Deck 4: Ethics and Information Security: Mis Business Concerns: Module 2: Technical Foundations of MIS

Question 1

Counterfeit software is the unauthorized use, duplication, distribution, or sale of copyrighted software.

Answer 1

False
Explanation: Pirated software is the unauthorized use, duplication, distribution, or sale of copyrighted software.

Question 2

A patent is the legal protection afforded an expression of an idea, such as a song, book, or video game.

Answer 2

False
Explanation: Copyright is the legal protection afforded an expression of an idea, such as a song, book, or video game.

Question 3

Which of the following describes confidentiality?

A)the assurance that messages and information are available only to those who are authorized to view them
B)policies and procedures that address the ethical use of computers and Internet usage in the business environment
C)the right to be left alone when you want to be, to have control over your own personal possessions, and not to be observed without your consent
D)the principles and standards that guide our behavior toward other people

Answer 3

A
Explanation: This is the definition of confidentiality.

Question 4

Ethics and security are two fundamental building blocks for all organizations.

Question 5

Information secrecy is an ethical issue that focuses on who owns information about individuals and how information can be sold and exchangeD.

Question 6

Digital rights management is a technological solution that allows publishers to control their digital media to discourage, limit, or prevent illegal copying and distribution.

Question 7

Pirated software is software that is manufactured to look like the real thing and sold as such.

Question 8

Which of the following describes privacy?

A)the assurance that messages and data are available only to those who are authorized to view them
B)policies and procedures that address the ethical use of computers and Internet usage in the business environment
C)the right to be left alone when you want to be, to have control over your own personal possessions, and to not be observed without your consent
D)the principles and standards that guide our behavior toward other people

Question 9

Intellectual property is intangible creative work that is embodied in physical form and includes copyrights, trademarks, and patents.

Question 10

Information secrecy is the category of computer security that addresses the protection of data from unauthorized disclosure and confirmation of data source authenticity.

Question 11

What is intangible creative work that is embodied in physical form and includes copyrights, trademarks, and patents?

A)ethics
B)intellectual property
C)privacy
D)confidentiality

Question 12

Copyright is an exclusive right to make, use, and sell an invention and is granted by a government to the inventor.

Question 13

Which of the following is an example of acting ethically?

A)Individuals copy, use, and distribute software.
B)Employees search organizational databases for sensitive corporate and personal information.
C)Individuals hack into computer systems to steal proprietary information.
D)None of these are examples of acting ethically.

Question 14

Information management examines the organizational resource of information and regulates its definitions, uses, value, and distribution ensuring it has the types of data/information required to function and grow effectively.

Question 15

The Child Online Protection Act was passed to protect minors from accessing inappropriate material on the Internet.

Question 16

Information property is an ethical issue that focuses on who owns information about individuals and how information can be sold and exchangeD.

Question 17

Information governance is a method or system of government for information management or control.

Question 18

Information compliance is the act of conforming, acquiescing, or yielding information.

Question 19

Confidentiality is the right to be left alone when you want to be, to have control over your own personal possessions, and not to be observed without your consent.

Question 20

Privacy is the legal protection afforded an expression of an idea, such as a song, book, or video game.

Question 21

Fair information practices is a general term for a set of standards governing the collection and use of personal data and addressing issues of privacy and accuracy.

Question 22

Bring your own devices is a general term for a set of standards governing the collection and use of personal data and addressing issues of privacy and accuracy.

Question 23

Cybervandalism is the electronic defacing of an existing website.

Question 24

Competitive click-fraud is a computer crime where a competitor or disgruntled employee increases a company's search advertising costs by repeatedly clicking on the advertiser's link.

Question 25

Cybervandalism includes threats, negative remarks, or defamatory comments transmitted via the Internet or posted on the website.

Question 26

Internet governance is government attempts to control Internet traffic, thus preventing some material from being viewed by a country's citizens.

Question 27

Fair information practices is a general term for a set of standards governing the collection and use of personal data and addressing issues of privacy and accuracy.

Question 28

An ethical computer use policy contains general principles to guide computer user behavior.

Question 29

Teergrubing is an anti-spamming approach where the receiving computer launches a return attack against the spammer, sending email messages back to the computer that originated the suspected spam.

Question 30

Bring your own device is a policy that allows employees to use their personal mobile devices and computers to access enterprise data and applications.

Question 31

Cybervandalism is a problem that occurs when someone registers purposely misspelled variations of well-known domain names.

Question 32

BYOD policies offer four basic options, including 1) unlimited access for personal devices, 2) access only to nonsensitive systems and data, 3) access, but with IT control over personal devices, apps, and stored data, and 4) access, but preventing local storage of data on personal devices.

Question 33

Companies do not need a privacy policy for email because an employee's work email is private and cannot be viewed by the company.

Question 34

Information property is the category of computer security that addresses the protection of data from unauthorized disclosure and confirmation of data source authenticity.

