MIS Chapter 8 example #65424

Which of the following refers to policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems?

Which of the following refers to all of the methods, policies, and organizational procedures that ensure the safety of the organization's assets, the accuracy and reliability of its accounting records, and operational adherence to management standards?

Most computer viruses deliver a:

Which of the following statements about wireless security is not true?

All of the following are specific security challenges that threaten the communications lines in a client/server environment except:

All of the following are specific security challenges that threaten corporate servers in a client/server environment except:

All of the following are specific security challenges that threaten corporate systems in a client/server environment except:

CryptoLocker is an example of which of the following?

Which of the following statements about Internet security is not true?

A Trojan horse:

A salesperson clicks repeatedly on the online ads of a competitor in order to drive the competitor's advertising costs up. This is an example of:

Which of the following is a virus that uses flaws in Windows software to take over a computer remotely?

________ is malware that hijacks a user's computer and demands payment in return for giving back access.

________ is malware that logs and transmits everything a user types.

Which of the following statements about botnets is not true?

Using numerous computers to inundate and overwhelm the network from numerous launch points is called a(n) ________ attack.

Which of the following is not an example of a computer used as a target of crime?

Which of the following is not an example of a computer used as an instrument of crime?

Which of the following specifically makes malware distribution and hacker attacks to disable websites a federal crime?

The intentional defacement or destruction of a website is called:

Evil twins are:

Pharming involves:

Which of the following is the single greatest cause of network security breaches?

Tricking employees into revealing their passwords by pretending to be a legitimate member of a company is called:

According to Ponemon Institute's 2015 Annual Cost of Cyber Crime Study, the average annualized cost of cybercrime for companies in the United States was approximately:

Which of the following refers to eavesdroppers driving by buildings or parking outside and trying to intercept wireless network traffic?

________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

________ identify the access points in a Wi-Fi network.

A foreign country attempting to access government networks in order to disable a national power grid is an example of:

According to the 2016 Identity Fraud Study by Javelin Strategy & Research, how much did consumers lose to identity fraud in 2015?

All of the following have contributed to an increase in software flaws except:

Which of the following is an example of a keylogger?

The HIPAA Act of 1996:

The Gramm-Leach-Bliley Act:

The Sarbanes-Oxley Act:

Which of the following is the most common type of electronic evidence?

Which of the following is a type of ambient data?

Computer forensics tasks include all of the following except:

Your company, an online discount pet supply store, has calculated that a loss of Internet connectivity for 3 hours results in a potential loss of $2,000 to $3,000 and that there is a 50% chance of this occurring each year. What is the annual expected loss from this exposure?

Application controls:

________ controls ensure that valuable business data files on either disk or tape are not subject to unauthorized access, change, or destruction while they are in use or in storage.

An analysis of an information system that rates the likelihood of a security incident occurring and its cost would be included in which of the following?

A statement ranking information risks and identifying security goals would be included in which of the following?

Which of the following defines acceptable uses of a firm's information resources and computing equipment?

Which of the following focuses primarily on the technical issues of keeping systems up and running?

Which of the following specifications replaced WEP with a stronger security standard that features changing encryption keys?

Which of the following statements about passwords is not true?

An authentication token is a(n):

All of the following are currently being used as traits that can be profiled by biometric authentication except:

A firewall allows the organization to:

________ use scanning software to look for known problems such as bad passwords, the removal of important files, security attacks in progress, and system administration errors.

Currently, the protocols used for secure information transfer over the Internet are:

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

A digital certificate system:

All of the following are types of information systems general controls except:

For 100-percent availability, online transaction processing requires:

In controlling network traffic to minimize slow-downs, a technology called ________ is used to examine data files and sort low-priority data from high-priority data.

An authentication system in which a user must provide two types of identification, such as a bank card and PIN, is called:

Which of the following provides additional security by determining whether packets are part of an ongoing dialogue between a sender and receiver?

Comprehensive security management products, with tools for firewalls, VPNs, intrusion detection systems, and more, are called ________ systems.