Study sets, textbooks, questions
Upgrade to remove ads
ISM3004 802Quizzes Ch 8 Review Questions
Terms in this set (50)
For 100-percent availability, online transaction processing requires:
fault-tolerant computer systems.
Which of the following refers to all of the methods, policies, and organizational procedures that ensure the safety of the organization's assets, the accuracy and reliability of its accounting records, and operational adherence to management standards?
Which of the following refers to eavesdroppers driving by buildings or parking outside and trying to intercept wireless network traffic?
All of the following are currently being used as traits that can be profiled by biometric authentication except:
A foreign country attempting to access government networks in order to disable a national power grid is an example of:
The intentional defacement or destruction of a website is called:
Using numerous computers to inundate and overwhelm the network from numerous launch points is called a(n) ________ attack.
________ identify the access points in a Wi-Fi network.
Comprehensive security management products, with tools for firewalls, VPNs, intrusion detection systems, and more, are called ________ systems.
Which of the following statements about passwords is not true?
Passwords are often disregarded by employees.
According to the 2016 Identity Fraud Study by Javelin Strategy & Research, how much did consumers lose to identity fraud in 2015?
________ is malware that hijacks a user's computer and demands payment in return for giving back access.
Which of the following focuses primarily on the technical issues of keeping systems up and running?
Disaster recovery planning
A firewall allows the organization to:
enforce a security policy on data exchanged between its network and the Internet.
________ use scanning software to look for known problems such as bad passwords, the removal of important files, security attacks in progress, and system administration errors.
Intrusion detection systems
Which of the following defines acceptable uses of a firm's information resources and computing equipment?
________ controls ensure that valuable business data files on either disk or tape are not subject to unauthorized access, change, or destruction while they are in use or in storage.
All of the following are types of information systems general controls except:
Which of the following is not an example of a computer used as an instrument of crime?
Theft of trade secrets
Which of the following is the most common type of electronic evidence?
Which of the following specifications replaced WEP with a stronger security standard that features changing encryption keys?
Tricking employees into revealing their passwords by pretending to be a legitimate member of a company is called:
redirecting users to a fraudulent website even when the user has typed in the correct address in the web browser.
Which of the following is a virus that uses flaws in Windows software to take over a computer remotely?
In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?
Symmetric key encryption
All of the following have contributed to an increase in software flaws except:
the increase in malicious intruders seeking system access.
Which of the following is the single greatest cause of network security breaches?
User lack of knowledge
Which of the following statements about botnets is not true?
It is not possible to make a smartphone part of a botnet.
Which of the following is not an example of a computer used as a target of crime?
Illegally accessing stored electronic communication
A Trojan horse:
is software that appears to be benign but does something other than expected.
A digital certificate system:
uses third-party CAs to validate a user's identity.
________ is malware that logs and transmits everything a user types.
A statement ranking information risks and identifying security goals would be included in which of the following?
Which of the following statements about wireless security is not true?
Bluetooth is the only wireless technology that is not susceptible to hacking by eavesdroppers.
Which of the following refers to policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems?
Your company, an online discount pet supply store, has calculated that a loss of Internet connectivity for 3 hours results in a potential loss of $2,000 to $3,000 and that there is a 50% chance of this occurring each year. What is the annual expected loss from this exposure?
The HIPAA Act of 1996:
outlines medical security and privacy rules.
An authentication system in which a user must provide two types of identification, such as a bank card and PIN, is called:
A salesperson clicks repeatedly on the online ads of a competitor in order to drive the competitor's advertising costs up. This is an example of:
In controlling network traffic to minimize slow-downs, a technology called ________ is used to examine data files and sort low-priority data from high-priority data.
deep packet inspection
An authentication token is a(n):
gadget that displays passcodes.
According to Ponemon Institute's 2015 Annual Cost of Cyber Crime Study, the average annualized cost of cybercrime for companies in the United States was approximately:
Evil twins are:
bogus wireless network access points that look legitimate to users.
Computer forensics tasks include all of the following except:
collecting physical evidence on the computer.
________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.
Most computer viruses deliver a:
The Sarbanes-Oxley Act:
imposes responsibility on companies and management to safeguard the accuracy of financial information.
All of the following are specific security challenges that threaten the communications lines in a client/server environment except:
Which of the following statements about Internet security is not true?
VoIP is more secure than the switched voice network.
All of the following are specific security challenges that threaten corporate servers in a client/server environment except:
Other sets by this creator
GEB4375 800 Chapter Four Quiz Search
GEB4375 800 Chapter Three Quiz
GEB4375 800 Chapter Two Quiz
GEB4375 800 Chapter One