Question 1

Fingerprint readers, retina scanners, voice and face recognition technologies are all part of _____.

Accepted Answer

The answer of Fingerprint readers, retina scanners, voice and face...

Question 2

Public wireless networks are often vulnerable to monitoring and attack. The use of _______ software can limit threats by encrypting network transmissions over a network.

Accepted Answer

The answer of Public wireless networks are often vulnerable to...

Question 3

_____ refers to confidence scams executed through technology.

Accepted Answer

The answer of _____ refers to confidence scams executed through...

Question 4

The _____ technique zeros in on a sloppy programming practice where software developers don't validate user input.

Accepted Answer

The answer of The _____ technique zeros in on a...

Question 5

The term ISO 27000 refers to a series of standards representing the set of best practices for implementing, maintaining and improving organizational security.

Accepted Answer

ISO 27000 is a family of standards that helps organizations keep information assets secure, providing best practices for information security management.

Question 6

When using a public wireless network, using VPN software is not advisable as it can reveal your communications to any network eavesdroppers.

Accepted Answer

Using a VPN on a public wireless network encrypts your data, making it much harder for eavesdroppers to access your communications.

Question 7

_____ refers to a trusted third party that provides authentication services in public key encryption schemes.

Accepted Answer

The answer of _____ refers to a trusted third party...

Question 8

A team working on organizational security should include representatives from general counsel, audit, public relations, and human resources, in addition to those from specialized security and broader technology and infrastructure functions.

Accepted Answer

Including representatives from general counsel, audit, public relations, and human resources ensures a comprehensive approach to organizational security, addressing legal, compliance, communication, and personnel aspects, alongside technical and infrastructure considerations.

Question 9

_____________ refers to malware that encrypts a user's files (perhaps threatening to delete them), with demands that a user pay to regain control of their data and/or device.

Accepted Answer

The answer of _____________ refers to malware that encrypts a...

Question 10

_____ are scrambled character images used to thwart things like automated account setup or ticket buying.

Accepted Answer

The answer of _____ are scrambled character images used to...

Question 11

Multiple administrators jointly controlling key systems are an unnecessary burden that adds to the complexity of managing security in an organization.

Accepted Answer

Having multiple administrators jointly control key systems can enhance security by distributing authority, reducing the risk of insider threats, and ensuring that critical decisions or changes are reviewed by more than one individual, thus adding a layer of checks and balances.

Question 12

In security circles the phrase "compliance" refers to:

Accepted Answer

Compliance in security refers to the adherence to legal or professionally binding requirements that an organization must follow. These can include laws, regulations, standards, and guidelines designed to protect the integrity, confidentiality, and availability of data.

Question 13

ware failure is the least likely of threats to one's data.

Accepted Answer

Hardware failure, such as hard drive crashes, is actually one of the most common threats to data, alongside issues like human error, software corruption, and malware attacks.

Question 14

Conforming to industry-standard guidelines and frameworks for organizational security ensures continued immunity from attacks on an organization's information.

Accepted Answer

While conforming to industry-standard guidelines and frameworks can significantly reduce the risk of attacks, it does not ensure continued immunity, as threats evolve constantly and new vulnerabilities are discovered regularly.

Question 15

Updates that plug existing holes in a software are called:

Accepted Answer

Patches are updates that fix vulnerabilities, bugs, or any issues in a software to improve its functionality or security.

Question 16

Regularly updated software lowers a system's vulnerable attack surface.

Accepted Answer

Regularly updating software ensures that security patches and updates are applied, fixing known vulnerabilities and reducing the system's exposure to potential attacks.

Question 17

Con games that trick employees into revealing information or performing other tasks that compromise a firm are known as _____ in security circles.

Accepted Answer

The answer of Con games that trick employees into revealing...

Question 18

Information security policies would be ineffective without _____ and _____.

Accepted Answer

Information security policies require audit enforcement to ensure adherence and accountability to hold individuals responsible for their actions.

Question 19

One of the reasons organizations delay patches to plug holes in their security applications is:

Accepted Answer

Organizations often delay implementing patches due to concerns that the updates might introduce new issues or conflicts within their existing systems, potentially disrupting operations.

Question 20

Online backup services are considered a poor choice for end-users, since this only increases the liklihood that an individual's data will be hacked.

Accepted Answer

Online backup services often implement strong security measures such as encryption and multi-factor authentication, making them a secure option for data backup and protection against local data loss scenarios.

Quiz 17: Information Security: Barbarians at the Gateway and Just About Everywhere Else