Question 1

What is forging of someone's identity for the purpose of fraud?

Accepted Answer

A)  Identity crisis
B)  Identity theft
C)  Ediscovery
D)  All of the aboveE) All of the above
F) A) and B)

Question 2

Multifactor authentication requires more than two means of authentication such as what the user knows (password), what the user has (security token), and what the user is (biometric verification).

Accepted Answer

A) True 
 B)False

Question 3

What requires the user to provide two means of authentication, what the user knows (password) and what the user has (security token) ?

Accepted Answer

A)  Single-factor authentication
B)  Two-factor authentication
C)  Multi-factor authentication
D)  BiometricsE) C) and D)
F) A) and D)

Question 4

Cyberterrorists seek to cause harm to people or to destroy critical systems or information and use the Internet as a weapon of mass destruction.

Accepted Answer

A) True 
 B)False

Question 5

What is the software called that allows Internet advertisers to display advertisements without the consent of the computer user?

Accepted Answer

A)  Sploging
B)  Adware
C)  Spygloss
D)  CPU buzzerE) A) and B)
F) C) and D)

Question 6

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident are called insiders.

Accepted Answer

A) True 
 B)False

Question 7

Confidentiality is the right to be left alone when you want to be, to have control over your own personal possessions, and not to be observed without your consent.

Accepted Answer

A) True 
 B)False

Question 8

Which of the below is not included as a common stipulation an organization would follow when creating an employee monitoring policy?

Accepted Answer

A)  Be as specific as possible stating when and what will be monitored
B)  Do not state the consequences of violating the policy
C)  Always enforce the policy the same for everyone
D)  Expressly communicate that the company reserves the right to monitor all employeesE) C) and D)
F) B) and D)

Question 9

What is a policy that allows employees to use their personal mobile devices and computers to access enterprise data and applications?

Accepted Answer

A)  Cyberbulling
B)  Fair information practices
C)  Click-fraud
D)  Bring Your Own DeviceE) A) and B)
F) A) and C)

Question 10

The most secure procedures combine which of the following authentication and authorization techniques?

Accepted Answer

A)  Something the user knows, such as a user ID and password
B)  Something the user has, such as a smart card or token
C)  Something that is part of the user, such as a fingerprint or voice signature
D)  All of the aboveE) A) and B)
F) C) and D)

Question 11

When studying the figure of the four quadrants of ethical and legal behavior, the goal is for organizations to make decisions in which of the following quadrants?

Accepted Answer

A)  Quadrant IV
B)  Quadrant II and III
C)  Quadrant I
D)  Quadrant IIIE) B) and C)
F) A) and D)

Question 12

What is a method for confirming users' identities?

Accepted Answer

A)  Phishing
B)  Authentication
C)  Authorization
D)  ProgrammingE) None of the above
F) All of the above

Question 13

What is a form of social engineering in which one individual lies to obtain confidential data about another individual?

Accepted Answer

A)  Dumpster texting
B)  Dumpster diving
C)  Trash retrieval
D)  PretextingE) C) and D)
F) None of the above

Question 14

Cyberbullying is a person within the organization who is trusted to monitor, contribute, filter, and guide the social media presence of a company, individual, product, or brand.

Accepted Answer

A) True 
 B)False

Question 15

What is the abuse of pay-per-click, pay-per-call, and pay-per-conversion revenue models by repeatedly clicking on a link to increase charges or costs for the advertiser?

Accepted Answer

A)  Cyberbulling
B)  Cybervandalism
C)  Click-fraud
D)  Competitive click-fraudE) A) and D)
F) All of the above

Question 16

A firewall scrambles information into an alternative form that requires a key or password to decrypt.

Accepted Answer

A) True 
 B)False

Question 17

What is the science that studies encryption, which is the hiding of messages so that only the sender and receiver can read them?

Accepted Answer

A)  Digital certificate
B)  Encryption
C)  Decrypt
D)  CryptographyE) B) and D)
F) All of the above

Question 18

What are experts in technology who use their knowledge to break into computers and networks, for profit or just as a challenge known as?

Accepted Answer

A)  Elevation of privilege
B)  Virus
C)  Hacker
D)  WormE) A) and B)
F) A) and C)

Question 19

Which of the below defines information security?

Accepted Answer

A)  A broad term encompassing the protection of information
B)  Protects information from accidental misuse
C)  Protects information from intentional misuse
D)  All of the aboveE) A) and B)
F) All of the above

Question 20

What is dumpster diving?

Accepted Answer

A)  A form of social engineering in which one individual lies to obtain confidential data about another individual.
B)  A hacker that looks through your trash to find personal information.
C)  Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident.
D)  Malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines.E) B) and C)
F) A) and D)

Exam 4: Ethics and Information Security: MIS Business Concerns

Which of the below defines information security?

Correct AnswerverifiedShow Answer

What is a method for confirming users' identities?

Correct AnswerverifiedShow Answer

What is forging of someone's identity for the purpose of fraud?

Correct AnswerverifiedShow Answer

Which of the below is not included as a common stipulation an organization would follow when creating an employee monitoring policy?

Correct AnswerverifiedShow Answer

Cyberbullying is a person within the organization who is trusted to monitor, contribute, filter, and guide the social media presence of a company, individual, product, or brand.

Correct AnswerverifiedShow Answer

The most secure procedures combine which of the following authentication and authorization techniques?

Correct AnswerverifiedShow Answer

What is the software called that allows Internet advertisers to display advertisements without the consent of the computer user?

Correct AnswerverifiedShow Answer

What is a form of social engineering in which one individual lies to obtain confidential data about another individual?

Correct AnswerverifiedShow Answer

Multifactor authentication requires more than two means of authentication such as what the user knows (password), what the user has (security token), and what the user is (biometric verification).

Correct AnswerverifiedShow Answer

Cyberterrorists seek to cause harm to people or to destroy critical systems or information and use the Internet as a weapon of mass destruction.

Correct AnswerverifiedShow Answer

Confidentiality is the right to be left alone when you want to be, to have control over your own personal possessions, and not to be observed without your consent.

Correct AnswerverifiedShow Answer

A firewall scrambles information into an alternative form that requires a key or password to decrypt.

Correct AnswerverifiedShow Answer

What requires the user to provide two means of authentication, what the user knows (password) and what the user has (security token) ?

Correct AnswerverifiedShow Answer

When studying the figure of the four quadrants of ethical and legal behavior, the goal is for organizations to make decisions in which of the following quadrants?

Correct AnswerverifiedShow Answer

What is the abuse of pay-per-click, pay-per-call, and pay-per-conversion revenue models by repeatedly clicking on a link to increase charges or costs for the advertiser?

Correct AnswerverifiedShow Answer

What is dumpster diving?

Correct AnswerverifiedShow Answer

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident are called insiders.

Correct AnswerverifiedShow Answer

What are experts in technology who use their knowledge to break into computers and networks, for profit or just as a challenge known as?

Correct AnswerverifiedShow Answer

What is a policy that allows employees to use their personal mobile devices and computers to access enterprise data and applications?

Correct AnswerverifiedShow Answer

What is the science that studies encryption, which is the hiding of messages so that only the sender and receiver can read them?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified