Question 1

__________________________ refers to the policies,procedures,and technical measures used to prevent unauthorized access,alteration,theft,or physical damage to information systems

Accepted Answer

The answer of __________________________ refers to the policies,procedures,and technical measures...

Question 2

An ___________________________ examines the firm's overall security environment as well as controls governing individual information systems.
A) Disaster recovery planning
B) Business continuity planning
C) MIS audit
D) Risk assessment

Accepted Answer

A MIS (Management Information Systems) audit examines the firm's overall security environment as well as controls governing individual information systems. A disaster recovery planning focuses on the recovery of IT infrastructure and business operations in the event of a disaster. Business continuity planning emphasizes the continuation of business operations during and after a significant disruption. A risk assessment identifies potential threats and vulnerabilities that may harm the organization's information assets.

Question 3

___________________________ ensure that valuable business data files on either disk or tape are not subject to unauthorized access,change,or destruction while they are in use or in storage.
A) Software controls
B) Hardware controls
C) Computer operations controls
D) Data security controls

Accepted Answer

Data security controls are designed to protect valuable business data files from unauthorized access, change, or destruction. This includes encryption, access controls, backup and recovery procedures, and monitoring and auditing of data use. Software controls and hardware controls can also be important components of data security, but they are not as comprehensive as data security controls in ensuring the protection of valuable business data. Computer operations controls are more focused on ensuring the efficient and effective operation of computer systems and applications, rather than on data security.

Question 4

________ refers to the ability to know that a person is who he or she claims to be.

Accepted Answer

The answer of ________ refers to the ability to know...

Question 5

In a _______________________________ attack hackers flood a network server or Web server with many thousands of false communications or requests for services to crash the network.

Accepted Answer

The answer of In a _______________________________ attack hackers flood a...

Question 6

The intentional disruption of a Web site or information system is called ________.

Accepted Answer

The answer of The intentional disruption of a Web site...

Question 7

________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

Accepted Answer

The answer of ________ is a crime in which an...

Question 8

When errors are discovered in software programs,the sources of the errors are found and eliminated through a process called ________.

Accepted Answer

The answer of When errors are discovered in software programs,the...

Question 9

________ is the scientific collection,examination,authentication,preservation,and analysis of data held on or retrieved from computer storage media in such a way that the information can be used as evidence in a court of law.

Accepted Answer

The answer of ________ is the scientific collection,examination,authentication,preservation,and analysis of...

Question 10

PKI is the use of public key cryptography working with a(n)________.

Accepted Answer

The answer of PKI is the use of public key...

Question 11

A _________________________is a software program that appears to be benign but then does something other than expected.

Accepted Answer

The answer of A _________________________is a software program that appears...

Question 12

A practice in which eavesdroppers drive by buildings or park outside and try to intercept wireless network traffic is referred to as ________.

Accepted Answer

The answer of A practice in which eavesdroppers drive by...

Question 13

__________________________ are independent computer programs that copy themselves from one computer to other computers over a network.

Accepted Answer

The answer of __________________________ are independent computer programs that copy...

Question 14

Comprehensive security management products,with tools for firewalls,VPNs,intrusion detection systems,and more,are called ________ systems.

Accepted Answer

The answer of Comprehensive security management products,with tools for firewalls,VPNs,intrusion...

Question 15

A ____________________ is an individual who intends to gain unauthorized access to a computer system.

Accepted Answer

The answer of A ____________________ is an individual who intends...

Question 16

A(n)________ examines the firm's overall security environment as well as the controls governing individual information systems.

Accepted Answer

The answer of A(n)________ examines the firm's overall security environment...

Question 17

___________________________ devises plans for the restoration of computing and communications services after they have been disrupted
A) Disaster recovery planning
B) Business continuity planning
C) MIS audit
D) Risk assessment

Accepted Answer

Disaster recovery planning specifically focuses on restoring computing and communications services after they have been disrupted, while business continuity planning is more broad and aims to keep critical business functions running during and after a disruption. MIS audit and risk assessment are related but not specific to restoring services after a disruption.

Question 18

___________________________ focuses on how the company can restore business operations after a disaster strikes.
A) Disaster recovery planning
B) Business continuity planning
C) MIS audit
D) Risk assessment

Accepted Answer

The answer of ___________________________ focuses on how the company can...

Question 19

Malicious software programs referred to as ________ include a variety of threats such as computer viruses,worms,and Trojan horses.

Accepted Answer

The answer of Malicious software programs referred to as ________...

Question 20

___________________________ oversee the work of the computer department to ensure that programmed procedures are consistently and correctly applied to the storage and processing of data.
A) Software controls
B) Hardware controls
C) Computer operations controls
D) Data security controls

Accepted Answer

Computer operations controls involve overseeing the work of the computer department to ensure that programmed procedures are consistently and correctly applied to the storage and processing of data. Software controls refer to controls built into software applications to ensure proper functioning, hardware controls refer to controls built into hardware components for proper functioning, and data security controls refer to controls for protecting data from unauthorized access or disclosure.

Quiz 8: Securing Information Systems