Question 1

Fraudsters carry out their crime by threatening others and by taking advantage of their fears of job loss or disciplinary action.

Accepted Answer

The answer of Fraudsters carry out their crime by threatening...

Question 2

Most viruses,trojans,and worms are activated when an attachment is opened or a link is clicked.

Accepted Answer

Viruses, trojans, and worms are typically designed to spread and infect a system when an attachment is opened or a link is clicked. These actions trigger the execution of the malicious code and allow it to start infecting the system. Therefore, it is important to be cautious when opening attachments or clicking on links, especially if they come from unknown or suspicious sources.

Question 3

According to a Mobile Phone report,17 rogue apps managed to get into Google Play and they were downloaded over 700,000 times before being removed.Rogue mobile apps can contain malware or launch phishing attacks.

Accepted Answer

Rogue mobile apps can indeed contain malware or launch phishing attacks, and a report states that 17 such apps managed to get into Google Play and were downloaded over 700,000 times before being removed.

Question 4

Firewalls and intrusion detection systems (IDS)mostly protect against internal threats.

Accepted Answer

Firewalls and intrusion detection systems are designed to protect against external threats that may compromise the security of the network, not internal threats. They monitor incoming and outgoing network traffic and identify potential threats such as malware, unauthorized access attempts, and suspicious network activity. However, they are also useful in detecting and preventing internal threats that may arise from employees or other authorized users intentionally or unintentionally compromising the network security.

Question 5

Phishing is a deceptive method of stealing confidential information by pretending to be a legitimate organization,such as PayPal,a bank,credit card company,or other trusted source.

Accepted Answer

Phishing involves using fraudulent websites or emails that appear to be from legitimate organizations in order to trick individuals into providing their personal or financial information.

Question 6

Approximately 25 percent of occupational fraud could have been prevented if proper IT-based internal controls had been designed,implemented,and followed

Accepted Answer

Studies and reports, including those from the Association of Certified Fraud Examiners (ACFE), suggest that a significant portion of occupational fraud is indeed preventable with proper controls. However, the specific percentage that could be prevented varies and is not universally agreed upon to be exactly 25 percent. Effective IT-based internal controls are crucial, but the exact percentage they could prevent is not definitively stated as 25 percent.

Question 7

When a host computer is infected,attempts to remove the malware may fail-and the malware may reinfect the host during a restore if the malware is captured in backups or archives.

Accepted Answer

When attempting to remove malware, there is a possibility that the removal process may fail, and the malware could reinfect the host during a restore process. This can happen if the malware is present in backups or archives that are being used to restore the system to a previous state. Therefore, it is important to ensure that backups and archives are thoroughly scanned for malware before restoring them to a system.

Question 8

SOX and the SEC regulators are making it clear that if controls can be ignored,there is no control.Therefore,fraud prevention and detection require an effective monitoring system.

Accepted Answer

The statement is true. SOX and the SEC emphasize that controls must be followed and fraud prevention and detection require effective monitoring.

Question 9

Detection and damage containment are the most desirable fraud controls.

Accepted Answer

Detection and prevention are generally considered the most desirable fraud controls, as they aim to stop fraud before it occurs rather than just containing damage after it happens.

Question 10

Social networks and cloud computing increase vulnerabilities by providing a single point of failure and attack for organized criminal networks.

Accepted Answer

Social networks and cloud computing store large amounts of data and information, making them attractive targets for cybercriminals. A single successful attack on these platforms can lead to a major security breach that affects a large number of users. Therefore, social networks and cloud computing do increase vulnerabilities by providing a single point of failure and attack for organized criminal networks.

Question 11

A biometric control is an automated method of verifying the identity of a person,based on physical or behavioral characteristics.

Accepted Answer

A biometric control is indeed an automated method of verifying identity using physical or behavioral characteristics, such as fingerprints, iris patterns, facial recognition, or voiceprints.

Question 12

Online gambling offers easy fronts for international money-laundering operations.

Accepted Answer

Online gambling has often been used as a vehicle for money laundering due to its anonymity and ease of transferring funds across borders. Criminals can easily deposit illicit funds into an online gambling account and then withdraw clean funds as winnings. This makes it difficult for law enforcement to track the flow of money and identify the source of the illicit funds.

Question 13

____________ tactics are used by hackers and corporate spies to trick people into revealing login information or access codes.

Accepted Answer

The answer of ____________ tactics are used by hackers and...

Question 14

Botnets often target select groups of people with something in common-they work at the same company,bank at the same financial institution,or attend the same university

Accepted Answer

The answer of Botnets often target select groups of people...

Question 15

Hardware and software security defenses are important because they protect against irresponsible business practices.

Accepted Answer

Hardware and software security defenses are primarily designed to protect against external and internal cyber threats, unauthorized access, and data breaches, rather than to mitigate irresponsible business practices.

Question 16

One of the biggest mistakes managers make is underestimating IT vulnerabilities and threats.

Accepted Answer

IT vulnerabilities and threats are constantly evolving, and managers need to stay up-to-date on the latest threats and take proactive measures to address them. Underestimating these vulnerabilities and threats can leave organizations vulnerable to cyberattacks and other security incidents.

Question 17

The practice of people bringing and using their own mobile devices for work purposes is called _________.

Accepted Answer

The answer of The practice of people bringing and using...

Question 18

Enterprises take risks with BYOD practices that they never would consider taking with conventional computing devices.

Accepted Answer

BYOD (bring your own device) practices involve allowing employees to use their personal devices for work purposes. This can include smartphones, laptops, tablets, and more. Enterprises may take risks with BYOD practices that they may not take with conventional computing devices because personal devices may not have the same level of security measures in place as company-provided devices. Additionally, employees may use their personal devices for non-work-related activities, which could increase the risk of a security breach. Therefore, enterprises should carefully evaluate and manage the risks associated with BYOD practices.

Question 19

A business impact analysis estimates the consequences of disruption of a business function and collects data to develop recovery strategies.

Accepted Answer

A business impact analysis (BIA) is a process that estimates the potential consequences of disruption of a business function in order to prioritize recovery strategies. This involves collecting data on critical business processes, dependencies, and resources to identify the impacts of potential disruptions and the necessary steps to resume normal operations.

Question 20

Internal fraud prevention measures are based on the same controls used to prevent external intrusions-perimeter defense technologies,such as firewalls,e-mail scanners,and biometric access.

Accepted Answer

Internal fraud prevention measures do utilize similar controls as external intrusions, such as firewalls and access restrictions.

Quiz 5: Cybersecurity and Risk Management Technology