Information Systems Chapter 13

Which of the following is the correct description of a firewall?

Someone who violates computer or Internet security maliciously or for illegal personal gain is known as a(n) _______.

In a denial-of-service (DDoS) attack, the perpetrator ____.

You had used an online service to apply for a credit card. As part of the process, you submitted your personal information such as SSN, date of birth, employer information, etc. Soon after you started receiving bills for items you did not purchase. You have become a victim of ________.

​There has been a data breach at your business and the business has lost some customer data. It has led to angry customers who have filed charges. What is a recommended course of action to prepare for future events?

The US-CERT incident reporting system is used to ____.

Your business has a web server that has suddenly become unresponsive. When you study the server's logs there are a huge number of requests from what appear to be legitimate computers. The problem is likely because of _____.

​Which of the following subject areas does the USA Patriot Act cover?

Which of the following laws covers false claims regarding unauthorized use of credit cards?

A botnet is a ____.

Which of the following is NOT a popular vendor of firewall software?

​A hacktivist is someone who _______.

​Assume your organization is experiencing an intruder attack. You have an intrusion detection system (IDS) set up. Which of the following events occurs first?

​The purpose of Advanced Persistent Threat (APT) usually is to ____.

On the back of a credit card the three-digit number above the signature panel is used to _____.

This harmful malware is triggered by a specific event, such as Friday the 13th

Which of the following shortcoming may be revealed during an IT security au

The second phase of an Advanced Persistent Threat attack is _____.

Once a _____ is installed, the attacker can gain full access to the computer.

You work for a company that is growing. Originally, all the users in all departments had access to all the data in the database. It is considered a security risk. What is an appropriate action to reduce the risk?

These days, the biggest threats to IT security are from ________.

You have been hired as the new Information Security consultant at XYZ Inc. Which of these employee behaviors would be a top security concern?

​Which of these organizations offers guidelines on developing security policies?

​You wish to use your personal laptop computer at work. However, the IT department folks are unwilling to allow you. The likely reason is ______.

​A company's risk assessment process can include numerous threats to the computers and networks. Which of the following can be considered an adverse event?