Question 1

The risk of disclosure of confidential information is most closely related to which category in Carter's taxonomy?
A)Target
B)Instrumentality
C)Both A and B
D)Neither A nor B

Accepted Answer

The risk of disclosure of confidential information refers to the protection of a specific target (confidential information) and does not necessarily relate to the instrumentality (methods or tools) used to protect it. Therefore, it is most closely related to the "target" category in Carter's taxonomy.

Question 2

According to Carter's taxonomy, use of a computer to further a criminal end refers to which of the following categories?
A)Target
B)Instrumentality
C)Incidental
D)Associated

Accepted Answer

According to Carter's taxonomy, use of a computer as a tool to facilitate a criminal end falls under the category of instrumentality. This means that the computer is used as a means to an end for carrying out a criminal activity. Examples of such activities include hacking, cyberstalking, or launching a DDoS attack.

Question 3

A bank's information system was hacked in an effort to obtain clients' personal financial information. Which category of computer crime best describes that situation?
A)Target
B)Instrumentality
C)Incidental
D)Associated

Accepted Answer

The situation described falls under the category of Target computer crime as the hacker's intention was to obtain specific information from the bank's information system.

Question 4

The terms target, instrumentality, incidental and associated from Carter's taxonomy are most closely associated with which form of risk from Brown's taxonomy?
A)Human error
B)Liquidity
C)Systems
D)Market

Accepted Answer

The terms target, instrumentality, incidental, and associated from Carter's taxonomy are related to the systems form of risk from Brown's taxonomy. This form of risk refers to the potential for failure or disruption of technology systems that support the organization's operations. The aforementioned terms are used to identify the different ways in which the failure of these systems can impact the organization.

Question 5

George received an e-mail that threatened to release his personal financial data unless he paid a fee. That situation is an example of:
A)Extortion
B)Intrusion
C)Information manipulation
D)Error

Accepted Answer

This is a clear example of extortion, as someone is threatening to release private data unless money is paid.

Question 6

Which of the following types of computer criminal is least likely to be motivated by financial gain?
A)Script kiddie
B)Cyber-criminal
C)Corporate spies
D)Organized crime

Accepted Answer

Script kiddies are typically young, inexperienced individuals who use pre-existing hacking tools and techniques to compromise systems for the sake of personal amusement or notoriety. While they may cause damage or disruption, they are generally not motivated by financial gain.

Question 7

Business risks and threats to information systems include all of the following except:
A)Error
B)Intrusions
C)Malicious software
D)Instrumentality

Accepted Answer

Business risks and threats to information systems include error, intrusions, and malicious software. Instrumentality is not a common risk or threat to information systems.

Question 8

Disclosure of confidential information is one risk associated with information technology. Which of the following would be considered confidential information?
A)The stock price of Microsoft
B)The book value of Disney Corporation's fixed assets
C)The social security numbers of GE's board of directors
D)All of the above are examples of confidential information.

Accepted Answer

Confidential information typically includes personally identifiable information (such as social security numbers), financial information, trade secrets, and other sensitive data that should not be disclosed without proper authorization. A and B are not examples of confidential information as they are public information that can be accessed through various channels.

Question 9

Consider the following examples of computer crime as you answer the next question: i. Social Security numbers are stolen from a company's database.ii. A fraudster uses a computer to identify people over the age of 80 with annual incomes of $250,000 or more
Iii) An employee receives threats from a co-worker via e-mail
Iv) An unhappy customer launches a denial-of-service attack
Carter's taxonomy of computer crime comprises four categories. Which of the following statements is most true?
A)The list includes examples of all four categories.
B)The list includes examples of all categories except associated.
C)The list includes examples of all categories except target.
D)The list includes examples of all categories except incidental.

Accepted Answer

The answer of Consider the following examples of computer crime...

Question 10

George received an e-mail that threatened to release his personal financial data unless he paid a fee. Which category of computer crime best describes that situation?
A)Target
B)Instrumentality
C)Incidental
D)Associated

Accepted Answer

The answer of George received an e-mail that threatened to...

Question 11

Consider the following examples of computer crime as you answer the next question: i. Social Security numbers are stolen from a company's database.ii. A fraudster uses a computer to identify people over the age of 80 with annual incomes of $250,000 or more
Iii) A supervisor receives threats from a worker via e-mail; the worker demands promotion as a condition of not exposing the supervisor's illegal acts
Iv) An unhappy customer launches a denial-of-service attack
Which of the following pairs an item from the list with an appropriate description of a business risk?
A)Extortion, i
B)Service interruption, ii
C)Extortion, iii
D)None of the above

Accepted Answer

Extortion involves threats made for financial gain, as seen in scenario iii where the worker is using threats to demand promotion.

Question 12

Malicious software, such as a logic bomb, is most closely related to which generic element of the accounting information system?
A)Inputs
B)Processing
C)Outputs
D)Storage

Accepted Answer

Malicious software, such as a logic bomb, is related to the processing element of the accounting information system as it can disrupt or manipulate the system's operations. Inputs, outputs, and storage are not directly related to the presence of malicious software.

