Question 1

________ injection attacks are the largest malware threat,their attacks take advantage of vulnerabilities in poorly coded Web application software to introduce malicious program code into a company's systems and networks.
A)QLS
B)SLQ
C)FLQ
D)SQL

Accepted Answer

SQL injection attacks are the most common and widespread type of injection attack. They involve inserting malicious SQL commands into a web application's database query. This can allow the attacker to access sensitive data or take control of the application's functionality.

Question 2

A fixed Internet address creates a ________ target for hackers.

Accepted Answer

The answer of A fixed Internet address creates a ________...

Question 3

A practice in which eavesdroppers drive by buildings or park outside and try to intercept wireless network traffic is referred to as ________.

Accepted Answer

The answer of A practice in which eavesdroppers drive by...

Question 4

A ________ is a rogue software program that attaches itself to other software programs or data files in order to be executed,usually without user knowledge or permission.

Accepted Answer

The answer of A ________ is a rogue software program...

Question 5

________ are independent computer programs that copy themselves from one computer to other computers over a network.

Accepted Answer

The answer of ________ are independent computer programs that copy...

Question 6

A ________ is an individual who intends to gain unauthorized access to a computer system.

Accepted Answer

The answer of A ________ is an individual who intends...

Question 7

The ________ worm affected millions of computers worldwide,disrupting British Airways flight check-ins,operations of British Coast Guard stations,Hong Kong hospitals,Taiwan post office branches,and Australia's Westpac Bank.
A)Sasser.ftp
B)Conficker
C)ILOVEYOU
D)Melissa

Accepted Answer

The answer of The ________ worm affected millions of computers...

Question 8

Large public networks,such as the Internet,are more ________ than internal networks because they are virtually open to anyone.

Accepted Answer

The answer of Large public networks,such as the Internet,are more...

Question 9

________ are methods,policies,and organizational procedures ensuring the safety of the organization's assets,the accuracy and reliability of its records,and operational adherence to management standards.

Accepted Answer

The answer of ________ are methods,policies,and organizational procedures ensuring the...

Question 10

The term ________ is typically used to denote a hacker with criminal intent.

Accepted Answer

The answer of The term ________ is typically used to...

Question 11

________ is the intentional disruption,defacement,or even destruction of a Web site or corporate information system.

Accepted Answer

The answer of ________ is the intentional disruption,defacement,or even destruction...

Question 12

________ planning focuses on how the company can restore business operations after a disaster strikes.
A)Disaster recovery
B)Business continuity
C)Disaster continuity
D)Business recovery

Accepted Answer

The answer of ________ planning focuses on how the company...

Question 13

Businesses must protect not only their own information assets but also those of ________.
A)customers.employees,and competitors
B)competitors.employees,and business partners
C)customers.competitors and business partners
D)customers.employees,and business partners

Accepted Answer

Businesses have a responsibility to protect the private information of their customers, employees, and business partners. Protecting the confidential information of competitors is not a priority.

Question 14

The ________ worm was first identified in January 2007.It spreads via e-mail spam with a fake attachment.Infected up to 10 million computers,causing them to join its zombie network of computers engaged in criminal activity.
A)Sasser.ftp
B)Conficker
C)ILOVEYOU
D)Storm

Accepted Answer

The Storm worm was first identified in January 2007 and spread through email spam, infecting millions of computers and creating a botnet for criminal activities.

Question 15

________ is a complete,internationally accepted process framework for IT that supports business,IT executives,and management in the definition and achievement of business and related IT goals by providing a comprehensive IT governance,management,control,and assurance model.
A)TOBIT
B)COBIT
C)TOBIC
D)BOCIT

Accepted Answer

COBIT (Control Objectives for Information and Related Technology) is a widely recognized process framework for IT that provides a comprehensive model for IT governance, management, control, and assurance. It helps organizations effectively manage and align IT with their business goals and objectives.

Question 16

________ refers to the policies,procedures,and technical measures used to prevent unauthorized access,alteration,theft,or physical damage to information systems.

Accepted Answer

The answer of ________ refers to the policies,procedures,and technical measures...

Question 17

Malicious software programs are referred to as ________.

Accepted Answer

The answer of Malicious software programs are referred to as...

Question 18

A ________ is a software program that appears to be benign but then does something other than expected.

Accepted Answer

The answer of A ________ is a software program that...

Question 19

________ consists of business processes and software tools for identifying the valid users of a system and controlling their access to system resources.
A)Access management
B)Identity management
C)Firewall management
D)Encryption management

Accepted Answer

Identity management involves the processes and tools for verifying the identities of users accessing a system and controlling the access to resources they are authorized to use. Access management is a subset of identity management that focuses on controlling access to specific resources based on the user's identity. Firewall management is a separate function that involves configuring and monitoring network security devices. Encryption management involves managing the use of encryption to protect data in storage and transmission.

Question 20

The ________ worm word macro script mailing infected Word file to first 50 entries in user's Microsoft Outlook address book.Infected 15 to 29 percent of all business PCs,causing $300 million to $600 million in damage.
A)Sasser.ftp
B)Conficker
C)ILOVEYOU
D)Melissa

Accepted Answer

The Melissa worm was a macro virus that spread through infected Word documents sent via email, targeting the first 50 contacts in the user's Outlook address book. It caused significant damage to business PCs globally.

Quiz 8: Securing Information Systems

________ injection attacks are the largest malware threat,their attacks take advantage of vulnerabilities in poorly coded Web application software to introduce malicious program code into a company's systems and networks.

A fixed Internet address creates a ________ target for hackers.

A practice in which eavesdroppers drive by buildings or park outside and try to intercept wireless network traffic is referred to as ________.

A ________ is a rogue software program that attaches itself to other software programs or data files in order to be executed,usually without user knowledge or permission.

________ are independent computer programs that copy themselves from one computer to other computers over a network.

A ________ is an individual who intends to gain unauthorized access to a computer system.

The ________ worm affected millions of computers worldwide,disrupting British Airways flight check-ins,operations of British Coast Guard stations,Hong Kong hospitals,Taiwan post office branches,and Australia's Westpac Bank.

Large public networks,such as the Internet,are more ________ than internal networks because they are virtually open to anyone.

________ are methods,policies,and organizational procedures ensuring the safety of the organization's assets,the accuracy and reliability of its records,and operational adherence to management standards.

The term ________ is typically used to denote a hacker with criminal intent.

________ is the intentional disruption,defacement,or even destruction of a Web site or corporate information system.

________ planning focuses on how the company can restore business operations after a disaster strikes.

Businesses must protect not only their own information assets but also those of ________.

The ________ worm was first identified in January 2007.It spreads via e-mail spam with a fake attachment.Infected up to 10 million computers,causing them to join its zombie network of computers engaged in criminal activity.

________ is a complete,internationally accepted process framework for IT that supports business,IT executives,and management in the definition and achievement of business and related IT goals by providing a comprehensive IT governance,management,control,and assurance model.

________ refers to the policies,procedures,and technical measures used to prevent unauthorized access,alteration,theft,or physical damage to information systems.

Malicious software programs are referred to as ________.

A ________ is a software program that appears to be benign but then does something other than expected.

________ consists of business processes and software tools for identifying the valid users of a system and controlling their access to system resources.

The ________ worm word macro script mailing infected Word file to first 50 entries in user's Microsoft Outlook address book.Infected 15 to 29 percent of all business PCs,causing $300 million to $600 million in damage.