Question 1

The most secure procedures combine which of the following authentication and authorization techniques?

Accepted Answer

A)   Something the user knows, such as a user ID and password
B)   Something the user has, such as a smart card or token
C)   Something that is part of the user, such as a fingerprint or voice signature
D)   All of theseE) A) and D)
F) B) and C)

Question 2

What is spear phishing?

Accepted Answer

A)   Reroutes requests for legitimate websites to false websites.
B)   A technique to gain personal information for the purpose of identity theft, usually by means of fraudulent emails that look as though they came from legitimate businesses.
C)   A masquerading attack that combines spam with spoofing.
D)   A phishing expedition in which the emails are carefully designed to target a particular person or organization.E) A) and D)
F) C) and D)

Question 3

Which of the following is an example of a way to maintain information security that a company should include in their information security policies?

Accepted Answer

A)   Requiring computer users to log off before leaving for lunch
B)   Never sharing user or password information with anyone
C)   Changing passwords every 30-60 days
D)   All of theseE) All of the above
F) B) and C)

Question 4

Single-factor authentication is the traditional security process, which requires a username and password.

Accepted Answer

A) True 
 B)False

Question 5

Worms are computer viruses that wait for a specific date before executing their instructions.

Accepted Answer

A) True 
 B)False

Question 6

What is a program that secretly takes over another computer for the purpose of launching attacks on other computers?

Accepted Answer

A)   Zombie
B)   Zombie farm
C)   Pharming attack
D)   Time bombE) B) and C)
F) A) and B)

Question 7

What is hardware or software that guards a private network by analyzing incoming and outgoing information for the correct markings?

Accepted Answer

A)   Firewall
B)   Certificate authority
C)   Online certificate
D)   Digital certificateE) A) and B)
F) A) and C)

Question 8

The technique to gain personal information for the purpose of identity theft, often through fraudulent emails that look as though they came from legitimate businesses, is called phishing.

Accepted Answer

A) True 
 B)False

Question 9

Pretexting is a form of social engineering in which one individual lies to obtain confidential data about another individual.

Accepted Answer

A) True 
 B)False

Question 10

What is pretexting?

Accepted Answer

A)   A form of social engineering in which one individual lies to obtain confidential data about another individual.
B)   A hacker looks through your trash to find personal information.
C)   Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident.
D)   Malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines.E) A) and C)
F) A) and D)

Question 11

Which of the following represents the three areas where technology can aid in the defense against information security attacks?

Accepted Answer

A)   Authentication and authorization, prevention and resistance, prevention and response
B)   Authentication and authorization, prevention and response, detection and response
C)   Analyzing and authenticating, prevention and repositioning, detection and response
D)   Authentication and authorization, prevention and resistance, detection and responseE) A) and C)
F) B) and C)

Question 12

Charles Mott works for a company called VeriSign that acts a trusted third party to verify information. One of Charles' largest clients is CheckMd, which holds and authenticates customer reviews of doctors and dentists online and having a third party validating the reviews is critical to CheckMd's success. What type of authentication technique is VeriSign providing for CheckMD?

Accepted Answer

A)   Firewall
B)   Certificate authority
C)   Online certificate
D)   Digital content certificateE) A) and B)
F) A) and C)

Question 13

Describe the relationship between information security policies and an information security plan.

Accepted Answer

Information security policies identify t...

Question 14

Phishing reroutes requests for legitimate websites to false websites.

Accepted Answer

A) True 
 B)False

Question 15

How do prevention and resistance technologies stop intruders from accessing and reading sensitive information?

Accepted Answer

A)   Content filtering, encryption, and firewalls
B)   Calculating, locking, and firewalls
C)   Content prohibiting, and cookies
D)   None of theseE) A) and B)
F) A) and C)

Question 16

What is an insider?

Accepted Answer

A)   A form of social engineering in which one individual lies to obtain confidential data about another individual.
B)   A hacker looks through your trash to find personal information.
C)   Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident.
D)   Malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines.E) All of the above
F) B) and C)

Question 17

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident are called insiders.

Accepted Answer

A) True 
 B)False

Question 18

Organizations address security risks through two lines of defense. The first is people and the second is technology.

Accepted Answer

A) True 
 B)False

Question 19

What is a data file that identifies individuals or organizations online and is comparable to a digital signature?

