Question 1

Which of the following is an example of a way to maintain information security that a company should include in their information security policies?

Accepted Answer

A)   Requiring computer users to log off before leaving for lunch
B)   Never sharing user or password information with anyone
C)   Changing passwords every 30-60 days
D)   All of these choicesE) C) and D)
F) B) and C)

Question 2

Which of the following definitions represents opt-in?

Accepted Answer

A)   A problem that occurs when someone registers purposely misspelled variations of well-known domain names
B)   The theft of a website's name that occurs when someone,posing as a site's administrator,changes the ownership of the domain name assigned to the website to another website owner
C)   Choosing to allow permission to incoming emails
D)   Choosing to deny permission to incoming emailsE) B) and C)
F) C) and D)

Question 3

Single-factor authentication requires the user to provide two means of authentication,what the user knows (password)and what the user has (security token).

Accepted Answer

A) True 
 B)False

Question 4

Which of the following refers to a period of time when a system is unavailable?

Accepted Answer

A)   Downtime
B)   MIS down
C)   Direct data loss
D)   DowntownE) B) and C)
F) B) and D)

Question 5

Teergrubing is an antispamming approach where the receiving computer launches a return attack against the spammer,sending email messages back to the computer that originated the suspected spam.

Accepted Answer

A) True 
 B)False

Question 6

What type of Internet monitoring technique records information about a customer during a Web surfing session such as what websites were visited and how long the visit was,what ads were viewed and what was purchased?

Accepted Answer

A)   Key logger
B)   Stealthware
C)   Clickstream
D)   Web logE) None of the above
F) A) and C)

Question 7

What decodes information?

Accepted Answer

A)   Digital certificate
B)   Encryption
C)   Decryption
D)   CryptographyE) None of the above
F) All of the above

Question 8

What is government attempts to control Internet traffic,thus preventing some material from being viewed by a country's citizens?

Accepted Answer

A)   Typosquatting
B)   Website name stealing
C)   Internet censorship
D)   TeergrubingE) A) and D)
F) A) and C)

Question 9

If an organization implemented only one policy,which one would it want to implement?

Accepted Answer

A)   Information privacy policy
B)   Acceptable use policy
C)   Internet use policy
D)   Ethical computer use policyE) B) and D)
F) None of the above

Question 10

Black-hat hackers work at the request of the system owners to find system vulnerabilities and plug the holes.

Accepted Answer

A) True 
 B)False

Question 11

Which of the below represents the definition of information secrecy?

Accepted Answer

A)   The act of conforming,acquiescing,or yielding information
B)   A method or system of government for information management or control
C)   The category of computer security that addresses the protection of data from unauthorized disclosure and confirmation of data source authenticity
D)   Examines the organizational resource of information and regulates its definitions,uses,values,and distribution,ensuring that it has the types of data/information required to function and grow effectivelyE) A) and D)
F) C) and D)

Question 12

What is a program,when installed on a computer,records every keystroke and mouse click?

Accepted Answer

A)   Key logger software
B)   Spyware
C)   Cookie
D)   AdwareE) All of the above
F) A) and D)

Question 13

What is spyware?

Accepted Answer

A)   A special class of adware that collects data about the user and transmits it over the Internet without the user's knowledge or permission
B)   Experts in technology who use their knowledge to break into computers and computer networks,either for profit or just motivated by the challenge
C)   A computer attack where an attacker accesses a wireless computer network,intercepts data,uses network services,and/or sends attack instructions without entering the office or organization that owns the network
D)   Software that,while purporting to serve some useful function and often fulfilling that function,also allows Internet advertisers to display advertisements without the consent of the computer userE) A) and B)
F) A) and C)

Question 14

The goal of multifactor authentication is to make it difficult for an unauthorized person to gain access to a system because,if one security level is broken,the attacker will still have to break through additional levels.

Accepted Answer

A) True 
 B)False

Question 15

Which of the following describes privacy?

Accepted Answer

A)   The assurance that messages and data are available only to those who are authorized to view them
B)   Policies and procedures that address the ethical use of computers and Internet usage in the business environment
C)   The right to be left alone when you want to be,to have control over your own personal possessions,and to not be observed without your consent
D)   The principles and standards that guide our behavior toward other peopleE) B) and C)
F) A) and D)

Question 16

What is single-factor authentication?

Accepted Answer

A)   The traditional security process,which requires a username and password
B)   Requires the user to provide two means of authentication,what the user knows (password) and what the user has (security token) 
C)   Requires more than two means of authentication such as what the user knows (password) ,what the user has (security token) ,and what the user is (biometric verification) 
D)   The identification of a user based on physical characteristic such as a fingerprint,iris,face,voice or handwritingE) None of the above
F) B) and D)

Question 17

What kind of policy can a company implement that can help diminish the activity of sending unsolicited email?

Accepted Answer

A)   Email privacy policy
B)   Spam policy and procedures
C)   Anti-spam policy
D)   Internet user policyE) A) and C)
F) None of the above

Question 18

What is digital rights management?

Accepted Answer

A)   The unauthorized use,duplication,distribution,or sale of copyrighted software
B)   Refers to the ability of a company to identify,search,gather,seize,or export digital information in responding to a litigation,audit,investigation,or information inquiry
C)   Passed to protect minors from accessing inappropriate material on the Internet
D)   A technological solution that allows publishers to control their digital media to discourage,limit,or prevent illegal copying and distributionE) All of the above
F) B) and D)

Question 19

What is an Internet monitoring technique that captures keystrokes on their journey from the keyboard to the motherboard?

Accepted Answer

A)   Spyware
B)   Web log
C)   Adware
D)   Hardware key loggerE) A) and D)
F) None of the above

Question 20

Denial-of-service attack (DoS)floods a website with so many requests for service that it slows down or crashes the site.

Accepted Answer

A) True 
 B)False

Exam 4: Ethics Information Security: MIS Business Concerns

Black-hat hackers work at the request of the system owners to find system vulnerabilities and plug the holes.

Correct AnswerverifiedShow Answer

What type of Internet monitoring technique records information about a customer during a Web surfing session such as what websites were visited and how long the visit was,what ads were viewed and what was purchased?

Correct AnswerverifiedShow Answer

What is spyware?

Correct AnswerverifiedShow Answer

If an organization implemented only one policy,which one would it want to implement?

Correct AnswerverifiedShow Answer

What is government attempts to control Internet traffic,thus preventing some material from being viewed by a country's citizens?

Correct AnswerverifiedShow Answer

Which of the following describes privacy?

Correct AnswerverifiedShow Answer

Single-factor authentication requires the user to provide two means of authentication,what the user knows (password)and what the user has (security token).

Correct AnswerverifiedShow Answer

Which of the following refers to a period of time when a system is unavailable?

Correct AnswerverifiedShow Answer

What is digital rights management?

Correct AnswerverifiedShow Answer

What is an Internet monitoring technique that captures keystrokes on their journey from the keyboard to the motherboard?

Correct AnswerverifiedShow Answer

What is a program,when installed on a computer,records every keystroke and mouse click?

Correct AnswerverifiedShow Answer

What is single-factor authentication?

Correct AnswerverifiedShow Answer

Teergrubing is an antispamming approach where the receiving computer launches a return attack against the spammer,sending email messages back to the computer that originated the suspected spam.

Correct AnswerverifiedShow Answer

Which of the below represents the definition of information secrecy?

Correct AnswerverifiedShow Answer

The goal of multifactor authentication is to make it difficult for an unauthorized person to gain access to a system because,if one security level is broken,the attacker will still have to break through additional levels.

Correct AnswerverifiedShow Answer

What decodes information?

Correct AnswerverifiedShow Answer

Which of the following definitions represents opt-in?

Correct AnswerverifiedShow Answer

Denial-of-service attack (DoS)floods a website with so many requests for service that it slows down or crashes the site.

Correct AnswerverifiedShow Answer

What kind of policy can a company implement that can help diminish the activity of sending unsolicited email?

Correct AnswerverifiedShow Answer

Which of the following is an example of a way to maintain information security that a company should include in their information security policies?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified