Question 1

Name and describe four firewall screening technologies.

Accepted Answer

There are a number of firewall screening...

Question 2

How does disaster recovery planning differ from business continuity planning?

Accepted Answer

Disaster recovery planning devises plans...

Question 3

The Gramm-Leach-Bliley Act:

Accepted Answer

A)  requires financial institutions to ensure the security of customer data.
B)  specifies best practices in information systems security and control.
C)  imposes responsibility on companies and management to safeguard the accuracy of financial information.
D)  outlines medical security and privacy rules.
E)  identifies computer abuse as a crime and defines abusive activities.F) A) and B)
G) B) and E)

Question 4

Which of the following statements about botnets is not true?

Accepted Answer

A)  Eighty percent of the world's malware is delivered by botnets.
B)  Botnets are often used to perpetrate DDoS attacks.
C)  Ninety percent of the world's spam is delivered by botnets.
D)  Botnets are often used for click fraud.
E)  It is not possible to make a smartphone part of a botnet.F) All of the above
G) C) and E)

Question 5

________ controls ensure that valuable business data files on either disk or tape are not subject to unauthorized access,change,or destruction while they are in use or in storage.

Accepted Answer

A)  Software
B)  Administrative
C)  Data security
D)  Implementation
E)  InputF) A) and D)
G) A) and C)

Question 6

What is a digital certificate? How does it work?

Accepted Answer

Digital certificates are data files used...

Question 7

All of the following are specific security challenges that threaten corporate servers in a client/server environment except:

Accepted Answer

A)  hacking.
B)  malware.
C)  denial-of-service attacks.
D)  sniffing.
E)  vandalism.F) D) and E)
G) A) and B)

Question 8

Authentication refers to verifying that a person is who he or she claims to be.

Accepted Answer

A) True 
 B)False

Question 9

The HIPAA Act of 1996:

Accepted Answer

A)  requires financial institutions to ensure the security of customer data.
B)  specifies best practices in information systems security and control.
C)  imposes responsibility on companies and management to safeguard the accuracy of financial information.
D)  outlines medical security and privacy rules.
E)  identifies computer abuse as a crime and defines abusive activities.F) None of the above
G) B) and D)

Question 10

How can a firm's security policies contribute and relate to the six main business objectives? Give examples.

Accepted Answer

A firm's security policies can contribut...

Question 11

Application controls:

Accepted Answer

A)  can be classified as input controls,processing controls,and output controls.
B)  govern the design,security,and use of computer programs and the security of data files in general throughout the organization.
C)  apply to all computerized applications and consist of a combination of hardware,software,and manual procedures that create an overall control environment.
D)  include software controls,computer operations controls,and implementation controls.
E)  monitor the use of system software and prevent unauthorized access to software and programs.F) A) and B)
G) C) and E)

Question 12

Why is software quality important to security? What specific steps can an organization take to ensure software quality?

Accepted Answer

Software errors pose a constant threat t...

Question 13

Which of the following focuses primarily on the technical issues of keeping systems up and running?

Accepted Answer

A)  Business continuity planning
B)  Security policies
C)  Disaster recovery planning
D)  An AUP
E)  An information systems auditF) B) and C)
G) C) and D)

Question 14

An acceptable use policy defines the acceptable level of access to information assets for different users.

Accepted Answer

A) True 
 B)False

Question 15

Evil twins are:

Accepted Answer

A)  Trojan horses that appears to the user to be a legitimate commercial software application.
B)  e-mail messages that mimic the e-mail messages of a legitimate business.
C)  fraudulent websites that mimic a legitimate business's website.
D)  computers that fraudulently access a website or network using the IP address and identification of an authorized computer.
E)  bogus wireless network access points that look legitimate to users.F) A) and B)
G) D) and E)

Question 16

Public key encryption uses two keys.

Accepted Answer

A) True 
 B)False

Question 17

Which of the following statements about passwords is not true?

Accepted Answer

A)  Authentication cannot be established by the use of a password.
B)  Password systems that are too rigorous may hinder employee productivity.
C)  Passwords can be stolen through social engineering.
D)  Passwords are often disregarded by employees.
E)  Passwords can be sniffed when being transmitted over a network.F) B) and E)
G) A) and E)

Question 18

The term cracker is used to identify a hacker whose specialty is breaking open security systems.

Accepted Answer

A) True 
 B)False

Question 19

Most computer viruses deliver a:

Accepted Answer

A)  worm.
B)  Trojan horse.
C)  driveby download.
D)  keylogger.
E)  payload.F) A) and D)
G) A) and E)

Question 20

Sniffers enable hackers to steal proprietary information from anywhere on a network,including e-mail messages,company files,and confidential reports.

Accepted Answer

A) True 
 B)False

Exam 8: Securing Information Systems

Why is software quality important to security? What specific steps can an organization take to ensure software quality?

Correct AnswerverifiedSoftware errors pose a constant threat t...View AnswerShow Answer

Public key encryption uses two keys.

Correct AnswerverifiedShow Answer

Evil twins are:

Correct AnswerverifiedShow Answer

Most computer viruses deliver a:

Correct AnswerverifiedShow Answer

How does disaster recovery planning differ from business continuity planning?

Correct AnswerverifiedDisaster recovery planning devises plans...View AnswerShow Answer

________ controls ensure that valuable business data files on either disk or tape are not subject to unauthorized access,change,or destruction while they are in use or in storage.

Correct AnswerverifiedShow Answer

Which of the following statements about passwords is not true?

Correct AnswerverifiedShow Answer

Sniffers enable hackers to steal proprietary information from anywhere on a network,including e-mail messages,company files,and confidential reports.

Correct AnswerverifiedShow Answer

Authentication refers to verifying that a person is who he or she claims to be.

Correct AnswerverifiedShow Answer

Application controls:

Correct AnswerverifiedShow Answer

Which of the following focuses primarily on the technical issues of keeping systems up and running?

Correct AnswerverifiedShow Answer

An acceptable use policy defines the acceptable level of access to information assets for different users.

Correct AnswerverifiedShow Answer

What is a digital certificate? How does it work?

Correct AnswerverifiedDigital certificates are data files used...View AnswerShow Answer

The Gramm-Leach-Bliley Act:

Correct AnswerverifiedShow Answer

All of the following are specific security challenges that threaten corporate servers in a client/server environment except:

Correct AnswerverifiedShow Answer

How can a firm's security policies contribute and relate to the six main business objectives? Give examples.

Correct AnswerverifiedA firm's security policies can contribut...View AnswerShow Answer

The term cracker is used to identify a hacker whose specialty is breaking open security systems.

Correct AnswerverifiedShow Answer

The HIPAA Act of 1996:

Correct AnswerverifiedShow Answer

Which of the following statements about botnets is not true?

Correct AnswerverifiedShow Answer

Name and describe four firewall screening technologies.

Correct AnswerverifiedThere are a number of firewall screening...View AnswerShow Answer

Correct Answer
verified
Software errors pose a constant threat t...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Disaster recovery planning devises plans...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Digital certificates are data files used...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
A firm's security policies can contribut...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
There are a number of firewall screening...
View Answer