Question 1

________ refers to policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems.

Accepted Answer

A)   "Security"
B)   "Controls"
C)   "Benchmarking"
D)   "Algorithms"
E)   "Authentication"F) B) and C)
G) All of the above

Question 2

According to IT security experts, mobile devices pose greater security risks than larger computers.

Accepted Answer

A) True 
 B)False

Question 3

Evil twins are:

Accepted Answer

A)   Trojan horses that appear to the user to be a legitimate commercial software application.
B)   email messages that mimic the email messages of a legitimate business.
C)   fraudulent websites that mimic a legitimate business's website.
D)   bogus wireless network access points that look legitimate to users.
E)   viruses that affect smartphones.F) C) and D)
G) C) and E)

Question 4

Zeus is an example of a Trojan horse.

Accepted Answer

A) True 
 B)False

Question 5

Your company, an online clothing store, has calculated that a loss of Internet connectivity for 5 hours results in a potential loss of $1,000 to $2,000 and that there is a 50% chance of this occurring. What is the annual expected loss from this exposure?

Accepted Answer

A)   $750
B)   $1,000
C)   $1,500
D)   $2,000
E)   $3,000F) A) and D)
G) A) and C)

Question 6

Malicious software programs referred to as malware include a variety of threats such as computer viruses, worms, and Trojan horses.

Accepted Answer

A) True 
 B)False

Question 7

An example of phishing is:

Accepted Answer

A)   flooding a web server with thousands of requests for service.
B)   setting up a fake medical website that asks users for confidential information.
C)   a program that records the keystrokes on a computer.
D)   sending bulk email that asks for financial aid under a false pretext.
E)   malware that displays annoying pop-up messages.F) A) and B)
G) B) and E)

Question 8

One form of spoofing involves forging the return address on an email so that the email message appears to come from someone other than the sender.

Accepted Answer

A) True 
 B)False

Question 9

Most computer viruses deliver a:

Accepted Answer

A)   worm.
B)   Trojan horse.
C)   driveby download.
D)   keylogger.
E)   payload.F) A) and D)
G) None of the above

Question 10

Which of the following statements about wireless security is not true?

Accepted Answer

A)   SSIDs are broadcast multiple times and can be picked up fairly easily by sniffer programs.
B)   Radio frequency bands are easy to scan.
C)   An intruder who has associated with an access point by using the correct SSID is capable of accessing other resources on the network.
D)   Intruders can force a user's NIC to associate with a rogue access point.
E)   Bluetooth is the only wireless technology that is not susceptible to hacking by eavesdroppers.F) C) and E)
G) B) and D) E

Question 11

NAT conceals the IP addresses of the organization's internal host computers to deter sniffer programs.

Accepted Answer

A) True 
 B)False

Question 12

Currently, the protocols used for secure information transfer over the Internet are:

Accepted Answer

A)   TCP/IP, SSL and CA.
B)   S-HTTP, TCP/IP, and CA.
C)   HTTP, TLS, and TCP/IP.
D)   SSL, TLS, and S-HTTP.
E)   TLS, S-HTTP, and TCP/IPF) C) and D)
G) B) and D)

Question 13

The Gramm-Leach-Bliley Act:

Accepted Answer

A)   requires financial institutions to ensure the security of customer data.
B)   specifies best practices in information systems security and control.
C)   imposes responsibility on companies and management to safeguard the accuracy of financial information.
D)   outlines medical security and privacy rules.
E)   requires that companies retain electronic records for at least 10 years.F) A) and C)
G) A) and B)

Question 14

________ controls ensure that valuable business data files on either disk or tape are not subject to unauthorized access, change, or destruction while they are in use or in storage.

Accepted Answer

A)   Software
B)   Administrative
C)   Data security
D)   Implementation
E)   AuthenticationF) A) and B)
G) A) and E)

Question 15

Hackers and their companion viruses are an increasing problem, especially on the Internet. What are the most important measurers for a firm to take to protect itself from this? Is full protection feasible? Why or why not?

Accepted Answer

For protection, a company must institute good security measures, which will include firewalls, investigation of personnel to be hired, physical and software security and controls, antivirus software, and internal education measures. These measures are best put in place at the time the system is designed, and careful attention paid to them. A prudent company will engage in disaster protection measures, frequent updating of security software, and frequent auditing of all security measures and of all data upon which the company depends. Full protection may not be feasible in light of the time and expenses involved, but a risk analysis can provide insights into which areas are most important and vulnerable. These are the areas to protect first.

Question 16

Sniffers enable hackers to steal proprietary information from anywhere on a network, including email messages, company files, and confidential reports.

Accepted Answer

A) True 
 B)False

Question 17

An acceptable use policy defines the acceptable level of access to information assets for different users.

Accepted Answer

A) True 
 B)False

Question 18

________ refers to all of the methods, policies, and organizational procedures that ensure the safety of the organization's assets, the accuracy and reliability of its accounting records, and operational adherence to management standards.

