Question 1

Smartphones do not have the same security flaws as other Internet-connected devices.

Accepted Answer

A) True 
 B)False

Question 2

Computer forensics tasks include all of the following except:

Accepted Answer

A)  presenting collected evidence in a court of law.
B)  securely storing recovered electronic data.
C)  collecting physical evidence on the computer.
D)  finding significant information in a large volume of electronic data.
E)  recovering data from computers while preserving evidential integrity.

Question 3

An authentication system in which a user must provide two types of identification,such as a bank card and PIN,is called:

Accepted Answer

A)  smart card authentication.
B)  biometric authentication.
C)  two-factor authentication.
D)  symmetric key authorization.
E)  token authentication.

Question 4

All of the following are currently being used as traits that can be profiled by biometric authentication except:

Accepted Answer

A)  fingerprints.
B)  facial characteristics.
C)  body odor.
D)  retinal images.
E)  voice.

Question 5

Which of the following techniques stops data packets originating outside the organization,inspects them,and passes the packets to the other side of an organization's firewall?

Accepted Answer

A)  NAT
B)  Packet filtering
C)  Deep packet inspection
D)  Stateful inspection
E)  Application proxy filtering

Question 6

The Sarbanes-Oxley Act:

Accepted Answer

A)  requires financial institutions to ensure the security of customer data.
B)  specifies best practices in information systems security and control.
C)  imposes responsibility on companies and management to safeguard the accuracy of financial information.
D)  outlines medical security and privacy rules.
E)  identifies computer abuse as a crime and defines abusive activities.

Question 7

A computer worm is a program that can copy itself to other computers on the network.

Accepted Answer

A) True 
 B)False

Question 8

Your company,an online discount pet supply store,has calculated that a loss of Internet connectivity for 3 hours results in a potential loss of $2,000 to $3,000 and that there is a 50% chance of this occurring each year.What is the annual expected loss from this exposure?

Accepted Answer

A)  $500
B)  $1,000
C)  $1,250
D)  $1,500
E)  $2,500

Question 9

All of the following have contributed to an increase in software flaws except:

Accepted Answer

A)  the growing complexity of software programs.
B)  the growing size of software programs.
C)  demands for timely delivery to markets.
D)  the inability to fully test programs.
E)  the increase in the number of computer hackers in the world.

Question 10

A foreign country attempting to access government networks in order to disable a national power grid is an example of:

Accepted Answer

A)  phishing.
B)  denial-of-service attacks.
C)  cyberwarfare.
D)  cyberterrorism.
E)  evil twins.

Question 11

Most IoT devices support sophisticated security approaches.

Accepted Answer

A) True 
 B)False

Question 12

Which of the following statements about botnets is not true?

Accepted Answer

A)  Eighty percent of the world's malware is delivered by botnets.
B)  Botnets are often used to perpetrate DDoS attacks.
C)  Ninety percent of the world's spam is delivered by botnets.
D)  Botnets are often used for click fraud.
E)  It is not possible to make a smartphone part of a botnet.

Question 13

Currently,the protocols used for secure information transfer over the Internet are:

Accepted Answer

A)  TCP/IP and SSL.
B)  S-HTTP and CA.
C)  HTTP and TCP/IP.
D)  S-HTTP and SHTML.
E)  SSL,TLS,and S-HTTP.

Question 14

All of the following are types of information systems general controls except:

Accepted Answer

A)  application controls.
B)  computer operations controls.
C)  hardware controls.
D)  software controls.
E)  administrative controls.

Question 15

Which of the following statements about Internet security is not true?

Accepted Answer

A)  The use of P2P networks can expose a corporate computer to outsiders.
B)  A corporate network without access to the Internet is more secure than one that provides access.
C)  Wi-Fi networks are not vulnerable to security breaches.
D)  Instant messaging can provide hackers access to an otherwise secure network.
E)  Smartphones have the same security weaknesses as other Internet devices.

Question 16

A firewall allows the organization to:

Accepted Answer

A)  enforce a security policy on data exchanged between its network and the Internet.
B)  check the accuracy of all transactions between its network and the Internet.
C)  create an enterprise system on the Internet.
D)  check the content of all incoming and outgoing email messages.
E)  create access rules for a network.

Question 17

The Gramm-Leach-Bliley Act:

Accepted Answer

A)  requires financial institutions to ensure the security of customer data.
B)  specifies best practices in information systems security and control.
C)  imposes responsibility on companies and management to safeguard the accuracy of financial information.
D)  outlines medical security and privacy rules.
E)  identifies computer abuse as a crime and defines abusive activities.

Question 18

When hackers gain access to a database containing your personal private information,this is an example of:

Accepted Answer

A)  phishing.
B)  spoofing.
C)  social engineering.
D)  identity theft.
E)  pharming.

Question 19

As described in the chapter case,which of the following did hackers use to gain access to the Democratic National Committee (DNC) network?

Accepted Answer

A)  Trojan horse
B)  Phishing emails
C)  SQL injection attack
D)  Computer worm
E)  Pharming attack

Question 20

Which of the following is a type of ambient data?

Accepted Answer

A)  Computer log containing recent system errors
B)  A file deleted from a hard disk
C)  A file that contains an application's user settings
D)  A set of raw data from an environmental sensor
E)  Data that has been recorded over

Exam 8: Securing Information Systems

The Sarbanes-Oxley Act:

Correct AnswerverifiedShow Answer

All of the following are types of information systems general controls except:

Correct AnswerverifiedShow Answer

Currently,the protocols used for secure information transfer over the Internet are:

Correct AnswerverifiedShow Answer

Smartphones do not have the same security flaws as other Internet-connected devices.

Correct AnswerverifiedShow Answer

When hackers gain access to a database containing your personal private information,this is an example of:

Correct AnswerverifiedShow Answer

Which of the following is a type of ambient data?

Correct AnswerverifiedShow Answer

Your company,an online discount pet supply store,has calculated that a loss of Internet connectivity for 3 hours results in a potential loss of $2,000 to $3,000 and that there is a 50% chance of this occurring each year.What is the annual expected loss from this exposure?

Correct AnswerverifiedShow Answer

Which of the following statements about Internet security is not true?

Correct AnswerverifiedShow Answer

A firewall allows the organization to:

Correct AnswerverifiedShow Answer

A foreign country attempting to access government networks in order to disable a national power grid is an example of:

Correct AnswerverifiedShow Answer

A computer worm is a program that can copy itself to other computers on the network.

Correct AnswerverifiedShow Answer

Computer forensics tasks include all of the following except:

Correct AnswerverifiedShow Answer

Most IoT devices support sophisticated security approaches.

Correct AnswerverifiedShow Answer

As described in the chapter case,which of the following did hackers use to gain access to the Democratic National Committee (DNC) network?

Correct AnswerverifiedShow Answer

Which of the following statements about botnets is not true?

Correct AnswerverifiedShow Answer

All of the following have contributed to an increase in software flaws except:

Correct AnswerverifiedShow Answer

All of the following are currently being used as traits that can be profiled by biometric authentication except:

Correct AnswerverifiedShow Answer

An authentication system in which a user must provide two types of identification,such as a bank card and PIN,is called:

Correct AnswerverifiedShow Answer

The Gramm-Leach-Bliley Act:

Correct AnswerverifiedShow Answer

Which of the following techniques stops data packets originating outside the organization,inspects them,and passes the packets to the other side of an organization's firewall?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified