Question 1

Discussing security attacks through public trials and the associated publicity not only has enormous potential costs in public relations,but no real monetary costs.

Accepted Answer

Public trials and the associated publicity can lead to real monetary costs, such as legal fees, potential fines, and loss of business due to damaged reputation.

Question 2

A(n)____ defines an organization's security requirements as well as the controls and sanctions needed to meet those requirements.

Accepted Answer

A security policy outlines an organization's security requirements and the controls and sanctions necessary to meet those requirements. An information policy generally covers the overall management of information within an organization, while a computer policy outlines the rules for using computer systems and equipment. An acceptable use policy (AUP) is a specific type of computer policy that outlines acceptable and unacceptable behavior when using an organization's computer systems, networks, and other resources.

Question 3

The ____ Amendment of the Constitution protects citizens from unreasonable searches by the government and is often used to protect the privacy of government employees.

Accepted Answer

The Fourth Amendment specifically prohibits unreasonable searches and seizures and requires any warrant to be judicially sanctioned and supported by probable cause. This protection extends to government employees and their privacy in the workplace. The First Amendment protects freedom of speech, religion, and the press. The Seventh Amendment guarantees the right to a jury trial in certain civil cases, and the Tenth Amendment limits the power of the federal government to those delegated to it by the Constitution.

Question 4

The concept of ____ recognizes that managers must use their judgment to ensure that the cost of control does not exceed the system's benefits or the risks involved.

Accepted Answer

The concept of "reasonable assurance" recognizes that managers must use their judgment to strike a balance between the cost of control measures and the potential benefits or risks involved. This means that control measures should be reasonable and appropriate for the situation, rather than overly burdensome or costly. It is a key principle in the field of risk management and internal control. The other answer choices do not accurately describe this concept.

Question 5

Ethical behavior conforms to ____.

Accepted Answer

Ethical behavior refers to actions that are morally right and justifiable. While legal guidelines and company norms can be a part of ethical behavior, they do not always align with what is considered ethical by society. Family rules are also not a reliable indicator of ethical behavior as they vary greatly between families and cultures. Generally accepted social norms, however, are a widely recognized standard for ethical behavior within a community or society.

Question 6

The ____ is a senior-level manager who provides vision and direction in the area of business conduct.

Accepted Answer

A corporate ethics officer is responsible for providing vision and direction in the area of business conduct, ensuring ethical practices within the organization.

Question 7

A ____ stands guard between your organization's internal network and the Internet,and limits network access based on the organization's access policy.

Accepted Answer

A firewall is a security device that controls and limits network access based on the organization's access policy. It stands guard between your organization's internal network and the Internet, monitoring all incoming and outgoing traffic, and blocking any unauthorized access attempts. Firewalls are an essential component of network security and help to prevent cyber attacks, data breaches, and other security threats.

Question 8

In a for-profit corporation,the ____ primary objective is to oversee the organization's business activities and management for the benefit of all stakeholders,including shareholders,customers,employees,suppliers,and the community.

Accepted Answer

The board of directors is responsible for overseeing the business activities and management of a for-profit corporation for the benefit of all stakeholders, including shareholders, customers, employees, suppliers, and the community. The CEO is responsible for implementing the strategic direction set by the board, while the CFO is responsible for financial management and the CPO is responsible for privacy compliance.

Question 9

The code of ____ defines five widely accepted core principles concerning fair information practices of privacy protection.

Accepted Answer

The phrase "fair information practices" is a well-known term in the field of privacy and data protection. The code referred to in the question is likely the Fair Information Practice Principles (FIPPs), which are a set of principles that have been widely adopted globally to guide the collection, use, and safeguarding of personal data.

Question 10

An essential part of follow-up is to determine how the organization's security was compromised so that it does not happen again.

