Advertisement Upgrade to remove ads

The potential for unauthorized access is usually limited to the communications lines of a network.

FALSE

Computers using cable modems to connect to the Internet are more open to penetration than those connecting via dial-up.

TRUE

Wireless networks are vulnerable to penetration because radio frequency bands are easy to scan.

TRUE

) The range of Wi-Fi networks can be extended up to two miles by using external antennae.

FALSE

The WEP specification calls for an access point and its users to share the same 40-bit encrypted password.

TRUE

Viruses can be spread through e-mail.

TRUE

Computer worms spread much more rapidly than computer viruses.

TRUE

One form of spoofing involves forging the return address on an e-mail so that the e-mail message appears to come from someone other than the sender.

TRUE

Sniffers enable hackers to steal proprietary information from anywhere on a network, including e-mail messages, company files, and confidential reports.

TRUE

DoS attacks are used to destroy information and access restricted areas of a company's information system.

FALSE

DOS attacks are one of the most economically damaging kinds of computer crime.

TRUE

Zero defects cannot be achieved in larger software programs because fully testing programs that contain thousands of choices and millions of paths would require thousands of years.

TRUE

An acceptable use policy defines the acceptable level of access to information assets for different users.

FALSE

Biometric authentication is the use of physical characteristics such as retinal images to provide identification.

TRUE

Packet filtering catches most types of network attacks.

FALSE

NAT conceals the IP addresses of the organization's internal host computers to deter sniffer programs.

TRUE

SSL is a protocol used to establish a secure connection between two computers.

TRUE

Public key encryption uses two keys.

TRUE

High-availability computing is also referred to as fault tolerance.

FALSE

Smartphones typically feature state-of-the-art encryption and security features, making them highly secure tools for businesses.

FALSE

21) ________ refers to policies, procedures, and technical measures used to prevent unauthorized access, alternation, theft, or physical damage to information systems. A) "Security" B) "Controls" C) "Benchmarking" D) "Algorithms"

A

________ refers to all of the methods, policies, and organizational procedures that ensure the safety of the organization's assets, the accuracy and reliability of its accounting records, and operational adherence to management standard.

Controls

23) Large amounts of data stored in electronic form are ________ than the same data in manual form.

vulnerable to many more kinds of threats

24) Electronic data are more susceptible to destruction, fraud, error, and misuse because information systems concentrate data in computer files that:

have the potential to be accessed by large numbers of people and by groups outside of the organization.

25) Specific security challenges that threaten the communications lines in a client/server environment include:

tapping; sniffing; message alteration; radiation.

26) Specific security challenges that threaten clients in a client/server environment include:

unauthorized access; errors; spyware.

27) Specific security challenges that threaten corporate servers in a client/server environment include:

hacking; vandalism; denial of service attacks.

28) The Internet poses specific security problems because:

it was designed to be easily accessible.

29) Which of the following statements about the Internet security is not true?

VoIP is more secure than the switched voice network.

30) An independent computer program that copies itself from one computer to another over a network is called a:

Worm

31) A salesperson clicks repeatedly on the online ads of a competitor's in order to drive the competitor's advertising costs up. This is an example of:

Click fraud

32) In 2004, ICQ users were enticed by a sales message from a supposed anti-virus vendor. On the vendor's site, a small program called Mitglieder was downloaded to the user's machine. The program enabled outsiders to infiltrate the user's machine. What type of malware is this an example of?

A Trojan horse

33) Redirecting a Web link to a different address is a form of:

spoofing

34) A keylogger is a type of:

spyware

35) Hackers create a botnet by:

C) by causing other people's computers to become "zombie" PCs following a master computer.

36) Using numerous computers to inundate and overwhelm the network from numerous launch points is called a ________ attack.

A) DDoS

37) Which of the following is not an example of a computer used as a target of crime?

C) Illegally accessing stored electronic communication

38) Which of the following is not an example of a computer used as an instrument of crime?

Breaching the confidentiality of protected computerized data

39) Phishing is a form of:

Spoofing

40) An example of phishing is:

setting up a fake medical Web site that asks users for confidential information.

41) Evil twins are:

bogus wireless network access points that look legitimate to users.

42) Pharming involves: redirecting users to a fraudulent Web site even when the user has typed in the correct address in the Web browser.

redirecting users to a fraudulent Web site even when the user has typed in the correct address in the Web browser.

