MIS Chapter 10 example #49274

Which of the following usually happens in a malicious denial-of-service attack?

A ___ pretends to be a legit company and sends an email requesting confidential data, such as account numbers, SSN, account passwords, and so forth

When an employee is terminated, IS administrators should receive advance notice so that they can ___

Mark is transferring funds online through the Web site of a reputed bank. Which of the following will be displayed in the address bar of his browser that will let him know that the bank is using the Secure Sockets Layer (SSL) protocol?

A ________ examines each part of a message and determines whether to let that part pass.

In the context of malware protection, the program code that causes the unwanted actions is called the ________.

the three main components of IT security includez Principle of Accountability Principle of Least Privilege and ___

Which of the following is a critical security function that should be addressed by the senior management of an organization?

In information security, which of the following is true about managing risk?

________ are false targets for computer criminals to attack.

A common security technique used by financial institutions and major corp. requires users attempting to login to have something physical and something they know. when the users login without the physical portion of this technique, the security systems send either a text to a cell phone or call the users directly. the common name for this login security technique is ___

A ___ is a person or an org that seeks to obtain or alter data or other IS assets illegally, without the owner's permission and often without the owner's knowledge.

___ is a technique for intercepting computer communications through a physical connection to a network or without a physical connection, in case of wireless networks.

5 Components of IT

What are cases that helped with security, privacy and safeguards

pretending to be a valid web address

what you call a threat that interrupts data on transit

those searching for unprotected wireless nets

In the context of security threats, pretexting, sniffing, spoofing, and phishing are all examples of ________.

What is pretexting?

Sources of security threats

phishing for the big ones. targets are corporate level executives or high ranking officials within access to high valued information is called ____.

4 elements of cyber attack

What does APT stand for?

3 Principles of IT Security

what is phishing that is targeted to intended victims specifically?

what does RAT stand for

When criminals invade a computer system and replace programs with unauthorized ones that shut down apps and substitute own to spy, steal or change data.

When humans inadvertently shut down a web server

what happens when human maliciously hack and shut down a web server intentionally

Goal of Information Systems Security

What does IDS stand for?

resides in the background and unknown to user, observes users' actions, minitors, reports to threat organization

malicious spyware that captures keystrokes, web history, etc

should be benign but it watches activity and produces pop ups i.e. google ads

trusted party should have copy of this encryption key

org-wide function that is in charge of developing data policies and enforcing data standards

protects data

checks and balances, separation of powers