Quiz 12

Front 1

When someone pretends to be a legitimate company and sends an email requesting confidential data, such as credit card numbers, this is known as ________.

. hawking

. spoofing

. phishing

. sniffing

Back 1

phishing

Front 2

A subversive technique for intercepting computer communications is ________.

. sniffing

. spoofing

. phishing

. pretexting

Back 2

sniffing

Front 3

________ is a term for when someone causes deception by pretending to be someone else.

. Hacking

. Pretexting

. Sniffing

. Phishing

Back 3

Pretexting

Front 4

________ intercept wireless traffic at will in areas where users are on devices with wireless internet connections on unprotected networks.

. Drive-by spoofers

. Drive-by pretexters

. Drive-by phishers

. Drive-by sniffers

Back 4

Drive-by sniffers

Front 5

When a person gains unauthorized access to a computer system, he or she is said to be ________.

. hacking

. phishing

. sniffing

. spoofing

Back 5

hacking

Front 6

________ present the largest risk for infrastructure loss.

. Thefts

. Terror attacks

. Human mistakes

. Natural disasters

Back 6

Natural disasters

Front 7

Which of the following exemplifies a technical safeguard?

. authentication

. key escrow

. helpdesk policies

. password management

Back 7

authentication

Front 8

Which of the following is an example of a human safeguard?

. password management

. digital signatures

. botnets

. authentication

Back 8

password management

Front 9

Which of the following is NOT an example of a data safeguard?

. storage in an encrypted form

. SSL

. key escrow

. physical security

Back 9

SSL

Front 10

A security policy concerning the use of computers at work for personal business would be an example of a ________.

. system-specific policy

. data policy

. issue-specific policy

. human-resources policy

Back 10

issue-specific policy

Front 11

A security policy determining which customer data from the order entry system will be shared with other companies is an example of a ________ policy.

. system-specific

. data

. issue-specific

. human-resources

Back 11

system-specific

Front 12

The term ________ refers to threats and consequences that we know about.

. knowledge

. hedge

. risk

. indemnity

Back 12

risk

Front 13

________ is the first step in risk management.

. Evaluating the results of the risk management process

. Reducing the likelihood of a threat

. Assessing the threats

. Creating perfect hedges to mitigate the risks

Back 13

Assessing the threats

Front 14

________ refers to the probability that a given asset will be compromised by a given threat, despite the safeguards.

. Likelihood

. Uncertainty

. Consequence

. Vulnerability

Back 14

Likelihood

Front 15

Which of the following is NOT a reason for public companies to develop and follow a disaster recovery plan?

. requirement to do so

. good management practice

. minimization of organizational interruption

. prevention of data theft

Back 15

prevention of data theft

Front 16

Since no safeguard is ironclad, there is always a ________ risk that the safeguard will not protect the assets in all circumstances.

. residual

. diversifiable

. portfolio

. process

Back 16

residual

Front 17

________ refers to the recording and analysis of keystrokes.

. Theft

. Eavesdropping

. Hacking

. Sniffing

Back 17

Eavesdropping

Front 18

A critical security function that requires the involvement of senior-management is ________.

. safeguarding computer hardware and software

. planning responses to security incidents

. establishing the security policy

. managing the security program on a real-time basis

Back 18

establishing the security policy

Front 19

Which of the following is NOT a type of data which should be backed up by IT staff?

. account data

. data on employees' computers

. website resources

. databases

Back 19

data on employees' computers

Front 20

Which of the following attitudes about backing up user computers will most often prevent data loss occurrences?

. Backups should be performed right before traveling in case a laptop is stolen or damaged.

. Data should be backed up at the same time each week.

. Backups are most important when you are not planning to use the computer for a few days.

. Users should follow a plan so that in the event of loss or system failure, all critical data are accessible and uncompromised.

Back 20

. Users should follow a plan so that in the event of loss or system failure, all critical data are accessible and uncompromised.