Question 35

An acceptable use policy (AUP) requires a user to agree to follow it in order to be provided access to corporate email, information systems, and the Internet.

Question 36

Epolicies are policies and procedures that address information management along with the ethical use of computers and the Internet in the business environment.

Question 37

Fair information practices are policies that allows employees to use their personal mobile devices and computers to access enterprise data and applications.

Question 38

Cyberbullying is an act or object that poses a danger to assets.

Question 39

Click-fraud is the abuse of pay-per-click, pay-per-call, and pay-per-conversion revenue models by repeatedly clicking on a link to increase charges or costs for the advertiser.

Question 40

Website name stealing is the theft of a website's name that occurs when someone, posing as a site's administrator, changes the ownership of the domain name assigned to the website to another website owner.

Question 41

A social media manager refers to the process of monitoring and responding to what is being said about a company, individual, product, or branD.

Question 42

Spyware is software that, while purporting to serve some useful function and often fulfills that function, also allows Internet advertisers to display advertisements without the consent of the computer user.

Question 43

Black-hat hackers work at the request of the system owners to find system vulnerabilities and plug the holes.

Question 44

A user can opt in to receive emails by choosing to deny permission to incoming emails.

Question 45

Ransomware is a form of malicious software that infects your computer and asks for money.

Question 46

Drive-by hacking is a computer attack where an attacker accesses a wireless computer network, intercepts data, uses network services, and/or sends attack instructions without entering the office or organization that owns the network

Question 47

White-hat hackers break into other people's computer systems and may just look around or may steal and destroy information.

Question 48

Social media monitoring is the process of monitoring and responding to what is being said about a company, individual, product, or branD.

Question 49

A user can opt out of receiving emails by choosing to allow permissions to incoming emails.

Question 50

A user can opt out of receiving emails by choosing to deny permission to incoming emails.

Question 51

Information security is a high priority for protection of the company's information and it is critical to implement an information security procedure to combat misuse of this information.

Question 52

Downtime refers to a period of time when a system is unavailable and unplanned downtime can strike at any time for various reasons.

Question 53

A social media policy outlines the corporate guidelines or principles governing employee online communications.

Question 54

Workplace MIS monitoring tracks people's activities by such measures as number of keystrokes, error rate, and number of transactions processeD.

Question 55

Smoking areas are targeted by hackers as they regularly use smoking entrances to gain building access where they pose as employees to gain access to the company network.

Question 56

A social media manager is a person within the organization who is trusted to monitor, contribute, filter, and guide the social media presence of a company, individual, product, or branD.

Question 57

A user can opt in to receive emails by choosing to allow permissions to incoming emails.

Question 58

Employee monitoring policies explicitly state how, when, and where the company monitors its employees.

Question 59

Cyberbullying is a person within the organization who is trusted to monitor, contribute, filter, and guide the social media presence of a company, individual, product, or branD.

Question 60

Information security is a broad term encompassing the protection of information from accidental or intentional misuse by persons inside or outside an organization.

Question 61

Backdoor programs change their form as they propagate.

Question 62

A hacker weapon called a splog (spam blog) is a fake blog created solely to raise the search engine rank of affiliated websites.

Question 63

White-hat hackers have philosophical and political reasons for breaking into systems and will often deface the website as a protest.

Question 64

Denial-of-service attack (DoS) floods a website with so many requests for service that it slows down or crashes the site.

Question 65

Script kiddies have criminal intent when hacking.

Question 66

Simplelocker is a new ransomware program that encrypts your personal files and demands payment for the files' decryption keys.

Question 67

Cyberterrorists seek to cause harm to people or to destroy critical systems or information and use the Internet as a weapon of mass destruction.

Question 68

Script kiddies or script bunnies find hacking code on the Internet and click-and-point their way into systems to cause damage or spread viruses.

Question 69

Insiders are illegitimate users who purposely or accidentally misuse their access to the environment to do business.

Question 70

Through pretexting, hackers use their social skills to trick people into revealing access credentials or other valuable information.

Question 71

A worm is a form of malicious software that infects your computer and asks for money.

Question 72

A worm spreads itself not only from file to file but also from computer to computer.

Question 73

Organizations address security risks through two lines of defense.The first is people and the second is technology.

Question 74

Backdoor programs open a way into the network for future attacks.

Question 75

Through social engineering, hackers use their social skills to trick people into revealing access credentials or other valuable information.

Question 76

A worm spreads itself, not only from file to file, but also from computer to computer.The primary difference between a virus and a worm is that a virus must attach to something, such as an executable file, to spreaD.Worms do not need to attach to anything to spread and can tunnel themselves into computers.

Question 77

Two of the common forms of viruses discussed in the book include the Trojan-horse virus and the acceptance-of-service attack.

Question 78

Ransomware is a form of social engineering in which one individual lies to obtain confidential data about another individual.

Question 79

The Trojan-horse virus hides inside other software, usually as an attachment or a downloadable file.

Question 80

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident are called insiders.