stored wired and electronic communications and transaction records by Internet service providers.

Accepted Answer

The answer of The Act addresses the disclosure of stored...

Question 18

Whenever possible, automated system rules should mirror an organization's written policies.

Accepted Answer

A) True 
 B)False

Question 19

A large group of computers controlled from one or more remote locations by hackers without the knowledge or consent of their owners is called a(n) .

Accepted Answer

The answer of A large group of computers controlled from...

Question 20

The fundamental problem with trying to detect a rootkit is that the operating system cannot be trusted to provide _____.

Accepted Answer

A)  valid test results 
B)  correct system login ids 
C)  the correct date and time 
D)  sufficient memory for operations

Exam 3: Computer and Internet Crime

Employees and contract workers must be educated about the importance of security so that they will be motivated to understand and follow the security policies.

The is a partnership between the Department of Homeland Security and the public and private sectors, established in 2003 to protect the nation's Internet infrastructure against cyberattacks.

State the purpose of an IT security audit and briefly discuss the key elements of such an audit.

pledged to deliver on a trustworthy computing initiative and defined four pillars of trustworthy computing.

In a security incident, the primary goal must be to regain control and limit damage, and not to attempt to monitor or catch an intruder.

The Act went into effect in 2004 and states that it is legal to spam, provided the messages meet a few basic requirements.

A completed risk assessment identifies the most dangerous threats to a company and helps focus security efforts on the areas of highest payoff.

Trojan horse has become an umbrella term for many types of malicious code.

Spammers can defeat the registration process of free email services by launching a coordinated attack that can sign up for thousands of untraceable email accounts.

differ from viruses in that they propagate without human intervention, sending copies of themselves to other computers by email.

The encourages private industry to share confidential information about the nation's critical infrastructure with the Department of Homeland Security under the assurance that the information will be protected from public disclosure.

Computer viruses differ from worms in that viruses can propagate without human intervention, often sending copies of themselves to other computers by email.

Computer forensics is such a new field that there is little training or certification processes available to practioners.

The protects against unreasonable search and seizure.

Fraud by malicious insiders often involves some form of collusion, or cooperation, between an employee and an outsider.

Using text messaging (SMS) fraudulently to try to get the recipient to reveal personal data is called .

The Act addresses the disclosure of stored wired and electronic communications and transaction records by Internet service providers.

Whenever possible, automated system rules should mirror an organization's written policies.

A large group of computers controlled from one or more remote locations by hackers without the knowledge or consent of their owners is called a(n) .

The fundamental problem with trying to detect a rootkit is that the operating system cannot be trusted to provide _____.