Deck 12: Information Security Management

Question 1

A person calls the Stark residence and pretends to represent a credit card company.He asks Mrs.Stark to confirm her credit card number.This is an example of ________.

A)hacking
B)data mining
C)sniffing
D)pretexting

Answer 1

D

Question 2

An Advanced Persistent Threat (APT)is a sophisticated computer hack that is perpetrated by large,well-funded organisations like governments.

Answer 2

True

Question 3

A threat is a person or an organisation that seeks to obtain or alter data illegally,without the owner's permission or knowledge.

Answer 3

True

Question 4

Which of the following occurs when millions of bogus service requests flood a Web server and prevent it from servicing legitimate requests?

A)DOS attack
B)hacking
C)usurpation
D)spoofing

Question 5

A(n)________ is a sophisticated,possibly long-running,computer hack that is perpetrated by large,well-funded organisations like governments.

A)Advanced Persistent Threat (APT)
B)local area network denial (LAND)
C)denial of service (DOS)
D)Advanced Volatile Threat (AVT)

Question 6

________ occurs when computer criminals invade a computer system and replace legitimate programs with their own unauthorised ones.

A)Encryption
B)Sniffing
C)Usurpation
D)Spoofing

Question 7

Pretexting occurs when someone deceives by pretending to be someone else.

Question 8

________ take computers with wireless connections through an area and search for unprotected wireless networks.

A)Key punchers
B)Drive-by sniffers
C)Phishers
D)Hackers

Question 9

Drive-by phishers take computers with wireless connections through an area and search for unprotected wireless networks.

Question 10

________ is a technique for intercepting computer communications.

A)Pretexting
B)Spoofing
C)Hacking
D)Sniffing

Question 11

Which of the following is a synonym for phishing?

A)drive-by sniffing
B)email spoofing
C)IP spoofing
D)system hacking

Question 12

Mark receives an email from his bank asking him to update and verify his credit card details.He replies to the mail with all the requested details.Mark later learns that the mail was not actually sent by his bank and that the information he had shared has been misused.Mark is a victim of ________.

A)sniffing
B)data mining
C)phishing
D)hacking

Question 13

Describe the terms phishing,spoofing,and sniffing.

Question 14

A ________ pretends to be a legitimate company and sends emails requesting confidential data.

A)hacker
B)phisher
C)drive-by sniffer
D)key puncher

Question 15

Email spoofing is a synonym for phishing.

Question 16

Breaking into computers,servers,or networks to steal proprietary and confidential data is referred to as ________.

A)spoofing
B)hacking
C)usurpation
D)sniffing

Question 17

Which of the following types of security loss is WikiLeaks an example of?

A)faulty service
B)incorrect data modification
C)unauthorised data disclosure
D)denial of service

Question 18

Incorrectly increasing a customer's discount is an example of incorrect data modification.

Question 19

A(n)________ is a measure that individuals or organisations take to block a threat from obtaining an asset.

A)safeguard
B)information silo
C)third-party cookie
D)Hadoop

Question 20

Spoofing is a technique for intercepting computer communications.

Question 21

Which of the following is a data safeguard against security threats?

A)malware protection
B)physical security
C)dissemination of information
D)application design

Question 22

A person should preferably use the same password for different sites so as to avoid confusion.

Question 23

Which of the following is considered a personal security safeguard?

A)create backup of cookies and temporary files
B)conduct transactions using http rather than https
C)use a single valid password for all accounts
D)send no valuable data via email or IM

Question 24

A(n)________ is a computer program that senses when another computer is attempting to scan a disk or access a computer.

A)malware definition
B)business intelligence system
C)account administration system
D)intrusion detection system

Question 25

What are some of the recommended personal security safeguards against security threats?

Question 26

The creation of a backup copy of all database content of an organisation is a technical safeguard.

Question 27

Risk management is a critical security function of an organisation's senior management.

Question 28

During which of the following computer crimes does a password cracker try every possible combination of characters?

A)brute force attack
B)DOS attack
C)sniffing
D)pretexting

Question 29

Backup and physical security are ________ against computer security threats.

A)human safeguards
B)procedural safeguards
C)data safeguards
D)technical safeguards

Question 30

In a brute force attack,a password cracker tries every possible combination of characters.

Question 31

Which of the following is a technical safeguard against security threats?

A)compliance
B)backup and recovery
C)passwords
D)identification and authorisation

Question 32

Which of the following statements is true of the financial losses due to computer security threats?

A)All studies on costs of computer crimes are based on unobtrusive research.
B)The financial losses faced by companies due to human error are enormous.
C)Damages caused by natural disasters are minimal when compared to the damages due to human errors.
D)There are several set standards for tallying computer crime costs and financial losses.

Question 33

Financial institutions must invest heavily in security safeguards because they are obvious targets for theft.

Question 34

________ are small files that browsers store on users' computers when they visit Web sites.

A)Viral hooks
B)Cookies
C)Mashups
D)Keys

Question 35

Damages caused by natural disasters are minimal when compared to the damages due to human errors.

Question 36

Studies on the cost of computer crimes are mostly based on surveys.

Question 37

Explain the concept of denial of service (DOS)in information management.

Question 38

While making online purchases,a person should buy only from vendors who support https.

Question 39

Which of the following is a human safeguard against security threats?

A)physical security
B)procedure design
C)firewalls
D)backup and recovery

Question 40

Malware protection is an example of a technical safeguard.

Question 41

With HTTPS,data are encrypted using the Secure Socket Layer (SSL)protocol,which is also known as ________.

A)Simple Mail Transfer Protocol (SMTP)
B)Transport Layer Security (TLS)
C)Secure Shell (SSH)
D)File Transfer Protocol (FTP)

Question 42

Which of the following refers to viruses that masquerade as useful programs?

A)Trojan horses
B)adware
C)payloads
D)spyware

Question 43

________ determine whether to pass each part of a message by examining its source address,destination addresses,and other such data.

A)Perimeter firewalls
B)Application firewalls
C)Internal firewalls
D)Packet-filtering firewalls

Question 44

A ________ has a microchip that is loaded with identifying data.

A)smart card
B)payment card
C)biometric passport
D)flashcard

Question 45

Which of the following statements is true of symmetric encryption?

A)Asymmetric encryption is simpler and much faster than symmetric encryption.
B)With symmetric encryption,encoding and decoding are performed by two different keys.
C)With symmetric encryption,the same key is used for both encoding and decoding.
D)Public key/private key is a special version of symmetric encryption used on the Internet.

Question 46

________ includes viruses,worms,Trojan horses,spyware,and adware.

A)Malware
B)Shareware
C)Firewall
D)Metadata

Question 47

Explain the two critical security functions that an organisation's senior management needs to address.

Question 48

With HTTPS,data are encrypted using a protocol called the ________.

A)Post Office Protocol (POP)
B)Secure Shell (SSH)
C)Secure Socket Layer (SSL)
D)File Transfer Protocol (FTP)

Question 49

A password ________ a user.

A)authenticates
B)conceals
C)identifies
D)encrypts

Question 50

A user name authenticates a user,and a password identifies that user.

Question 51

________ is the process of transforming clear text into coded,unintelligible text for secure storage or communication.

A)Standardisation
B)Encryption
C)Usurpation
D)Authentication

Question 52

Users of smart cards are required to enter a ________ to be authenticated.

A)key
B)biometric detail
C)password
D)personal identification number

Question 53

Adware and spyware are similar to each other in that they both ________.

A)are specifically programmed to spread
B)are installed without a user's permission
C)are used to replicate programs
D)masquerade as useful programs

Question 54

Which of the following uses an individual's personal physical characteristics such as fingerprints,facial features,and retinal scans for verification purposes?

A)flashcards
B)biometric authentication
C)symmetric encryption
D)smart cards

Question 55

Smart cards are convenient to use because they don't require a PIN number for authentication.

Question 56

A user name ________ a user.

A)identifies
B)authenticates
C)conceals
D)encrypts

Question 57

Technical safeguards involve both software and hardware components of an information system.

Question 58

The most secure communications over the Internet use a protocol called ________.

A)HTTPS
B)HTTP
C)SFTP
D)SMTP

Question 59

A(n)________ sits outside an organisational network and is the first device that Internet traffic encounters.

A)internal firewall
B)packet-filtering firewall
C)perimeter firewall
D)application firewall

Question 60

Technical safeguards include encryption and the usage of passwords.

Question 61

The loss of encryption keys by employees is referred to as key escrow.

Question 62

The most secure communications over the Internet use a protocol called HTTP.

Question 63

What are firewalls? What types of firewalls are commonly used?

Question 64

Discuss briefly the pros and cons of biometric authentication.

Question 65

A virus is a computer program that replicates itself.

Question 66

Differentiate between symmetric and asymmetric encryption.

Question 67

Spyware programs are installed on a user's computer without the user's knowledge.

Question 68

Viruses,worms,and Trojan horses are types of firewalls.

Question 69

With asymmetric encryption,two different keys are used for encoding and decoding a message.

Question 70

The creation of backup copies of database contents ensures the protection of the database.

Question 71

Perimeter firewalls are the simplest type of firewall.

Question 72

Packet-filtering firewalls examine each part of a message and determine whether to let that part pass.

Question 73

Packet-filtering firewalls sit outside an organisational network.

Question 74

A criticism of biometric authentication is that it provides weak authentication.

Question 75

List some important malware safeguards.

Question 76

The procedure of entrusting a party with a copy of an encryption key that can be used in case the actual key is lost or destroyed is called ________.

A)key escrow
B)asymmetric encryption
C)symmetric encryption
D)biometric authentication

Question 77

Organisations should protect sensitive data by storing it in ________ form.

A)encrypted
B)structured
C)standardised
D)digital

Question 78

How can data safeguards protect against security threats?

Question 79

Which of the following is an example of a data safeguard against security threats?

A)procedure design
B)accountability
C)application design
D)backup and recovery

Question 80

Malware definitions are patterns that exist in malware code.