Question 1

Which of the following focuses primarily on the technical issues of keeping systems up and running?

Accepted Answer

A)  Business continuity planning
B)  Security policies
C)  Disaster recovery planning
D)  An AUP
E)  An information systems auditF) D) and E)
G) A) and B)

Question 2

The HIPAA Act of 1996:

Accepted Answer

A)  requires financial institutions to ensure the security of customer data.
B)  specifies best practices in information systems security and control.
C)  imposes responsibility on companies and management to safeguard the accuracy of financial information.
D)  outlines medical security and privacy rules.
E)  identifies computer abuse as a crime and defines abusive activities.F) D) and E)
G) All of the above

Question 3

DoS attacks flood a network server with thousands of requests for service.

Accepted Answer

A) True 
 B)False

Question 4

Which of the following refers to all of the methods,policies,and organizational procedures that ensure the safety of the organization's assets,the accuracy and reliability of its accounting records,and operational adherence to management standards?

Accepted Answer

A)  Legacy systems
B)  SSID standards
C)  Vulnerabilities
D)  Security policy
E)  ControlsF) D) and E)
G) A) and B)

Question 5

What is the role of an information systems audit?

Accepted Answer

An information systems audit examines th...

Question 6

Pharming involves:

Accepted Answer

A)  redirecting users to a fraudulent website even when the user has typed in the correct address in the web browser.
B)  pretending to be a legitimate business's representative in order to garner information about a security system.
C)  setting up fake website to ask users for confidential information.
D)  using emails for threats or harassment.
E)  setting up fake Wi-Fi access points that look as if they are legitimate public networks.F) A) and E)
G) B) and E)

Question 7

Which of the following is an example of a keylogger?

Accepted Answer

A)  Zeus
B)  Conficker
C)  Sasser
D)  ILOVEYOU
E)  CryptolockerF) A) and B)
G) A) and E)

Question 8

An analysis of an information system that rates the likelihood of a security incident occurring and its cost would be included in which of the following?

Accepted Answer

A)  Security policy
B)  AUP
C)  Risk assessment
D)  Business impact analysis
E)  Business continuity planF) None of the above
G) B) and C)

Question 9

When a hacker discovers a security hole in software that is unknown to the software vendor,it is an example of:

Accepted Answer

A)  sniffing.
B)  social engineering.
C)  phishing.
D)  zero-day vulnerability.
E)  snooping.F) C) and D)
G) A) and B)

Question 10

How does disaster recovery planning differ from business continuity planning?

Accepted Answer

Disaster recovery planning devises plans...

Question 11

What are the security challenges faced by wireless networks?

Accepted Answer

Wireless networks are vulnerable because...

Question 12

An employee clicks on a link in an email from what looks like a fellow employee and is taken to a fraudulent web site which asks for personal information is an example of:

Accepted Answer

A)  click fraud.
B)  DDOS attack.
C)  spear phishing.
D)  pharming.
E)  identity theft.F) B) and C)
G) B) and E)

Question 13

A computer virus replicates more quickly than a computer worm.

Accepted Answer

A) True 
 B)False

Question 14

Comprehensive security management products,with tools for firewalls,VPNs,intrusion detection systems,and more,are called ________ systems.

Accepted Answer

A)  DPI
B)  MSSP
C)  NSP
D)  PKI
E)  UTMF) B) and E)
G) None of the above

Question 15

Which of the following is a virus that uses flaws in Windows software to take over a computer remotely?

Accepted Answer

A)  Sasser
B)  Zeus
C)  Cryptolocker
D)  ILOVEYOU
E)  ConfickerF) B) and C)
G) B) and D)

Question 16

A statement ranking information risks and identifying security goals would be included in which of the following?

Accepted Answer

A)  Security policy
B)  AUP
C)  Risk assessment
D)  Business impact analysis
E)  Business continuity planF) B) and C)
G) B) and E)

Question 17

Wireless networks are more difficult for hackers to gain access to because radio frequency bands are difficult to scan.

Accepted Answer

A) True 
 B)False

Question 18

A Trojan horse:

Accepted Answer

A)  is software that appears to be benign but does something other than expected.
B)  is a virus installed as a drive-by download.
C)  is malware named for a breed of fast-moving Near-Eastern horses.
D)  installs spyware on users' computers.
E)  is a type of sniffer used to infiltrate corporate networks.F) C) and D)
G) A) and B)

Question 19

Evil twins are:

Accepted Answer

A)  Trojan horses that appear to the user to be a legitimate commercial software application.
B)  email messages that mimic the email messages of a legitimate business.
C)  fraudulent websites that mimic a legitimate business's website.
D)  computers that fraudulently access a website or network using the IP address and identification of an authorized computer.
E)  bogus wireless network access points that look legitimate to users.F) A) and C)
G) D) and E)

Question 20

Packet filtering catches most types of network attacks.

Accepted Answer

A) True 
 B)False

Exam 8: Securing Information Systems

When a hacker discovers a security hole in software that is unknown to the software vendor,it is an example of:

Correct AnswerverifiedShow Answer

A statement ranking information risks and identifying security goals would be included in which of the following?

Correct AnswerverifiedShow Answer

Comprehensive security management products,with tools for firewalls,VPNs,intrusion detection systems,and more,are called ________ systems.

Correct AnswerverifiedShow Answer

A Trojan horse:

Correct AnswerverifiedShow Answer

Which of the following is a virus that uses flaws in Windows software to take over a computer remotely?

Correct AnswerverifiedShow Answer

Which of the following focuses primarily on the technical issues of keeping systems up and running?

Correct AnswerverifiedShow Answer

An analysis of an information system that rates the likelihood of a security incident occurring and its cost would be included in which of the following?

Correct AnswerverifiedShow Answer

Which of the following refers to all of the methods,policies,and organizational procedures that ensure the safety of the organization's assets,the accuracy and reliability of its accounting records,and operational adherence to management standards?

Correct AnswerverifiedShow Answer

An employee clicks on a link in an email from what looks like a fellow employee and is taken to a fraudulent web site which asks for personal information is an example of:

Correct AnswerverifiedShow Answer

Evil twins are:

Correct AnswerverifiedShow Answer

Packet filtering catches most types of network attacks.

Correct AnswerverifiedShow Answer

What are the security challenges faced by wireless networks?

Correct AnswerverifiedWireless networks are vulnerable because...View AnswerShow Answer

How does disaster recovery planning differ from business continuity planning?

Correct AnswerverifiedDisaster recovery planning devises plans...View AnswerShow Answer

DoS attacks flood a network server with thousands of requests for service.

Correct AnswerverifiedShow Answer

Wireless networks are more difficult for hackers to gain access to because radio frequency bands are difficult to scan.

Correct AnswerverifiedShow Answer

What is the role of an information systems audit?

Correct AnswerverifiedAn information systems audit examines th...View AnswerShow Answer

The HIPAA Act of 1996:

Correct AnswerverifiedShow Answer

Pharming involves:

Correct AnswerverifiedShow Answer

Which of the following is an example of a keylogger?

Correct AnswerverifiedShow Answer

A computer virus replicates more quickly than a computer worm.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Wireless networks are vulnerable because...
View Answer

Correct Answer
verified
Disaster recovery planning devises plans...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
An information systems audit examines th...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified