Question 1

Some of the most common guidelines issued by Web sites when designing a secure password include:

Accepted Answer

A)  The password should be at least eight characters long and include at least one number and other nonalphabet character. 
B)  The password should be short and straightforward. 
C)  The password should include names of family members or pets, so as to be easily remembered. 
D)  Choose a hard-to-guess password, then re-use this hardened password across websites. This minimize instances of calling systems professionals for a password reset, hence eliminating an additional potential vulnerability. 
E)  The password should be the same as your name so as to trick the hacker.

Question 2

Hackers might infiltrate computer systems to enlist hardware for subsequent illegal acts.

Accepted Answer

A) True 
 B)False

Question 3

According to research firm Gartner, the majority of loss-causing security incidents involve the handiwork of international cyber-criminal gangs.

Accepted Answer

A) True 
 B)False

Question 4

The topic of U.S. government surveilance continues to be hotly debated, with strong opinions in favor of surveilance programs, as well as vocal protestations of government overreach. Briefly give the argument for and against U.S. government surveilance practices.

Accepted Answer

The answer of The topic of U.S. government surveilance continues...

Question 5

The term ISO 27000 refers to a series of standards representing the set of best practices for implementing, maintaining and improving organizational security.

Accepted Answer

A) True 
 B)False

Question 6

What type of tool enforces access privileges and helps verify that systems are not being accessed by the unauthorized, or in suspicious ways?

Accepted Answer

A)  Audit trails 
B)  Intrusion detection tools 
C)  Access control tools 
D)  User-tracking tools 
E)  Network watching tools

Question 7

What are botnets and how are criminals using this technology?

Accepted Answer

The answer of What are botnets and how are criminals...

Question 8

Social networking sites such as Facebook and LinkedIn form valuable sources of vital information that can be used to craft a scam by con artists.

Accepted Answer

A) True 
 B)False

Question 9

A system that monitors network use for potential hacking attempts and takes preventative action to block, isolate, or identify attempted infiltration, and raise further alarms to warn security personnel is known as a(n):

Accepted Answer

A)  firewall system. 
B)  whitelist. 
C)  intrusion detection system. 
D)  honeypot system. 
E)  patching system.

Question 10

The e-mail password of a senior employee in an organization was compromised by someone observing this user as the employee accessed his account. This is most likely a case of:

Accepted Answer

A)  keylogging. 
B)  shoulder surfing. 
C)  dumpster diving. 
D)  screen capture. 
E)  spyware.

Question 11

One of the reasons one should be careful about clicking on any URL in an e-mail is that hackers can easily embed a redirection in e-mail links, reroutiing a user to an alternate online destination.

Accepted Answer

A) True 
 B)False

Question 12

When using a public wireless network, using VPN software is not advisable as it can reveal your communications to any network eavesdroppers.

Accepted Answer

A) True 
 B)False

Question 13

_____ are highly restrictive programs that permit communication only with approved entities and/or in an approved manner.

Accepted Answer

The answer of _____ are highly restrictive programs that permit...

Question 14

Hardware failure is the least likely of threats to one's data.

Accepted Answer

A) True 
 B)False

Question 15

The phrase ______________ refers to security where identity is proven by presenting more than one item for proof of credentials. Multiple factors often include a password and some other identifier such as a unique code sent via e-mail or mobile phone text, a biometric reading (e.g. fingerprint or iris scan), a swipe or tap card, or other form if identification

Accepted Answer

The answer of The phrase ______________ refers to security where...

Question 16

What is the key takeaway from the Heartland breach?

Accepted Answer

A)  Even widely-used open source software is vulnerable. 
B)  Compliance does not equal security and firms that have passed multiple compliance audits may still remain vulnerable. 
C)  SSL public-key encrpytion can be hacked. 
D)  GitHub is a horrible place to store widely-used code. 
E)  Firms that fail to employ ISO 27000 will remain vulnerable.

Question 17

Describe briefly how technology can be leveraged to offset the attempts of attackers to undermine information security.

Accepted Answer

The answer of Describe briefly how technology can be leveraged...

Question 18

The information systems of several firms have been compromised by insiders that can include contract employees, cleaning staff, and temporary staffers.

Accepted Answer

A) True 
 B)False

Question 19

_____ refers to confidence scams executed through technology.

Accepted Answer

The answer of _____ refers to confidence scams executed through...

Question 20

Which of the followings aspects of international law would enable a cyber-criminal operating across borders to evade prosecution?

Accepted Answer

A)  Lack of technology to identify the origin of a security attack 
B)  Non-recognition of commission of a security-related crime 
C)  Unwillingness of developed countries to share technical know-how with lesser-developed countries 
D)  Non-existent extradition agreements between two countries 
E)  Technological incompatibility between the two countries

Exam 17: Information Security: Barbarians at the Gateway and Just About Everywhere Else

Some of the most common guidelines issued by Web sites when designing a secure password include:

Hackers might infiltrate computer systems to enlist hardware for subsequent illegal acts.

According to research firm Gartner, the majority of loss-causing security incidents involve the handiwork of international cyber-criminal gangs.

The topic of U.S. government surveilance continues to be hotly debated, with strong opinions in favor of surveilance programs, as well as vocal protestations of government overreach. Briefly give the argument for and against U.S. government surveilance practices.

The term ISO 27000 refers to a series of standards representing the set of best practices for implementing, maintaining and improving organizational security.

What type of tool enforces access privileges and helps verify that systems are not being accessed by the unauthorized, or in suspicious ways?

What are botnets and how are criminals using this technology?

Social networking sites such as Facebook and LinkedIn form valuable sources of vital information that can be used to craft a scam by con artists.

A system that monitors network use for potential hacking attempts and takes preventative action to block, isolate, or identify attempted infiltration, and raise further alarms to warn security personnel is known as a(n) :

The e-mail password of a senior employee in an organization was compromised by someone observing this user as the employee accessed his account. This is most likely a case of:

One of the reasons one should be careful about clicking on any URL in an e-mail is that hackers can easily embed a redirection in e-mail links, reroutiing a user to an alternate online destination.

When using a public wireless network, using VPN software is not advisable as it can reveal your communications to any network eavesdroppers.

_____ are highly restrictive programs that permit communication only with approved entities and/or in an approved manner.

Hardware failure is the least likely of threats to one's data.

What is the key takeaway from the Heartland breach?

Describe briefly how technology can be leveraged to offset the attempts of attackers to undermine information security.

The information systems of several firms have been compromised by insiders that can include contract employees, cleaning staff, and temporary staffers.

_____ refers to confidence scams executed through technology.

Which of the followings aspects of international law would enable a cyber-criminal operating across borders to evade prosecution?