Question 1

Social engineering is an __________ threat on the part of the employee and an __________ threat on the part of the social engineer.

Accepted Answer

Social engineering is considered an unintentional threat from the perspective of the employee, as they are often manipulated or tricked into compromising security without their intent to harm. From the social engineer's perspective, it is an intentional threat, as they deliberately exploit human vulnerabilities to gain unauthorized access to information or systems.

Question 2

BYOD can lead to problems with which human mistake?

Accepted Answer

BYOD (Bring Your Own Device) involves using personal, unmanaged devices for work, which can lead to carelessness in handling sensitive information or security protocols.

Question 3

You want to be nice, so you gladly hold the door for the person behind you that is also coming into your secure office building. This is an example of __________.

Accepted Answer

This is an example of tailgating, which is when someone follows closely behind another person in order to gain access to a secure area. While holding the door for someone may seem like a polite gesture, it can actually compromise the security of the building if the person behind you is not authorized to enter. It's important to always be aware of who is behind you and make sure they are authorized to enter the secure area.

Question 4

The loss from computer crimes average _________ of dollars in damages to businesses each year.

Accepted Answer

The loss from computer crimes averages billions of dollars in damages to businesses each year, reflecting the significant impact of cybercrime on the global economy.

Question 5

The Cardinals-Astros scandal started when ____________.

Accepted Answer

The scandal began when several members of the Cardinals' front-office personnel, including Jeff Luhnow, left for the Astros. This led to a hacking incident where a Cardinals employee accessed the Astros' database.

Question 6

Your best friend sends you an unusual link with only the comment "Check this out". This is an example of which human mistake?

Accepted Answer

This scenario exemplifies "Opening questionable e-mails," as it involves potentially risky behavior by clicking on a link sent via an email or message without verifying its safety or source.

Question 7

____________ are the most frequently ignored people in information security systems.

Accepted Answer

Janitors are often overlooked in information security systems because they typically have physical access to buildings and offices but are not always considered in security policies or training programs, making them potential unintentional security risks.

Question 8

The computing skills necessary to be a hacker are _______.

Accepted Answer

The answer of The computing skills necessary to be a...

Question 9

USB keys can store terabytes of data. Of the five key factors that contribute to the increasing vulnerability of organizational information resources, this is an issue related to __________.

Accepted Answer

USB keys with large storage capacities contribute to the increasing vulnerability of organizational information resources because it makes it easier for employees to steal large amounts of sensitive data and transfer it to smaller, portable devices. This is a result of the availability of smaller and cheaper storage devices.

Question 10

CEOs often trust their CIOs to manage technology issues, so they have historically taken a "hands-off" approach to cybersecurity. Of the five key factors that contribute to the increasing vulnerability of organizational information resources, this is an issue related to __________.

Accepted Answer

The issue of CEOs taking a "hands-off" approach to cybersecurity is related to the lack of management support, which is one of five key factors contributing to increasing vulnerability of organizational information resources.

Question 11

You want to be nice, so you gladly hold the door for the person behind you that is also coming into your secure office building. This is an example of __________ and you _______ do it.

Accepted Answer

This is an example of tailgating, a security breach where unauthorized individuals gain access to a secure area by following someone with access. You should not do it as it compromises security.

Question 12

The ___________ of an information resource is the harm, loss, or damage that can result if a threat compromises that resource.

Accepted Answer

Exposure refers to the potential harm, loss, or damage that can result if a threat compromises an information resource. It is about the extent to which an organization or individual could be affected by a security breach.

Question 13

Employees in _________ pose especially significant threats to information security.

Accepted Answer

IT employees typically have access to sensitive information and systems, making them potential targets for malicious attacks or insider breaches.

Question 14

Which industry has the highest per-record cost of a data breach?

Accepted Answer

Healthcare consistently has the highest per-record cost of a data breach compared to other industries. This is due to the sensitive nature of personal health information (PHI), stringent regulatory requirements, and the significant impact on patient trust and safety.

Question 15

Many employees bring their own devices to work (the BYOD phenomenon) to use on the company network. Of the five key factors that contribute to the increasing vulnerability of organizational information resources, this is an issue related to __________.

Accepted Answer

The BYOD phenomenon is related to the increasing vulnerability of organizational information resources due to today's interconnected, interdependent, wirelessly networked business environment.

Question 16

An information resource's ________________ is the possibility that the system will be harmed.

Accepted Answer

Vulnerability is the possibility that the system will be harmed.

Question 17

A(n) _____________ to an information resource is any danger to which a system may be exposed.

Accepted Answer

A threat is any danger or potential danger to which a system may be exposed. Exposure refers to the act of being exposed to a threat, risk refers to the likelihood of a threat occurring, and vulnerability refers to a weakness or flaw in a system that can be exploited by a threat. Therefore, the best choice for this definition is "threat."

Question 18

If the charges are confirmed, the attack would represent the first known case of corporate espionage in which a professional sports team hacked the network of another team. This attack occurred in which sport?

Accepted Answer

The attack occurred in Major League Baseball (MLB), involving the St. Louis Cardinals hacking the Houston Astros' network.

Question 19

You step away from your desk for a few minutes to get some coffee. Since you figure you won't be gone long, you don't lock your computer. This is an example of which human mistake?

Accepted Answer

Leaving a computer unlocked while away, even for a short period, is an example of carelessness with one's office environment. It exposes the system to potential unauthorized access.

Question 20

Anyone can download a script from the web to attack any information system connected to the internet. Of the five key factors that contribute to the increasing vulnerability of organizational information resources, this is an issue related to __________.

Accepted Answer

The decreasing skills necessary to be a computer hacker contribute to the increasing vulnerability of organizational information resources, as it lowers the barrier for individuals to launch attacks on information systems.

Quiz 7: Information Security

Social engineering is an threat on the part of the employee and an threat on the part of the social engineer.