Accepted Answer

It is important to determine the root cause of a security breach in order to prevent it from happening again in the future. This can involve reviewing system logs, analyzing network traffic, and conducting assessments of security protocols and training programs. Without understanding how the breach occurred, organizations may be at risk for future incidents and may not be able to effectively address vulnerabilities in their security posture.

Question 11

Antivirus software scans for a specific sequence of bytes,known as a(n)____.

Accepted Answer

Antivirus software looks for a unique set of code, also called a signature, that is specific to a known virus or malware. This signature is used to identify and remove the malicious code from your computer or device.

Question 12

Expert crackers can conceal their identity and tracking them down can take a long time as well as a tremendous amount of corporate resources.

Accepted Answer

Expert crackers are skilled in concealing their identity and can make it challenging to trace them. It often requires substantial time and resources from companies to track them down.

Question 13

It is crucial that antivirus software be updated continually with the latest virus detection information,called ____.

Accepted Answer

Virus definitions refer to the latest virus detection information that antivirus software requires to protect against new and emerging threats. Pattern databases, virus signatures, and database patterns may all refer to similar concepts but are not commonly used terminology in the context of antivirus software. Therefore, choice B is the best answer.

Question 14

A ____ is an organization's review of potential threats to its computers and networks along with an analysis of the probability that these will occur and prevent the organization from meeting key business objectives.

Accepted Answer

A risk assessment is a comprehensive review of potential threats and the probability of their occurrence. It is used to identify vulnerabilities in an organization's systems and determine the level of risk associated with each one. By conducting a risk assessment, an organization can develop strategies to minimize risk and ensure business continuity.

Question 15

Even if a company decides that the negative publicity risk from a security breach is worth it and goes after the perpetrator,documents containing proprietary information that must be provided to the court could cause even greater security threats in the future.

Accepted Answer

Providing documents containing proprietary information in court could potentially expose the company's sensitive data to further security threats, even if legal action is taken against the perpetrator of the breach. Therefore, for some companies, the risk of negative publicity from a security breach may not be worth the potential security risks and legal consequences that could stem from pursuing legal action.

Question 16

All parties working on the problem need to be kept informed and up-to-date,even if it means using systems connected to the compromised system.

Accepted Answer

Using systems connected to a compromised system can spread the security breach and further compromise data integrity. It's important to use secure and isolated communication channels to keep all parties informed.

Question 17

____ refers to criminal activity in which a computer or a computer network is used as a tool to commit a crime or is the target of criminal activity.

Accepted Answer

Cybercrime refers specifically to criminal activity involving computers or computer networks. It encompasses a range of illegal activities including hacking, identity theft, and the distribution of malware. While similar, ecrime and virtual crime are not as specific to computer-based criminal activity. Network crime may refer to criminal activity involving any type of network, not just computer networks.

Question 18

A(n)____ works by using the Internet to relay communications,but maintains privacy through security procedures and tunneling protocols,which encrypt data at the sending end and decrypt it at the receiving end.

Accepted Answer

The definition describes a virtual private network (VPN), which creates a secure, encrypted connection over a public network (such as the Internet). A virtual private network maintains privacy through security procedures and tunneling protocols, which encrypt data at the sending end and decrypt it at the receiving end.

Question 19

Organizations need to define carefully employee ____ and to separate key responsibilities properly,so that a single person is not responsible for accomplishing a task that has high security implications.

Accepted Answer

The sentence refers to defining employee roles and separating responsibilities properly, which suggests that the answer is C) roles. The other options do not fit the context as well. A) privileges and B) authorizations are similar to each other and do not specifically refer to employee responsibilities, while D) authentications is not relevant to the sentence.

Question 20

____ work to prevent an attack by blocking viruses,malformed packets,and other threats from getting into the company network.

Accepted Answer

Intrusion prevention systems (IPS) are designed to detect and prevent identified threats by blocking malicious traffic and activities, including viruses and malformed packets, from entering the network.

Quiz 12: Ethical, privacy, and Security Issues