Question 1

In controlling network traffic to minimize slow-downs, a technology called ________ is used to examine data files and sort low-priority data from high-priority data.

Accepted Answer

A)   high availability computing
B)   deep-packet inspection
C)   application proxy filtering
D)   stateful inspectionE) A) and B)
F) B) and D)

Question 2

Which of the following statements about the Internet security is not true?

Accepted Answer

A)   The use of P2P networks can expose a corporate computer to outsiders.
B)   A corporate network without access to the Internet is more secure than one provides access.
C)   VoIP is more secure than the switched voice network.
D)   Instant messaging can provide hackers access to an otherwise secure network.E) B) and C)
F) B) and D)

Question 3

The HIPAA Act

Accepted Answer

A)   requires financial institutions to ensure the security of customer data.
B)   specifies best practices in information systems security and control.
C)   imposes responsibility on companies and management to safeguard the accuracy of financial information.
D)   outlines medical security and privacy rules.E) A) and B)
F) A) and C)

Question 4

Biometric authentication is the use of physical characteristics such as retinal images to provide identification.

Accepted Answer

A) True 
 B)False

Question 5

Which of the following is not one of the main firewall screening techniques?

Accepted Answer

A)   application proxy filtering
B)   static packet filtering
C)   NAT
D)   secure socket filteringE) All of the above
F) C) and D)

Question 6

An independent computer program that copies itself from one computer to another over a network is called a

Accepted Answer

A)   worm.
B)   Trojan horse.
C)   bug.
D)   pest.E) B) and D)
F) C) and D)

Question 7

High-availability computing is also referred to as fault tolerance.

Accepted Answer

A) True 
 B)False

Question 8

Smaller firms may outsource some or many security functions to

Accepted Answer

A)   ISPs.
B)   MISs.
C)   MSSPs.
D)   CAs.E) All of the above
F) A) and B)

Question 9

Rigorous password systems

Accepted Answer

A)   are one of the most effective security tools.
B)   may hinder employee productivity.
C)   are costly to implement.
D)   are often disregarded by employees.E) A) and C)
F) A) and D)

Question 10

How is the security of a firm's information system and data affected by its people, organization, and technology? Is the contribution of one of these dimensions any more important than the other? Why?

Accepted Answer

There are various technological essentia...

Question 11

________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

Accepted Answer

The answer of ________ is a crime in which an...

Question 12

________ refers to policies, procedures, and technical measures used to prevent unauthorized access, alternation, theft, or physical damage to information systems.

Accepted Answer

A)   "Security"
B)   "Controls"
C)   "Benchmarking"
D)   "Algorithms"E) B) and C)
F) All of the above

Question 13

How can a firm's security policies contribute and relate to the six main business objectives? Give examples.

Accepted Answer

1. Operational excellence: Security poli...

Question 14

Approximately how many new threats from malware were detected by Internet security firms in 2012?

Accepted Answer

A)   400 thousand
B)   4 million
C)   40 million
D)   400 millionE) None of the above
F) All of the above

Question 15

Inputting data into a poorly programmed Web form in order to disrupt a company's systems and networks is called

Accepted Answer

A)   a Trojan horse.
B)   an SQL injection attack.
C)   key logging.
D)   a DDoS attack.E) A) and D)
F) All of the above

Question 16

Hackers create a botnet by

Accepted Answer

A)   infecting Web search bots with malware.
B)   using Web search bots to infect other computers.
C)   causing other people's computers to become "zombie" PCs following a master computer.
D)   infecting corporate servers with "zombie" Trojan horses that allow undetected access through a back door.E) B) and D)
F) All of the above

Question 17

Electronic data are more susceptible to destruction, fraud, error, and misuse because information systems concentrate data in computer files that

Accepted Answer

A)   are usually bound up in legacy systems that are difficult to access and difficult to correct in case of error.
B)   are not secure because the technology to secure them did not exist at the time the files were created.
C)   have the potential to be accessed by large numbers of people and by groups outside of the organization.
D)   are frequently available on the Internet.E) All of the above
F) A) and D)

Question 18

You have just been hired as a security consultant by MegaMalls Inc., a national chain of retail malls, to make sure that the security of their information systems is up to par. Outline the steps you will take to achieve this.

Accepted Answer

1. Establish what data and processes are...

Question 19

Tricking employees to reveal their passwords by pretending to be a legitimate member of a company is called

Accepted Answer

A)   sniffing.
B)   social engineering.
C)   phishing.
D)   pharming.E) A) and B)
F) B) and C)

Question 20

Public key encryption uses two keys.

Accepted Answer

A) True 
 B)False

Exam 8: Securing Information Systems

Public key encryption uses two keys.

Correct AnswerverifiedShow Answer

Which of the following is not one of the main firewall screening techniques?

Correct AnswerverifiedShow Answer

The HIPAA Act

Correct AnswerverifiedShow Answer

Inputting data into a poorly programmed Web form in order to disrupt a company's systems and networks is called

Correct AnswerverifiedShow Answer

Smaller firms may outsource some or many security functions to

Correct AnswerverifiedShow Answer

An independent computer program that copies itself from one computer to another over a network is called a

Correct AnswerverifiedShow Answer

Hackers create a botnet by

Correct AnswerverifiedShow Answer

Which of the following statements about the Internet security is not true?

Correct AnswerverifiedShow Answer

How can a firm's security policies contribute and relate to the six main business objectives? Give examples.

Correct Answerverified1. Operational excellence: Security poli...View AnswerShow Answer

Biometric authentication is the use of physical characteristics such as retinal images to provide identification.

Correct AnswerverifiedShow Answer

Electronic data are more susceptible to destruction, fraud, error, and misuse because information systems concentrate data in computer files that

Correct AnswerverifiedShow Answer

Tricking employees to reveal their passwords by pretending to be a legitimate member of a company is called

Correct AnswerverifiedShow Answer

In controlling network traffic to minimize slow-downs, a technology called ________ is used to examine data files and sort low-priority data from high-priority data.

Correct AnswerverifiedShow Answer

________ refers to policies, procedures, and technical measures used to prevent unauthorized access, alternation, theft, or physical damage to information systems.

Correct AnswerverifiedShow Answer

Rigorous password systems

Correct AnswerverifiedShow Answer

Approximately how many new threats from malware were detected by Internet security firms in 2012?

Correct AnswerverifiedShow Answer

________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

Correct AnswerverifiedShow Answer

How is the security of a firm's information system and data affected by its people, organization, and technology? Is the contribution of one of these dimensions any more important than the other? Why?

Correct AnswerverifiedThere are various technological essentia...View AnswerShow Answer

You have just been hired as a security consultant by MegaMalls Inc., a national chain of retail malls, to make sure that the security of their information systems is up to par. Outline the steps you will take to achieve this.

Correct Answerverified1. Establish what data and processes are...View AnswerShow Answer

High-availability computing is also referred to as fault tolerance.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
1. Operational excellence: Security poli...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
There are various technological essentia...
View Answer

Correct Answer
verified
1. Establish what data and processes are...
View Answer

Correct Answer
verified