Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
Chapter 8
| Question | Answer |
|---|---|
| Which of the following is not an example of a computer used as a target of crime: | Illegally accessing stored electronic communication |
| Comprehensive security management products, with tools for firewalls, VPNs, intrusion detection systems, and more, are called ________ systems. | Unified Threat Management (UTM) |
| _______ is malware that logs and transmits everything a user types. | A keylogger |
| Which of the following specifications replaces WEP with a stronger security standard that features changing encryption keys: | WPA2 |
| The HIPAA Act of 1996: | Outlines medical security and privacy rules. |
| The malicious software programs referred to as spyware include a variety of threats such as computer viruses, worms, and Trojan horses. | False |
| Smartphones have the same security flaws as other internet-connected devices. | True |
| The most common type of electronic evidence is: | |
| The term cracker is used to identify a hacker whose specialty is breaking open security systems. | False |
| ________ refers to all of the methods, policies, and organizational procedures that ensure the safety of the organization's assets, the accuracy and reliability of its accounting records, and operational adherence to management standards. | Controls |
| ________ controls ensure that valuable data files on either disk or tape are not subject to unauthorized access, change, or destruction while they are in use or in storage. | Data security |
| For 100-percent availability, online transaction processing requires: | Fault-tolerant computer systems |
| Public key encryption uses two keys | True |
| Computer forensics tasks include all of the following except: | Collecting physical evidence on the computer |
| NAT conceals the IP addresses of the organization's internal host computers to deter sniffer programs. | True |
| Smartphones typically feature state-of-the-art encryption and security features, making them highly secure tools for businesses. | False |
| Statements ranking information risks and identifying security goals are included in a: | Security policy |
| Viruses can be spread through e-mail. | True |
| A foreign country attempting to access government networks in order to disable a national power grid would be an example of: | Cyberwarfare |
| A digital certificate system: | Uses third-party CA's to validate a user's identity |
| Large amounts of data stored in electronic corm are _______ than the same data in manual form. | Vulnerable to many more kinds of threats. |
| Packet filtering catches most types of network attacks. | False |
| When errors are discovered in software programs, the sources of the errors are found and eliminated through a process called debugging. | True |
| The dispersed nature of cloud computing makes it difficult to track unauthorized access. | True |
| As discussed in the chapter opening case, magnetic stripes are an old technology that is vulnerable to counterfeit and theft. | True |
| Your company, an online discount stationers, has calculated that a loss of internet connectivity for 3 hours results in a potential loss of $2,000 to $3,000 and that there is a 50% of this occurring each year. What is the annual expected loss: | $1,250 |
| Biometric authentication: | Can use a person's voice as a unique, measurable trait |
| Social networking sites have become a new conduit for malware because: | They allow users to post software code |
| The Sarbanes-Oxley Act: | Imposes responsibility on companies and management to safeguard the accuracy of financial information |
| Analysis of an information system that rates the likelihood of a security incident occurring and its cost is included in a: | Risk assessment |
| DoS attacks are used to destroy information and access restricted areas of a company's information system. | False |
| Which of the following statements about the internet security is not true: | VoIP is more secure than the switched voice network. |
| _______ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else. | Identity theft |
| Currently, the protocols used for secure information transfer over the internet are: | SSL, TSL, and S-HTTP |
| All of the following are types of information systems general controls except: | Application controls |
| Application controls: | Can be classified as input controls, processing controls, and output controls |
| Wireless networks are more difficult for hackers to gain access to because radio frequency bands are difficult to scan. | False |
| A computer virus replicates more quickly than a computer worm. | False |
| The Gramm-Leach-Bliley Act: | Requires financial institutions to ensure the security of customer data |
| Tricking employees to reveal their passwords by pretending to be a legitimate member of a company is called: | Social engineering |
| Biometric authentication is the use of personal, biographic details such as the high school you attended and the first street you lived on to provide authentication. | False |
| In controlling network traffic to minimize slow-downs, a technology called _______ is used to examine data files and sort low-priority data from high-priority data. | Deep-packet inspection |
| An authentication system in which a user must provide two types of identification, such as a bank card and PIN, is called: | Two-factor authentication |
| Pharming involves: | Redirecting users to fraudulent websites even when the user has typed in the correct address in the web browser. |
| The internet poses specific security problems because: | It was designed to be easily accessible |
| Sniffers enable hackers to steal proprietary information from anywhere including e-mail messages, company files, and confidential reports. | True |
| How do software vendors correct flaws in their software after it has been distributed? | They issue patches |
| Electronic data are more susceptible to destruction, fraud, error, and misuse because information systems concentrate data in computer files that: | May be accessible by anyone who has access to the same network |
| Evil twins are: | Bogus wireless network access points that look legitimate to users. |
| Smaller firms may outsource some or many security functions to: | MSSPs |
| _______ use scanning software to look for known problems such as bad passwords, the removal of important files, security attacks in progress, and system administrative errors. | Intrusion detection systems |
| An authentication token is a: | Gadget that displays passcodes |
| ________ is malware that hijacks a user's computer and demands payment in return for giving back access. | Ransomware |
| A firewall allows the organization to: | Enforce a security policy on data exchanged |
| ________ identify the access points in a Wi-Fi network. | SSIDs |
| ________ refers to policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems. | Security |
| A salesperson clicks repeatedly on the online ads of a competitor's in order to drive the competitor's advertising costs up. This is an example of: | Click fraud |
| Hackers create a botnet by: | Causing other people's computers to become "zombie" PCs following a master computer |
| Which of the following is not an example of a computer used as an instrument of crime: | Breaching the confidentiality of protected computerized data |
| Using numerous computers to inundate and overwhelm the network from numerous launch points is called a _______ attach. | DDos |
| An acceptable use policy defines the acceptable level of access to information assets for different users. | False |
| Rigorous password systems: | May hinder employee productivity |
| SSL is a protocol used to establish a secure connection between two computers. | True |
| Most antivirus software is effective against: | Only those viruses already known when the software is written |
| In 2013, Panda Security reported approximately 30 million new kinds of malware strains. | True |
| The intentional defacement or destruction of a website is called: | Cybervandalism |
| A practice in which eavesdroppers drive by buildings or park outside and try to intercept wireless network traffic is referred to as: | War driving |
| You can test software before it is even written by conducting a walkthrough. | True |
| A Trojan horse: | Is software that appears to be benign but does something other than expected |
| Which of the following is a type of ambient data: | A file deleted from a hard disk |
| You have been hired as a security consultant for a law firm. Which of the following constitutes the greatest source for network security breaches to the firm: | Employees |
| Which of the following is a virus that uses flaws in windows software to take over a computer remotely: | Conflicker |
| Authentication refers to verifying that a person is who he or she claims to be. | True |
| Organizations can use existing network security software to secure mobile devices. | False |
| Client software in a client/server environment is specifically vulnerable to: | Unauthorized access |
| In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key: | Symmetric key encryption |
Created by:
scottcampbell