FiltersDone

Question type

Essay

Multiple Choice

Short Answer

True False

Matching

Exam 4: Information Security

Show Answer

Share

---

All types

Filters

Study FlashcardsPractice ExamLearn

Question 31

Multiple Choice

Review LaterAdd Note

Review Later

A(n) _________ is a system that prevents a specific type of information from moving between untrusted networks and private networks.

A) anti-malware system
B) DMZ
C) ERP
D) firewall

Correct Answer

verified

Show Answer

Question 32

Multiple Choice

Review LaterAdd Note

Review Later

_________ is an attack by a programmer developing a system.

A) DoS
B) A phishing attack
C) A Trojan horse
D) Virus

Correct Answer

verified

Show Answer

Question 33

Multiple Choice

Review LaterAdd Note

_________ is a remote attack requiring no user action.

Keystroke loggers and screen scrapers are examples of _________.

_______ is designed to erase information permanently, not to hold it ransom.

A _________ is an intellectual work that is not based on public information.

Social engineers will often pose as real employees or contractors such as exterminators or fire marshals.

If you accept the potential risk, continue operating with no controls, and absorb any damages that occur, you have adopted a risk _________ strategy.

Carelessness using unmanaged devices is _________ and is an _________ mistake.

_________ occur(s) when an attacker either threatens to steal, or actually steals, information from a company and then demands payment for not carrying out a particular act.

Ransomware negatively affected the city of Atlanta in many ways. Which vulnerability was the main cause of the problems?

Whitelisting allows nothing to run unless it is on the whitelist.

___ is a process in which a company identifies the software that it will allow to run on its computers.

Organizations spend a great deal of time and money protecting their information resources. To figure out what needs to be protected and how they are going to protect it, they need to perform risk management. What is the goal of risk management? List and describe the three processes of risk management. How can organizations mitigate risk? Describe a company that has adopted each risk mitigation strategy.

Dyn is a cloud-based internet performance management company that provides virtual private networks for internet websites.

The 2017 Equifax data breach was more damaging to lenders than to consumers.

If a hacker enters a building with an official-looking ID badge. This is considered social engineering.

Authentication occurs after authorization.

What is TRUE of the DarkHotel Group attacks?

___ controls secure the movement of data across networks.