Question 1

Currently, the protocols used for secure information transfer over the Internet are

Accepted Answer

The most commonly used protocols for secure information transfer over the Internet are SSL (Secure Sockets Layer), TLS (Transport Layer Security), and S-HTTP (Secure Hypertext Transfer Protocol). These protocols provide encryption and authentication to ensure that data is transferred securely between servers and clients. TCP/IP and HTTP are not secure protocols, and CA (Certificate Authority) is not a protocol but rather a third-party entity that provides digital certificates for authentication.

Question 2

A digital certificate system

Accepted Answer

A digital certificate system uses third-party CAs (Certificate Authorities) to validate a user's identity. The CA verifies the identity of the individual or organization requesting the digital certificate and then issues the certificate to that entity. This allows for secure digital communication, as the recipient can verify the identity of the sender based on their digital certificate.

Question 3

When errors are discovered in software programs, the sources of the errors are found and eliminated through a process called ________.

Accepted Answer

The answer of When errors are discovered in software programs,...

Question 4

For 100% availability, online transaction processing requires

Accepted Answer

For 100% availability, online transaction processing requires fault-tolerant computer systems, such as redundant hardware and software components, to ensure that the system can continue to operate even in the event of hardware or software failures. High-capacity storage and dedicated phone lines may improve system performance, but they do not directly contribute to availability. A multi-tier server network can improve scalability and performance, but it also does not guarantee 100% availability on its own.

Question 5

Malicious software programs referred to as ________ include a variety of threats such as computer viruses, worms, and Trojan horses.

Accepted Answer

The answer of Malicious software programs referred to as ________...

Question 6

In controlling network traffic to minimize slow-downs, a technology called ________ is used to examine data files and sort low-priority data from high-priority data.

Accepted Answer

Deep-packet inspection technology examines data packets in detail and sorts them according to priority based on predetermined criteria. This helps to control network traffic and prevent slow-downs by giving higher priority to important data.

Question 7

Downtime refers to periods of time in which a

Accepted Answer

Downtime refers to periods of time in which a computer system is not operational.

Question 8

Which of the following is the greatest threat that employees pose to an organization's information systems?

Accepted Answer

The answer of Which of the following is the greatest...

Question 9

Smaller firms may outsource some or many security functions to

Accepted Answer

MSSPs (Managed Security Service Providers) specialize in providing security services to smaller firms, allowing them to outsource security functions such as threat detection, monitoring, and incident response. ISPs (Internet Service Providers) mainly provide internet connectivity services, while MISs (Management Information Systems) focus on managing information within an organization. CAs (Certificate Authorities) issue digital certificates and manage encryption keys. While all of these options may have some relevance to security, outsourcing to an MSSP is the best choice as they offer a more specialized and comprehensive approach to security management.

Question 10

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

Accepted Answer

In symmetric key encryption, a single encryption key is used to both encrypt and decrypt the message. This means that the sender and receiver share the same key, which must be kept secret. This method is efficient for encrypting large amounts of data, but it requires a secure method of key exchange between the sender and receiver. SSL, public key encryption, and private key encryption all use different methods for key exchange and do not rely on a single shared key.

Question 11

The intentional disruption of a Web site or information system is called ________.

Accepted Answer

The answer of The intentional disruption of a Web site...

Question 12

________ is the scientific collection, examination, authentication, preservation, and analysis of data held on or retrieved from computer storage media in such a way that the information can be used as evidence in a court of law.

Accepted Answer

The answer of ________ is the scientific collection, examination, authentication,...

Question 13

Comprehensive security management products, with tools for firewalls, VPNs, intrusion detection systems, and more, are called ________ systems.

Accepted Answer

The answer of Comprehensive security management products, with tools for...

Question 14

________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

Accepted Answer

The answer of ________ is a crime in which an...

Question 15

Most antivirus software is effective against

Accepted Answer

Most antivirus software can only detect and eliminate viruses that are known when the software is created. New and unknown viruses may evade detection until the antivirus software is updated with new virus definitions.

Question 16

A(n) ________ examines the firm's overall security environment as well as the controls governing individual information systems.

Accepted Answer

The answer of A(n) ________ examines the firm's overall security...

Question 17

PKI is the use of public key cryptography working with a(n) ________.

Accepted Answer

The answer of PKI is the use of public key...

Question 18

A practice in which eavesdroppers drive by buildings or park outside and try to intercept wireless network traffic is referred to as ________.

Accepted Answer

The answer of A practice in which eavesdroppers drive by...

Question 19

________ refers to the ability to know that a person is who he or she claims to be.

Accepted Answer

The answer of ________ refers to the ability to know...

Question 20

The development and use of methods to make computer systems resume their activities more quickly after mishaps is called

Accepted Answer

Recovery oriented computing focuses on designing systems that can quickly recover and resume operations after failures or mishaps.

Quiz 8: Securing Information Systems