Question 1

Improper data disclosure and data damage and loss are possible consequences of an SQL injection attack.

Accepted Answer

A) True 
 B)False

Question 2

Most spyware programs are benign in that they do not perform malicious acts or steal data.

Accepted Answer

A) True 
 B)False

Question 3

Which of the following is considered a threat caused by human error?

Accepted Answer

A)  An employee inadvertently installs an old database on top of the current one.
B)  An employee intentionally destroys data and system components.
C)  A virus and worm writer infects computer systems.
D)  A hacker breaks into a system to steal for financial gain.E) C) and D)
F) All of the above

Question 4

You are transferring funds online through the Web site of a reputed bank.Which of the following displayed in your browser's address bar will let you know that the bank is using the SSL protocol?

Accepted Answer

A)  http
B)  www
C)  https
D)  .comE) A) and C)
F) A) and D)

Question 5

Brute force requires only 2 days to crack a password having a mixture of upper and lowercase letters, numbers, and special characters.

Accepted Answer

A) True 
 B)False

Question 6

The process of hardening is actually a ________ safeguard.

Accepted Answer

A)  multiple
B)  financial
C)  technical
D)  physicalE) B) and D)
F) B) and C)

Question 7

The computers that run the DBMS and all devices that store database data should reside in locked, controlled-access facilities.This is done to achieve ________.

Accepted Answer

A)  network security
B)  spoofing
C)  brute force
D)  physical securityE) C) and D)
F) All of the above

Question 8

With ________ encryption, the sender and receiver transmit a message using the same key.

Accepted Answer

A)  asymmetric
B)  coaxial
C)  symmetric
D)  collinearE) A) and B)
F) A) and C)

Question 9

A ________ is a type of virus that propagates using the Internet or other computer networks.

Accepted Answer

A)  worm
B)  sniffer
C)  Trojan horse
D)  phisherE) A) and B)
F) B) and C)

Question 10

In symmetric encryption, two different keys are used to encode and decode a message.

Accepted Answer

A) True 
 B)False

Question 11

Which of the following statements is true of biometric identification?

Accepted Answer

A)  It involves the use of a PIN for authentication.
B)  It provides weak authentication.
C)  It is a relatively inexpensive mode of authentication.
D)  It often faces resistance from users for its invasive nature.E) A) and B)
F) All of the above

Question 12

Which of the following is used for biometric authentication?

Accepted Answer

A)  smart cards
B)  facial features
C)  passwords
D)  personal identification numbersE) B) and D)
F) A) and C)

Question 13

An SQL ________ occurs when users enter an SQL statement into a form in which they are supposed to enter a name or other data.

Accepted Answer

A)  password attack
B)  data attack
C)  brute attack
D)  injection attackE) A) and B)
F) C) and D)

Question 14

When referring to security threats, pretexting, sniffing, spoofing, and phishing are all examples of ________.

Accepted Answer

A)  unauthorized data disclosure
B)  incorrect data modification
C)  faulty services
D)  loss of infrastructureE) A) and C)
F) C) and D)

Question 15

________ are small files that your browser stores on your computer when you visit Web sites and enable you to access Web sites without having to sign in every time.

Accepted Answer

A)  Cookies
B)  Registers
C)  Pop-ups
D)  Public keysE) None of the above
F) A) and B)

Question 16

Symmetric encryption is simpler and much faster than asymmetric encryption.

Accepted Answer

A) True 
 B)False

Question 17

Which of the following systems procedures is specifically the responsibility of operations personnel?

Accepted Answer

A)  creating back up data on one's personal computer
B)  using systems to perform job tasks
C)  creating back up system databases
D)  knowing whom to contact when a security breach occursE) B) and C)
F) A) and D)

Question 18

________ protect databases and other organizational data.

Accepted Answer

A)  Databots
B)  Payloads
C)  Data safeguards
D)  Data stringsE) A) and B)
F) A) and C)

Question 19

Usurpation occurs when computer criminals invade a computer system and replace legitimate programs with their own unauthorized ones.

Accepted Answer

A) True 
 B)False

Question 20

Phishing is a technique for intercepting computer communications.

Accepted Answer

A) True 
 B)False

Exam 12: Information Security Management

The computers that run the DBMS and all devices that store database data should reside in locked, controlled-access facilities.This is done to achieve ________.

Correct AnswerverifiedShow Answer

Which of the following statements is true of biometric identification?

Correct AnswerverifiedShow Answer

Most spyware programs are benign in that they do not perform malicious acts or steal data.

Correct AnswerverifiedShow Answer

Improper data disclosure and data damage and loss are possible consequences of an SQL injection attack.

Correct AnswerverifiedShow Answer

Symmetric encryption is simpler and much faster than asymmetric encryption.

Correct AnswerverifiedShow Answer

Phishing is a technique for intercepting computer communications.

Correct AnswerverifiedShow Answer

The process of hardening is actually a ________ safeguard.

Correct AnswerverifiedShow Answer

An SQL ________ occurs when users enter an SQL statement into a form in which they are supposed to enter a name or other data.

Correct AnswerverifiedShow Answer

________ protect databases and other organizational data.

Correct AnswerverifiedShow Answer

With ________ encryption, the sender and receiver transmit a message using the same key.

Correct AnswerverifiedShow Answer

When referring to security threats, pretexting, sniffing, spoofing, and phishing are all examples of ________.

Correct AnswerverifiedShow Answer

________ are small files that your browser stores on your computer when you visit Web sites and enable you to access Web sites without having to sign in every time.

Correct AnswerverifiedShow Answer

Which of the following is considered a threat caused by human error?

Correct AnswerverifiedShow Answer

Brute force requires only 2 days to crack a password having a mixture of upper and lowercase letters, numbers, and special characters.

Correct AnswerverifiedShow Answer

In symmetric encryption, two different keys are used to encode and decode a message.

Correct AnswerverifiedShow Answer

Usurpation occurs when computer criminals invade a computer system and replace legitimate programs with their own unauthorized ones.

Correct AnswerverifiedShow Answer

You are transferring funds online through the Web site of a reputed bank.Which of the following displayed in your browser's address bar will let you know that the bank is using the SSL protocol?

Correct AnswerverifiedShow Answer

Which of the following is used for biometric authentication?

Correct AnswerverifiedShow Answer

A ________ is a type of virus that propagates using the Internet or other computer networks.

Correct AnswerverifiedShow Answer

Which of the following systems procedures is specifically the responsibility of operations personnel?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified