Question 1

A strong security program begins by assessing the backgrounds of the employees in the organization.

Accepted Answer

A strong security program typically begins with identifying and assessing potential risks and vulnerabilities within the organization, not just focusing on employee backgrounds.

Question 2

A 'virus signature' contains the email ID of the virus developer.

Accepted Answer

A virus signature is a unique pattern or code that is used by antivirus software to identify a specific virus. It does not contain the email ID of the virus developer.

Question 3

It is not uncommon for computer users to share their login ID and password with coworkers.

Accepted Answer

Unfortunately, it is common for some computer users to share their login credentials with coworkers, even though it is not recommended for security reasons.

Question 4

As the complexity of a network increases, the possibility of security breaches decreases.

Accepted Answer

As the complexity of a network increases, the possibility of security breaches also increases. This is because there are more entry points and vulnerabilities that can be exploited by attackers. A complex network requires more advanced security measures and constant monitoring to ensure its safety.

Question 5

A virus can reside in a file (or many files) on the hard drive, but it would not be active in memory. As such, it is not as important to scan live memory as it is to scan the hard drive.

Accepted Answer

Viruses can be active in memory, and scanning live memory is important to detect and remove active threats that may not be stored on the hard drive.

Question 6

The computer is running, but not responding to your keyboard inputs. You find that the network activities are running very slowly. You have probably been hit by a rootkit.

Accepted Answer

A rootkit can cause the computer to run slowly and make it unresponsive to keyboard inputs, as well as other possible symptoms such as unexpected network activity and changes to system files.

Question 7

Spam emails make up only a small proportion (<10%) of emails.

Accepted Answer

According to a report by Statista, spam emails accounted for 45.5% of email traffic worldwide in March 2020. Therefore, spam emails make up a significant proportion of emails.

Question 8

Those convicted of cyberterrorism are subject to a prison term of 6 months to 1 year.

Accepted Answer

The sentence for cyberterrorism varies greatly depending on the severity of the crime and the country's laws. In some cases, it can result in a life sentence or even the death penalty in certain countries.

Question 9

Most organizations do not hesitate to conceal information about a data loss event if there is a fear of bad publicity and loss of customers.

Accepted Answer

The answer of Most organizations do not hesitate to conceal...

Question 10

Macro viruses are called so because they are written using a macro language.

Accepted Answer

Macro viruses are specifically designed to infect and spread through macro-enabled documents such as Microsoft Word, Excel, and PowerPoint. They are written using a macro language that is built into these programs.

Question 11

Educational institutions' Websites are the most commonly targeted sites by phishers

Accepted Answer

Financial institutions' websites are more commonly targeted by phishers due to the potential for financial gain.

Question 12

If an attack is dangerous enough, it may warrant shutting down or disconnecting critical systems from the network.

Accepted Answer

If an attack poses a significant threat to the safety or functioning of critical systems, it may be necessary to shut them down or disconnect them from the network to prevent further damage or compromise. This is a common tactic in incident response and risk management.

Question 13

An attack that takes place before the security community and/or software developers become aware of and fix a security vulnerability is called the 'zero-day attack.'

Accepted Answer

A zero-day attack is an attack that exploits a vulnerability that is unknown to the software vendor or the security community. It is called "zero-day" because there are zero days between the time the vulnerability is discovered and the time it is exploited.

Question 14

You see a deceptive pop-up that says your computer is infected and that you must visit a compromised web site where you pay them to clean your computer. You have just become a victim of ransomware.

Accepted Answer

This scenario describes a common tactic used by ransomware to trick users into paying for a supposed "fix" for their infected computer. Once the user visits the compromised website and pays the ransom, their computer may still be infected or their files may be held hostage until they pay even more money. It is important to never trust unsolicited pop-ups or emails claiming your computer is infected and to have robust anti-virus software installed to prevent ransomware attacks.

Question 15

There are laws that require businesses to prove that their data is secure.

Accepted Answer

Yes, there are laws such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) that require businesses to ensure the security of personal data they collect and process. Failure to do so can result in legal and financial consequences.

Question 16

An employee who is marked for a lay-off sent threatening emails to his boss, stating that he is going to delete sensitive data. This employee can be charged under the Computer Fraud and Abuse Act.

Accepted Answer

The Computer Fraud and Abuse Act criminalizes a number of computer-related activities, including intentionally accessing a computer without authorization or exceeding authorized access, which would include deleting sensitive data without permission. The threatening emails may also be considered a form of extortion or harassment.

Question 17

Transmitting a program, code, or command that causes harm to a computer is a crime.

Accepted Answer

Transmitting harmful code or commands to a computer can lead to charges of cybercrime, including unauthorized access, hacking, and malware distribution. Such actions can cause damage to the computer, compromise sensitive information, and disrupt normal operations, leading to legal consequences for the perpetrator.

Question 18

Whenever there is a computer security incident, it is not recommended that the organization reveal all they know in public forums.

Accepted Answer

Revealing all the details of a security incident in public forums can give valuable information to attackers and potentially make the situation worse. It is best to handle the incident through proper incident response procedures and only disclose necessary information to those directly involved in resolving the issue.

Question 19

You work at a call center of a large bank where you answer credit card services related questions from customers. Lately, you have noticed an increased number of customers enquiring if you had initiated a call. There can be a scam in progress.

Accepted Answer

The increase in customers enquiring about initiated calls may indicate a scam in progress, as scammers often use tactics such as impersonating a legitimate company or initiating fake calls to trick individuals into giving away personal information. It is important to educate customers on identifying and avoiding these scams.

Question 20

Discovery of a vulnerability in a software program can potentially be sold to the government.

Accepted Answer

It is not uncommon for individuals who discover vulnerabilities in software programs to sell their findings to government agencies or other entities willing to pay for such information. These vulnerabilities can then be used to improve the security of the software or to exploit the software for intelligence or law enforcement purposes. However, it is important to note that selling vulnerabilities to governments without proper authorization may be illegal in some jurisdictions.

Quiz 9: The Personal and Social Effects of Computers