Accepted Answer

A)   Digital certificate
B)   Encryption
C)   Decrypt
D)   CryptographyE) B) and C)
F) A) and C)

Question 20

A smart card is a device the size of a credit card that contains embedded technology that stores information and small amounts of software, and can act as ________.

Accepted Answer

A)   identification instruments
B)   a form of digital cash
C)   a data storage device
D)   All of theseE) C) and D)
F) B) and C)

Exam 25: Valuing and Storing Organizational Informationdatabases

Worms are computer viruses that wait for a specific date before executing their instructions.

Correct Answer
verified

Correct Answer
verified

Pretexting is a form of social engineering in which one individual lies to obtain confidential data about another individual.

Correct Answer
verified

The most secure procedures combine which of the following authentication and authorization techniques?

Correct Answer
verified

What is pretexting?

Correct Answer
verified

The technique to gain personal information for the purpose of identity theft, often through fraudulent emails that look as though they came from legitimate businesses, is called phishing.

Correct Answer
verified

Which of the following represents the three areas where technology can aid in the defense against information security attacks?

Correct Answer
verified

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident are called insiders.

Correct Answer
verified

What is an insider?

Correct Answer
verified

What is hardware or software that guards a private network by analyzing incoming and outgoing information for the correct markings?

Correct Answer
verified

A smart card is a device the size of a credit card that contains embedded technology that stores information and small amounts of software, and can act as ________.

Correct Answer
verified

Which of the following is an example of a way to maintain information security that a company should include in their information security policies?

Correct Answer
verified

What is spear phishing?

Correct Answer
verified

Describe the relationship between information security policies and an information security plan.

Correct Answer
verified
Information security policies identify t...
View Answer

How do prevention and resistance technologies stop intruders from accessing and reading sensitive information?

Correct Answer
verified

Phishing reroutes requests for legitimate websites to false websites.

Correct Answer
verified

What is a data file that identifies individuals or organizations online and is comparable to a digital signature?

Correct Answer
verified

Single-factor authentication is the traditional security process, which requires a username and password.

Correct Answer
verified

Organizations address security risks through two lines of defense. The first is people and the second is technology.

Correct Answer
verified

What is a program that secretly takes over another computer for the purpose of launching attacks on other computers?

Correct Answer
verified

Exam 25: Valuing and Storing Organizational Informationdatabases

Worms are computer viruses that wait for a specific date before executing their instructions.

Correct AnswerverifiedShow Answer

Correct AnswerverifiedShow Answer

Pretexting is a form of social engineering in which one individual lies to obtain confidential data about another individual.

Correct AnswerverifiedShow Answer

The most secure procedures combine which of the following authentication and authorization techniques?

Correct AnswerverifiedShow Answer

What is pretexting?

Correct AnswerverifiedShow Answer

The technique to gain personal information for the purpose of identity theft, often through fraudulent emails that look as though they came from legitimate businesses, is called phishing.

Correct AnswerverifiedShow Answer

Which of the following represents the three areas where technology can aid in the defense against information security attacks?

Correct AnswerverifiedShow Answer

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident are called insiders.

Correct AnswerverifiedShow Answer

What is an insider?

Correct AnswerverifiedShow Answer

What is hardware or software that guards a private network by analyzing incoming and outgoing information for the correct markings?

Correct AnswerverifiedShow Answer

A smart card is a device the size of a credit card that contains embedded technology that stores information and small amounts of software, and can act as ________.

Correct AnswerverifiedShow Answer

Which of the following is an example of a way to maintain information security that a company should include in their information security policies?

Correct AnswerverifiedShow Answer

What is spear phishing?

Correct AnswerverifiedShow Answer

Describe the relationship between information security policies and an information security plan.

Correct AnswerverifiedInformation security policies identify t...View AnswerShow Answer

How do prevention and resistance technologies stop intruders from accessing and reading sensitive information?

Correct AnswerverifiedShow Answer

Phishing reroutes requests for legitimate websites to false websites.

Correct AnswerverifiedShow Answer

What is a data file that identifies individuals or organizations online and is comparable to a digital signature?

Correct AnswerverifiedShow Answer

Single-factor authentication is the traditional security process, which requires a username and password.

Correct AnswerverifiedShow Answer

Organizations address security risks through two lines of defense. The first is people and the second is technology.

Correct AnswerverifiedShow Answer

What is a program that secretly takes over another computer for the purpose of launching attacks on other computers?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Information security policies identify t...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified