Question 1

Dumpster diving refers to physically trawling through trash to mine any valuable data or insights that can be stolen or used in a security attack.

Accepted Answer

A) True 
 B)False

Question 2

Updates that plug existing holes in a software are called:

Accepted Answer

A)   patches.
B)   adware.
C)   maculations.
D)   keys.
E)   cracks. A

Question 3

Organized crime networks now have their own R&D labs and are engaged in sophisticated development efforts to piece together methods to thwart current security measures.

Accepted Answer

A) True 
 B)False

Question 4

A vast majority of security breaches are not preventable and happen despite the best security practices.

Accepted Answer

A) True 
 B)False

Question 5

Which of the following could be one of the ways firms lockdown personnel hardware?

Accepted Answer

A)   Mandate the use of industry-standard software alone on company hardware
B)   Implement frequent overhaul of hardware
C)   Dispose of used hardware after annual audits
D)   Regularly initiate software auditing
E)   Regularly reimage the hard-drives of end user PCs

Question 6

A bank customer receives a message, ostensibly from the bank's Web site, asking her to provide her login information. Assuming the message is intended to defraud the customer, what type of infiltration technique is being used here?

Accepted Answer

A)   Spyware
B)   Malware
C)   Social engineering
D)   Phishing
E)   Virus infections

Question 7

A domain name service is a collection of software that:

Accepted Answer

A)   allots domain names to different Web sites.
B)   assigns IP addresses to different systems.
C)   directs the flow of traffic across the Internet.
D)   maintains a registry of different IP addresses.
E)   maps an Internet address to an IP address.

Question 8

The typical Web user has 6.5 passwords, each of which is used at four sites, on average.

Accepted Answer

A) True 
 B)False

Question 9

The information systems of several firms have been compromised by contract employees,cleaning staff, and temporary staffers.

Accepted Answer

A) True 
 B)False

Question 10

It should be evident from the TJX example that:

Accepted Answer

A)   security breaches are not as damaging to companies as other crimes are.
B)   industry guidelines for information security are not suitable for everyone and should be made optional.
C)   information security must be a top organizational priority.
D)   skimping on liability insurance to cover for financial losses from security breaches is not advisable.
E)   with a little effort and resources, it is possible to make any security system hundred percent foolproof.

Question 11

One of the reasons organizations delay patches to plug holes in their security applications is:

Accepted Answer

A)   the rising cost of labor.
B)   lack of information on effectiveness of patches.
C)   the fear that the new technology contains a change that will cause problems down the road.
D)   redundancy of patches within a short span of time.
E)   bureaucratic inefficiency.

Question 12

Describe briefly how technology can be leveraged to offset the attempts of attackers to undermine information security.

Accepted Answer

Technology plays a most important role i...

Question 13

Conforming to industry-standard guidelines and frameworks for organizational security ensures continued immunity from attacks on an organization's information.

Accepted Answer

A) True 
 B)False

Question 14

In public-key encryption systems, the functions of the public and private keys are interchangeable.

Accepted Answer

A) True 
 B)False

Question 15

An organization's partner firms that should be regularly audited to ensure that they are compliant with security frameworks include:

Accepted Answer

A)   clients.
B)   technology providers and contract firms.
C)   law-enforcement agencies.
D)   government regulatory bodies.
E)   international standards organizations.

Question 16

Which of the following statements is consistent with ground realities regarding information security?

Accepted Answer

A)   Cyber-crime is not yet considered a serious enough threat to warrant the attention of law-enforcement agencies.
B)   Law-enforcement agencies are well-resourced to fight cyber-crimes effectively.
C)   Governments usually outmatch private industry in terms of retaining top talent with incentives and generous pay.
D)   Law-enforcement agencies employ technically inept employees who are incapable of keeping pace with today's cyber-criminals.
E)   Cyber-crime is not rewarding in terms of financial gain. D

Question 17

Spyware is defined as a type of software that:

Accepted Answer

A)   clogs up network traffic and disables networks.
B)   monitors user actions or scans for files surreptitiously.
C)   infects other software and decreases the network speeds.
D)   serves up unwanted advertisements after being installed without user knowledge.
E)   scans for loopholes in other software and releases malware payloads.

Question 18

Regularly updated software lowers a system's vulnerable attack surface.

Accepted Answer

A) True 
 B)False  True

Question 19

Technologies that measure and analyze human body characteristics for identification or authentication are known as _____.

Accepted Answer

A)   overlamination processes
B)   biometrics
C)   smart tags
D)   bio-embedded systems
E)   holographs

Question 20

Even the best implemented encryption programs have not been immune to brute-force attacks by hackers.

Accepted Answer

A) True 
 B)False

Exam 14: Information Security: Barbarians at the Gateway and Just About Everywhere Else

Dumpster diving refers to physically trawling through trash to mine any valuable data or insights that can be stolen or used in a security attack.

Correct AnswerverifiedShow Answer

Updates that plug existing holes in a software are called:

Correct AnswerverifiedA

Organized crime networks now have their own R&D labs and are engaged in sophisticated development efforts to piece together methods to thwart current security measures.

Correct AnswerverifiedShow Answer

A vast majority of security breaches are not preventable and happen despite the best security practices.

Correct AnswerverifiedShow Answer

Which of the following could be one of the ways firms lockdown personnel hardware?

Correct AnswerverifiedShow Answer

A bank customer receives a message, ostensibly from the bank's Web site, asking her to provide her login information. Assuming the message is intended to defraud the customer, what type of infiltration technique is being used here?

Correct AnswerverifiedShow Answer

A domain name service is a collection of software that:

Correct AnswerverifiedShow Answer

The typical Web user has 6.5 passwords, each of which is used at four sites, on average.

Correct AnswerverifiedShow Answer

The information systems of several firms have been compromised by contract employees,cleaning staff, and temporary staffers.

Correct AnswerverifiedShow Answer

It should be evident from the TJX example that:

Correct AnswerverifiedShow Answer

One of the reasons organizations delay patches to plug holes in their security applications is:

Correct AnswerverifiedShow Answer

Describe briefly how technology can be leveraged to offset the attempts of attackers to undermine information security.

Correct AnswerverifiedTechnology plays a most important role i...View AnswerShow Answer

Conforming to industry-standard guidelines and frameworks for organizational security ensures continued immunity from attacks on an organization's information.

Correct AnswerverifiedShow Answer

In public-key encryption systems, the functions of the public and private keys are interchangeable.

Correct AnswerverifiedShow Answer

An organization's partner firms that should be regularly audited to ensure that they are compliant with security frameworks include:

Correct AnswerverifiedShow Answer

Which of the following statements is consistent with ground realities regarding information security?

Correct AnswerverifiedD

Spyware is defined as a type of software that:

Correct AnswerverifiedShow Answer

Regularly updated software lowers a system's vulnerable attack surface.

Correct AnswerverifiedTrue

Technologies that measure and analyze human body characteristics for identification or authentication are known as _____.

Correct AnswerverifiedShow Answer

Even the best implemented encryption programs have not been immune to brute-force attacks by hackers.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified
A

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Technology plays a most important role i...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
D

Correct Answer
verified

Correct Answer
verified
True

Correct Answer
verified

Correct Answer
verified