Question 1

A social media policy outlines the corporate guidelines or principles governing employee online communications.

Accepted Answer

A social media policy is designed to set expectations and guide employees on how to behave online, especially in ways that could impact the company's reputation and legal standing.

Question 2

An acceptable use policy (AUP) requires a user to agree to follow it to be provided access to corporate email, information systems, and the Internet.

Accepted Answer

An Acceptable Use Policy (AUP) is a set of rules and guidelines that specifies how users can utilize company resources such as corporate email, information systems, and the Internet. Agreeing to follow an AUP is often a prerequisite for being granted access to these resources.

Question 3

Fair information practices are policies that allows employees to use their personal mobile devices and computers to access enterprise data and applications.

Accepted Answer

Fair Information Practices are principles that provide guidelines on how personal information should be collected, processed, and managed, focusing on privacy and data protection, not on the use of personal devices for accessing enterprise data.

Question 4

Internet governance is government attempts to control Internet traffic, thus preventing some material from being viewed by a country's citizens.

Accepted Answer

Internet governance refers to the development and application of shared principles, norms, rules, decision-making procedures, and programs that shape the evolution and use of the Internet, rather than solely government attempts to control Internet traffic. It involves a broader range of stakeholders including governments, private sector, civil society, and international organizations.

Question 5

Cybervandalism is a problem that occurs when someone registers purposely misspelled variations of well-known domain names.

Accepted Answer

Cybervandalism refers to the act of hacking into, defacing, or otherwise damaging a website or online service, rather than the act of registering misspelled domain names, which is known as typosquatting.

Question 6

Bring your own device is a policy that allows employees to use their personal mobile devices and computers to access enterprise data and applications.

Accepted Answer

Bring Your Own Device (BYOD) policies permit employees to use their personal smartphones, tablets, and laptops for work purposes, including accessing company information and applications.

Question 7

Website name stealing is the theft of a website's name that occurs when someone, posing as a site's administrator, changes the ownership of the domain name assigned to the website to another website owner.

Accepted Answer

Website name stealing, also known as domain hijacking, involves unauthorized changes to the domain registration, transferring control to someone else.

Question 8

Epolicies are policies and procedures that address information management along with the ethical use of computers and the Internet in the business environment.

Accepted Answer

Epolicies are indeed designed to guide the use of electronic resources in a way that ensures both effective information management and ethical conduct within a business context, covering areas such as computer use, internet access, and digital communication.

Question 9

Different organisations and countries have their own terms for these concerns. The United Kingdom terms it "Data Protection," and the European Union calls it "Personal Data Privacy"; the Organisation for Economic Co-operation and Development (OECD) has written Guidelines on the Protection of Privacy and Transborder Flows of Personal Data.

Accepted Answer

The terminology used to describe concerns about the handling and protection of personal information varies across different organizations and countries. The UK indeed uses the term "Data Protection," primarily governed by the Data Protection Act, while the EU refers to it as "Personal Data Privacy," regulated under the General Data Protection Regulation (GDPR). The OECD has also issued guidelines aimed at safeguarding personal data and managing its cross-border transfer, indicating a global recognition of these concerns albeit under different names.

Question 10

Cybervandalism is the electronic defacing of an existing website.

Accepted Answer

Cybervandalism refers to the act of modifying or damaging a website's appearance, content, or functionality without permission, essentially "defacing" it in a digital manner.

Question 11

Companies do not need a privacy policy for email because an employee's work email is private and cannot be viewed by the company.

Accepted Answer

Companies do need a privacy policy for email because an employee's work email is not considered private and can be monitored by the company for various reasons, including compliance and security.

Question 12

Employee monitoring policies explicitly state how, when, and where the company monitors its employees.

Accepted Answer

Employee monitoring policies are designed to clearly outline the methods, timing, and locations of monitoring to ensure transparency and compliance with legal requirements.

Question 13

Click-fraud is the abuse of pay-per-click, pay-per-call, and pay-per-conversion revenue models by repeatedly clicking on a link to increase charges or costs for the advertiser.

Accepted Answer

Click-fraud involves artificially inflating the number of clicks on pay-per-click advertisements, causing advertisers to pay more than they should for their advertising campaigns. This fraudulent activity can be conducted manually or through automated software.

Question 14

Cybervandalism includes threats, negative remarks, or defamatory comments transmitted via the Internet or posted on the website.

Accepted Answer

The answer of Cybervandalism includes threats, negative remarks, or defamatory...

Question 15

An ethical computer use policy contains general principles to guide computer user behavior.

Accepted Answer

An ethical computer use policy typically outlines general principles designed to guide appropriate and responsible behavior when using computer resources, ensuring users act in a manner that is ethical and respectful of others' rights.

Question 16

BYOD policies offer four basic options, including unlimited access for personal devices; access only to nonsensitive systems and data; access, but with IT control over personal devices, apps, and stored data; access, but preventing local storage of data on personal devices.

Accepted Answer

BYOD (Bring Your Own Device) policies indeed offer these four basic options to manage and secure the use of personal devices in a corporate environment, addressing varying levels of access and control to protect sensitive information.

Question 17

Fair information practices is a general term for a set of standards governing the collection and use of personal data and addressing issues of privacy and accuracy.

Accepted Answer

Fair Information Practices (FIPs) are indeed a set of principles and standards designed to protect personal privacy and ensure the accuracy, security, and proper management of personal data by organizations that collect and use such information.

Question 18

Workplace MIS monitoring tracks people's activities by such measures as number of keystrokes, error rate, and number of transactions processed.

Accepted Answer

Workplace MIS (Management Information Systems) monitoring involves tracking employees' activities and performance through various metrics, including the number of keystrokes, error rate, and number of transactions processed, to assess productivity and efficiency.

Question 19

Teergrubing is an antispamming approach where the receiving computer launches a return attack against the spammer, sending email messages back to the computer that originated the suspected spam.

Accepted Answer

Teergrubing is a type of antispamming approach where the receiving computer launches a return attack against the spammer, sending email messages back to the computer that originated the suspected spam.

Question 20

Bring your own devices is a general term for a set of standards governing the collection and use of personal data and addressing issues of privacy and accuracy.

Accepted Answer

"Bring your own device" (BYOD) refers to a policy allowing employees to use their personal devices (phones, tablets, laptops) for work purposes, rather than a set of standards for data privacy and accuracy.

Quiz 26: Accessing Organizational Informationdata Warehouses