Question 1

Which of the following statements about Internet security is not true?

Accepted Answer

A)   The use of P2P networks can expose a corporate computer to outsiders.
B)   A corporate network without access to the Internet is more secure than one that provides access.
C)   VoIP is more secure than the switched voice network.
D)   Instant messaging can provide hackers access to an otherwise secure network.
E)   Smartphones have the same security weaknesses as other Internet devices.

Question 2

Is the cloud a safer and more secure computing environment than an in-house network? Why or why not?

Accepted Answer

Student evaluations will vary, but shoul...

Question 3

Comprehensive security management products, with tools for firewalls, VPNs, intrusion detection systems, and more, are called ________ systems.

Accepted Answer

A)   DPI
B)   MSSP
C)   NSP
D)   PKI
E)   UTM

Question 4

What is a digital certificate? How does it work?

Accepted Answer

Digital certificates are data files used...

Question 5

Which of the following statements about passwords is not true?

Accepted Answer

A)   Authentication cannot be established by the use of a password.
B)   Password systems that are too rigorous may hinder employee productivity.
C)   Passwords can be stolen through social engineering.
D)   Passwords are often disregarded by employees.
E)   Passwords can be sniffed when being transmitted over a network.

Question 6

Symmetric encryption uses two keys.

Accepted Answer

A) True 
 B)False

Question 7

All of the following are types of information systems general controls except:

Accepted Answer

A)   application controls.
B)   computer operations controls.
C)   hardware controls.
D)   software controls.
E)   administrative controls.

Question 8

All of the following are specific security challenges that threaten the communications lines in a client/server environment except:

Accepted Answer

A)   errors.
B)   tapping.
C)   theft and fraud.
D)   radiation.
E)   sniffing.

Question 9

________ use scanning software to look for known problems such as bad passwords, the removal of important files, security attacks in progress, and system administration errors.

Accepted Answer

A)   Stateful inspections
B)   Intrusion detection systems
C)   Application proxy filtering technologies
D)   Packet filtering technologies
E)   Firewalls

Question 10

Define computer forensics and describe the types of problems it is designed to address.

Accepted Answer

Computer forensics involves the scientif...

Question 11

As described in the chapter case, which of the following did hackers use to gain access to the DNC network?

Accepted Answer

A)   Trojan horse
B)   Phishing emails
C)   SQL injection attack
D)   Computer worm
E)   Pharming attack

Question 12

When a hacker discovers a security hole in software that is unknown to the software vendor it is an example of:

Accepted Answer

A)   sniffing.
B)   social engineering.
C)   phishing.
D)   zero-day vulnerability
E)   snooping

Question 13

Implementation controls:

Accepted Answer

A)   can be classified as input controls, processing controls, and output controls.
B)   govern the design, security, and use of computer programs and the security of data files in general throughout the organization.
C)   apply to all computerized applications and consist of a combination of hardware, software, and manual procedures that create an overall control environment.
D)   include software controls, computer operations controls, and implementation controls.
E)   Audit the systems development process at various points to ensure that the process is properly controlled and managed.

Question 14

A Trojan horse:

Accepted Answer

A)   is software that appears to be benign but does something other than expected.
B)   is a virus that replicates quickly.
C)   is malware named for a breed of fast-moving Near-Eastern horses.
D)   installs spyware on users' computers.
E)   is a type of sniffer used to infiltrate corporate networks.

Question 15

Which of the following techniques stops data packets originating outside the organization, inspects them, and passes the packets to the other side of an organizations firewall?

Accepted Answer

A)   NAT
B)   Packet filtering
C)   Deep packet inspection
D)   Stateful inspection
E)   Application proxy filtering

Question 16

An analysis of an information system that rates the likelihood of a security incident occurring and its cost would be included in which of the following?

Accepted Answer

A)   Security policy
B)   AUP
C)   Risk assessment
D)   Business impact analysis
E)   Business continuity plan

Question 17

According to Ponemon Institute's 2016 Annual Cost of Cyber Crime Study, the average annualized cost of cybercrime for benchmarked companies in six different countries was approximately:

Accepted Answer

A)   $900,000.
B)   $9 million.
C)   $90 million.
D)   $9 billion.
E)   $90 billion.

Question 18

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

Accepted Answer

A)   SSL/TLS
B)   Symmetric key encryption
C)   Public key encryption
D)   Private key encryption
E)   Distributed encryption

Question 19

In controlling network traffic to minimize slow-downs, a technology called ________ is used to examine data files and sort low-priority data from high-priority data.

Accepted Answer

A)   high availability computing
B)   deep packet inspection
C)   application proxy filtering
D)   stateful inspection
E)   unified threat management

Question 20

Which of the following refers to policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems?

Accepted Answer

A)   Security
B)   Controls
C)   Benchmarking
D)   Algorithms
E)   Identity management

Exam 8: Securing Information Systems

Which of the following refers to policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems?

Correct AnswerverifiedShow Answer

An analysis of an information system that rates the likelihood of a security incident occurring and its cost would be included in which of the following?

Correct AnswerverifiedShow Answer

What is a digital certificate? How does it work?

Correct AnswerverifiedDigital certificates are data files used...View AnswerShow Answer

Symmetric encryption uses two keys.

Correct AnswerverifiedShow Answer

Which of the following techniques stops data packets originating outside the organization, inspects them, and passes the packets to the other side of an organizations firewall?

Correct AnswerverifiedShow Answer

As described in the chapter case, which of the following did hackers use to gain access to the DNC network?

Correct AnswerverifiedShow Answer

All of the following are specific security challenges that threaten the communications lines in a client/server environment except:

Correct AnswerverifiedShow Answer

Define computer forensics and describe the types of problems it is designed to address.

Correct AnswerverifiedComputer forensics involves the scientif...View AnswerShow Answer

All of the following are types of information systems general controls except:

Correct AnswerverifiedShow Answer

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

Correct AnswerverifiedShow Answer

When a hacker discovers a security hole in software that is unknown to the software vendor it is an example of:

Correct AnswerverifiedShow Answer

In controlling network traffic to minimize slow-downs, a technology called ________ is used to examine data files and sort low-priority data from high-priority data.

Correct AnswerverifiedShow Answer

According to Ponemon Institute's 2016 Annual Cost of Cyber Crime Study, the average annualized cost of cybercrime for benchmarked companies in six different countries was approximately:

Correct AnswerverifiedShow Answer

Is the cloud a safer and more secure computing environment than an in-house network? Why or why not?

Correct AnswerverifiedStudent evaluations will vary, but shoul...View AnswerShow Answer

Comprehensive security management products, with tools for firewalls, VPNs, intrusion detection systems, and more, are called ________ systems.

Correct AnswerverifiedShow Answer

Which of the following statements about Internet security is not true?

Correct AnswerverifiedShow Answer

A Trojan horse:

Correct AnswerverifiedShow Answer

Which of the following statements about passwords is not true?

Correct AnswerverifiedShow Answer

________ use scanning software to look for known problems such as bad passwords, the removal of important files, security attacks in progress, and system administration errors.

Correct AnswerverifiedShow Answer

Implementation controls:

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Digital certificates are data files used...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Computer forensics involves the scientif...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Student evaluations will vary, but shoul...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified