Question 1

With ________, the sender and receiver transmit a message using different keys.

Accepted Answer

Asymmetric encryption, also known as public key cryptography, uses a pair of keys for encryption and decryption. The sender uses the recipient's public key to encrypt the message, while the recipient uses their private key to decrypt it. This ensures that only the intended recipient can access the message, as no one else has access to their private key.

Question 2

________ are viruses that masquerade as useful programs or files.

Accepted Answer

Trojan horses are viruses that disguise themselves as legitimate programs or files, tricking users into downloading or installing them. Adware and spyware programs are different types of malware that have their own distinct functions, while worms are also viruses but do not disguise themselves as other files or programs.

Question 3

Secure Socket Layer is also known as ________.

Accepted Answer

Secure Socket Layer (SSL) is also known as Transport Layer Security (TLS). It is a protocol that ensures secure communication between servers and clients over the internet. The other options - application layer, presentation layer, and network interface layer security - are all different layers of the OSI model and are not directly related to SSL/TLS.

Question 4

Packet-filtering firewalls ________.

Accepted Answer

Packet-filtering firewalls can filter both inbound and outbound traffic.

Question 5

________ protect databases and other organizational data.

Accepted Answer

Data safeguards are designed to protect databases and other organizational data. Cookies are small data files stored on a user's computer by a website, payloads refer to the data transmitted by a network packet, and data strings are sequences of characters or bytes.

Question 6

A ________ examines each part of a message and determines whether to let that part pass.

Accepted Answer

A packet-filtering firewall examines each part of a message and determines whether to let that part pass through the network or not. A private key is used in cryptography to encrypt and decrypt messages. A mail server is a server that stores and delivers email messages. A drive-by sniffer is a type of cyberattack that intercepts network traffic in order to steal information.

Question 7

Which of the following statements is true with regard to human safeguards?

Accepted Answer

Documenting position sensitivity enables security personnel to prioritize their activities based on possible risk. By knowing which positions have access to sensitive information, security personnel can focus on ensuring that those positions have strong security measures in place.

Option A is incorrect because retaining terminated employee accounts can lead to unauthorized access to sensitive information. Option B is incorrect because general training may not be enough for employees with access to sensitive information. Option D is incorrect because it is not easy to hold public users accountable for security violations as they can easily hide behind pseudonyms and IP addresses.

Question 8

Key escrow is a(n) ________.

Accepted Answer

Key escrow is a safety procedure that allows a trusted party to have a copy of the encryption key. This is often used in situations where access to encrypted data may be necessary in the case of emergency or law enforcement purposes.

Question 9

The computers that run the DBMS and all devices that store database data should reside in locked, controlled-access facilities. This is done to ________.

Accepted Answer

Locking the computers and devices that store database data in controlled-access facilities provides physical security to prevent unauthorized individuals from physically accessing the hardware and potentially compromising the data. This measure does not directly address SQL injection attacks, email spoofing, or brute force attacks.

Question 10

________ is a function pertaining to a particular database that develops procedures and practices to control and protect the database.

Accepted Answer

Database administration involves developing procedures and practices to control and protect the database. Data encryption, data authentication, and database normalization are all potential components of database administration, but the term specifically refers to the overall management of the database.

Question 11

In asymmetric encryption, each site has a ________ for encoding messages.

Accepted Answer

The answer of In asymmetric encryption, each site has a...

Question 12

Which of the following statements is true of data administration?

Accepted Answer

Data administration is not just about developing policies but also involves implementing and enforcing them to establish proper data safeguards. It is not limited to individual units but applies to the entire organization. It is not a line function to the chief information officer but is an independent function that collaborates with other departments in the organization.

Question 13

A virus is a computer program that replicates itself. The program code that causes unwanted activity is called the ________.

Accepted Answer

The program code that causes unwanted activity within a virus is referred to as the "payload". This term is often used to describe the malicious activity that a virus initiates, such as deleting files or spreading to other computers. The other options are not directly related to the code of a virus - a kernel is a central component of an operating system, a bot herder is a person who controls a network of infected computers, and key escrow is a method of storing encryption keys.

Question 14

A ________ is a type of virus that propagates using the Internet or other computer networks.

Accepted Answer

A worm is a type of virus that spreads over computer networks, including the internet, by exploiting vulnerabilities in systems or software. It can replicate itself and spread independently to other systems without the need for a host file.

Question 15

Mark is transferring funds online through the Web site of a reputed bank. Which of the following will be displayed in the address bar of his browser that will let him know that the bank is using the SSL protocol?

Accepted Answer

The "https" in the address bar indicates that the website is using SSL/TLS protocol to encrypt data, ensuring a secure connection.

Question 16

________ is the term used to denote viruses, worms, and Trojan horses.

Accepted Answer

Malware is the term used to encompass all types of malicious software including viruses, worms, and Trojan horses. Cookies are small files stored on a user's computer by websites. Firewalls are a type of security software that can protect against unauthorized access. Spam refers to unwanted and unsolicited emails.

Question 17

Which of the following statements is true of the Secure Socket Layer (SSL)?

Accepted Answer

SSL is used to send sensitive data such as credit card numbers securely over the internet. It uses a combination of asymmetric and symmetric encryption. Each session uses a unique set of encryption keys for enhanced security. HTTPS is actually the protocol that uses SSL (or its successor TLS) for secure communication, so D is incorrect.

Question 18

________ is similar to spyware but it watches user activity and produces pop-ups.

Accepted Answer

Adware is a type of malicious software that monitors a user's activity and generates pop-up ads or redirects the user to advertising websites. It is similar to spyware in that it collects user information, but its main purpose is to serve ads rather than gather data. Cookies are small text files used to store information about a user's activity on a website, but they are not malicious. A payload refers to the harmful component of a virus or other malware. Shareware is a type of software that is distributed for free but typically requires payment for full functionality.

Question 19

Which of the following is likely to be accepted by a poorly designed application, leading to improper disclosure of data?

Accepted Answer

SQL injection is a common vulnerability in poorly designed applications that can allow attackers to manipulate SQL queries and access sensitive data. Public key, asymmetric encryption, and key escrow are not directly related to this type of vulnerability.

Question 20

________ refers to an organization-wide function that is in charge of developing data policies and enforcing data standards.

Accepted Answer

Data administration is responsible for developing and enforcing data policies and standards across an organization. This function ensures that data is managed consistently and securely throughout the organization. Authentication is the process of verifying someone's identity, usurpation is the illegal seizure of power, and data encryption is the process of converting plaintext into ciphertext to protect sensitive data.

Quiz 12: Information Systems Development