Accepted Answer

A)   "Legacy systems"
B)   "SSID standards"
C)   "Vulnerabilities"
D)   "Controls"
E)   "Authentication"F) A) and E)
G) A) and D) D

Question 19

To secure mobile devices, a company will need to implement special mobile device management software.

Accepted Answer

A) True 
 B)False

Question 20

________ identify the access points in a Wi-Fi network.

Accepted Answer

A)   NICs
B)   Mac addresses
C)   URLs
D)   SSIDs
E)   CAsF) B) and D)
G) All of the above

Exam 8: Securing Information Systems

________ refers to policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems.

Correct Answer
verified

According to IT security experts, mobile devices pose greater security risks than larger computers.

Correct Answer
verified

Evil twins are:

Correct Answer
verified

Zeus is an example of a Trojan horse.

Correct Answer
verified

Your company, an online clothing store, has calculated that a loss of Internet connectivity for 5 hours results in a potential loss of $1,000 to $2,000 and that there is a 50% chance of this occurring. What is the annual expected loss from this exposure?

Correct Answer
verified

Malicious software programs referred to as malware include a variety of threats such as computer viruses, worms, and Trojan horses.

Correct Answer
verified

An example of phishing is:

Correct Answer
verified

One form of spoofing involves forging the return address on an email so that the email message appears to come from someone other than the sender.

Correct Answer
verified

Most computer viruses deliver a:

Correct Answer
verified

Which of the following statements about wireless security is not true?

Correct Answer
verified
E

NAT conceals the IP addresses of the organization's internal host computers to deter sniffer programs.

Correct Answer
verified

Currently, the protocols used for secure information transfer over the Internet are:

Correct Answer
verified

The Gramm-Leach-Bliley Act:

Correct Answer
verified

________ controls ensure that valuable business data files on either disk or tape are not subject to unauthorized access, change, or destruction while they are in use or in storage.

Correct Answer
verified

Hackers and their companion viruses are an increasing problem, especially on the Internet. What are the most important measurers for a firm to take to protect itself from this? Is full protection feasible? Why or why not?

Sniffers enable hackers to steal proprietary information from anywhere on a network, including email messages, company files, and confidential reports.

Correct Answer
verified

An acceptable use policy defines the acceptable level of access to information assets for different users.

Correct Answer
verified

________ refers to all of the methods, policies, and organizational procedures that ensure the safety of the organization's assets, the accuracy and reliability of its accounting records, and operational adherence to management standards.

Correct Answer
verified
D

To secure mobile devices, a company will need to implement special mobile device management software.

Correct Answer
verified

________ identify the access points in a Wi-Fi network.

Correct Answer
verified

Exam 8: Securing Information Systems

________ refers to policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems.

Correct AnswerverifiedShow Answer

According to IT security experts, mobile devices pose greater security risks than larger computers.

Correct AnswerverifiedShow Answer

Evil twins are:

Correct AnswerverifiedShow Answer

Zeus is an example of a Trojan horse.

Correct AnswerverifiedShow Answer

Your company, an online clothing store, has calculated that a loss of Internet connectivity for 5 hours results in a potential loss of $1,000 to $2,000 and that there is a 50% chance of this occurring. What is the annual expected loss from this exposure?

Correct AnswerverifiedShow Answer

Malicious software programs referred to as malware include a variety of threats such as computer viruses, worms, and Trojan horses.

Correct AnswerverifiedShow Answer

An example of phishing is:

Correct AnswerverifiedShow Answer

One form of spoofing involves forging the return address on an email so that the email message appears to come from someone other than the sender.

Correct AnswerverifiedShow Answer

Most computer viruses deliver a:

Correct AnswerverifiedShow Answer

Which of the following statements about wireless security is not true?

Correct AnswerverifiedE

NAT conceals the IP addresses of the organization's internal host computers to deter sniffer programs.

Correct AnswerverifiedShow Answer

Currently, the protocols used for secure information transfer over the Internet are:

Correct AnswerverifiedShow Answer

The Gramm-Leach-Bliley Act:

Correct AnswerverifiedShow Answer

________ controls ensure that valuable business data files on either disk or tape are not subject to unauthorized access, change, or destruction while they are in use or in storage.

Correct AnswerverifiedShow Answer

Hackers and their companion viruses are an increasing problem, especially on the Internet. What are the most important measurers for a firm to take to protect itself from this? Is full protection feasible? Why or why not?

Sniffers enable hackers to steal proprietary information from anywhere on a network, including email messages, company files, and confidential reports.

Correct AnswerverifiedShow Answer

An acceptable use policy defines the acceptable level of access to information assets for different users.

Correct AnswerverifiedShow Answer

________ refers to all of the methods, policies, and organizational procedures that ensure the safety of the organization's assets, the accuracy and reliability of its accounting records, and operational adherence to management standards.

Correct AnswerverifiedD

To secure mobile devices, a company will need to implement special mobile device management software.

Correct AnswerverifiedShow Answer

________ identify the access points in a Wi-Fi network.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
E

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
D

Correct Answer
verified

Correct Answer
verified