Question 13

Consider the following examples of computer crime as you answer the next question: i. Social Security numbers are stolen from a company's database.ii. A fraudster uses a computer to identify people over the age of 80 with annual incomes of $250,000 or more
Iii) An employee receives threats from a co-worker via e-mail
Iv) An unhappy customer launches a denial-of-service attack
Carter's taxonomy of computer crime comprises four categories. Which of the following pairs includes two items from the same category?
A)I and II
B)II and III
C)II and IV
D)I and IV

Accepted Answer

Both I and IV involve unauthorized access to computer systems or data, fitting into the category of "computer as target" in Carter's taxonomy.

Question 14

An information systems development company routinely creates a password that they do not disclose to their clients. In that way, the development company can bypass any security the client adds on later if the system needs maintenance. The client's information system is therefore at greatest risk for:
A)Error
B)Intrusion
C)Web site defacement
D)Extortion

Accepted Answer

By creating a password that is not disclosed to the clients, the development company maintains a backdoor into the client's system, leaving it vulnerable to intrusion by unauthorized parties.

Question 15

Consider the following examples of computer crime as you answer the next question: i. Social Security numbers are stolen from a company's database.ii. A fraudster uses a computer to identify people over the age of 80 with annual incomes of $250,000 or more
Iii) A supervisor receives threats from a worker via e-mail; the worker demands promotion as a condition of not exposing the supervisor's illegal acts
Iv) An unhappy customer launches a denial-of-service attack
Which two items represent the same category of risk from the list discussed in the chapter?
A)I and II
B)I and III
C)II and IV
D)None of the above

Accepted Answer

Both I and II involve unauthorized access to information for malicious purposes, representing data breaches or information theft.

Question 16

The difference between "error" and "information manipulation" as business risks associated with information technology is:
A)The person's intent
B)The kind of information involved
C)The potential dollar amount of the loss
D)The classification on Carter's taxonomy

Accepted Answer

The difference between "error" and "information manipulation" as business risks associated with information technology lies in the person's intent. Errors are unintentional mistakes that can occur when information is being handled, while information manipulation involves intentional actions aimed at manipulating or altering information for personal gain or malicious purposes.

Question 17

___ are ___ driven by financial gain.
A)Hackers, cyber-criminals
B)Cyber-criminals, hackers
C)Corporate spies, terrorists
D)Terrorists, corporate spies

Accepted Answer

Cyber-criminals are primarily driven by financial gain, whereas hackers may have various motivations, including curiosity, challenge, or activism.

Question 18

Consider the following examples of computer crime as you answer the next question: i. Social Security numbers are stolen from a company's database.ii. A fraudster uses a computer to identify people over the age of 80 with annual incomes of $250,000 or more
Iii) An employee receives threats from a co-worker via e-mail
Iv) An unhappy customer launches a denial-of-service attack
Carter's taxonomy of computer crime comprises four categories. Which of the following pairs includes items from different categories?
A)I and IV
B)II and III
C)Both A and B
D)Neither A nor B

Accepted Answer

The answer of Consider the following examples of computer crime...

Question 19

Which category of computer crime in Carter's taxonomy recognizes that the presence of computers has generated new versions of traditional crimes?
A)Target
B)Instrumentality
C)Incidental
D)Associated

Accepted Answer

The answer of Which category of computer crime in Carter's...

Question 20

Computer crimes that fall under Carter's "target" category are most closely associated with which generic element of an accounting information system?
A)Processing
B)Storage
C)Both A and B
D)Neither A nor B

Accepted Answer

Carter's "target" category of computer crimes involves attacks on the processing and storage elements of an accounting information system.

Quiz 11: Computer Crime and Information Technology Security

The risk of disclosure of confidential information is most closely related to which category in Carter's taxonomy?

According to Carter's taxonomy, use of a computer to further a criminal end refers to which of the following categories?

A bank's information system was hacked in an effort to obtain clients' personal financial information. Which category of computer crime best describes that situation?

The terms target, instrumentality, incidental and associated from Carter's taxonomy are most closely associated with which form of risk from Brown's taxonomy?

George received an e-mail that threatened to release his personal financial data unless he paid a fee. That situation is an example of:

Which of the following types of computer criminal is least likely to be motivated by financial gain?

Business risks and threats to information systems include all of the following except:

Disclosure of confidential information is one risk associated with information technology. Which of the following would be considered confidential information?

George received an e-mail that threatened to release his personal financial data unless he paid a fee. Which category of computer crime best describes that situation?

Malicious software, such as a logic bomb, is most closely related to which generic element of the accounting information system?

The difference between "error" and "information manipulation" as business risks associated with information technology is:

_ are _ driven by financial gain.

Which category of computer crime in Carter's taxonomy recognizes that the presence of computers has generated new versions of traditional crimes?

Computer crimes that fall under Carter's "target" category are most closely associated with which generic element of an accounting information system?