43) You have been hired as a security consultant for a law firm. Which of the following constitutes the greatest source of security threats to the firm?

Employees

44) Tricking employees to reveal their passwords by pretending to be a legitimate member of a company is called:

social engineering

45) How do software vendors correct flaws in their software after it has been distributed?

Issue patches

46) The HIPAA Act of 1997:

outlines medical security and privacy rules.

47) The Gramm-Leach-Bliley Act:

requires financial institutions to ensure the security of customer data.

48) The Sarbanes-Oxley Act:

imposes responsibility on companies and management to safeguard the accuracy of financial information.

49) The most common type of electronic evidence is:

email

50) Electronic evidence on computer storage media that is not visible to the average user is called ________ data.

ambient

51) Application controls:

can be classified as input controls, processing controls and output controls.

52) ________ controls ensure that valuable business data files on either disk or tape are not subject to unauthorized access, change, or destruction while they are in use or in storage.

Data Security

53) Analysis of an information system that rates the likelihood of a security incident occurring and its cost is included in a(n)

Risk assessment

54) Statements ranking information risks and identifying security goals are included in a(n):

Security policy

55) An analysis of the firm's most critical systems and the impact a system's outage would have on the business is included in a(n):

Business impact analysis

56) Rigorous password systems

may hinder employee productivity

57) An authentication token is a(n):

gadget that displays passcodes

58) Biometric authentication:

can use a person's voice as a unique trait

59) A firewall allows the organization to:

enforce a security policy on traffic between its network and the Internet.

60) In which technique are network communications are analyzed to see whether packets are part of an ongoing dialogue between a sender and a receiver?

Stateful inspection

61) ________ use scanning software to look for known problems such as bad passwords, the removal of important files, security attacks in progress, and system administration errors.

Intrusion detection systems

62) Currently, the protocols used for secure information transfer over the Internet are:

SSL, TLS, and S-HTTP.

63) Most antivirus software is effective against:

only those viruses already known when the software is written.

64) In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

Symmetric key encryption

65) A digital certificate system:

uses third-party CAs to validate a user's identity.

66) Downtime refers to periods of time in which a:

computer system is not operational.

67) For 100% availability, online transaction processing requires:

fault-tolerant computer systems.

68) In controlling network traffic to minimize slow-downs, a technology called ________ is used to examine data files and sort low-priority data from high-priority data.

deep packet inspection

69) The development and use of methods to make computer systems resume their activities more quickly after mishaps is called:

recovery oriented computing

70) Smaller firms may outsource some or many security functions to:

ISPs

71) A practice in which eavesdroppers drive by buildings or park outside and try to intercept wireless network traffic is referred to as ________.

war driving

72) Malicious software programs referred to as ________ include a variety of threats such as computer viruses, worms, and Trojan horses.

malware

73) ________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

Identity theft

74) ________ is the scientific collection, examination, authentication, preservation, and analysis of data held on or retrieved from computer storage media in such a way that the information can be used as evidence in a court of law.

Computer forensics

75) On the whole, ________ controls apply to all computerized applications and consist of a combination of hardware, software, and manual procedures that create an overall control environment.

general

76) A(n) ________ examines the firm's overall security environment as well as the controls governing individual information systems.

MIS audit

77) ________ refers to the ability to know that a person is who he or she claims to be.

Authentication

78) Comprehensive security management products, with tools for firewalls, VPNs, intrusion detection systems, and more, are called ________ systems.

unified threat management

79) PKI is the use of public key cryptography working with a(n) ________.

certificate authority

80) When errors are discovered in software programs, the sources of the errors are found and eliminated through a process called ________.

debugging

Please allow access to your computer’s microphone to use Voice Recording.

Having trouble? Click here for help.

We can’t access your microphone!

Click the icon above to update your browser permissions above and try again

Example:

Reload the page to try again!

Reload

Press Cmd-0 to reset your zoom

Press Ctrl-0 to reset your zoom

It looks like your browser might be zoomed in or out. Your browser needs to be zoomed to a normal size to record audio.

Please upgrade Flash or install Chrome
to use Voice Recording.

For more help, see our troubleshooting page.

Your microphone is muted

For help fixing this issue, see this FAQ.

Star this term

You can study starred terms together

NEW! Voice Recording

Create Set