Question 1

What area of information security focuses on preventing identity theft, phishing, and pharming scams?
A) Prevention and resistance
B) Detection and authorizing
C) Detection and response
D) Authentication and authorization

Accepted Answer

The answer of What area of information security focuses on...

Question 2

What is an insider?
A) A form of social engineering in which one individual lies to obtain confidential data about another individual.
B) A hacker looks through your trash to find personal information.
C) Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident.
D) Malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines.

Accepted Answer

Insiders are legitimate users (such as employees, contractors, or business partners) who have authorized access to an organization's network, systems, or data and who misuse that access in a way that negatively affects the organization's information security or its ability to conduct business. This misuse can be either intentional (purposely) or unintentional (accidentally).

Question 3

Which of the following represents the three areas where technology can aid in the defense against information security attacks?
A) Authentication and authorization, prevention and resistance, prevention and response
B) Authentication and authorization, prevention and response, detection and response
C) Analyzing and authenticating, prevention and repositioning, detection and response
D) Authentication and authorization, prevention and resistance, detection and response

Accepted Answer

Technology aids in information security through authentication and authorization, prevention and resistance, and detection and response.

Question 4

Which of the following is an example of a way to maintain information security that a company should include in their information security policies?
A) Requiring computer users to log off before leaving for lunch
B) Never sharing user or password information with anyone
C) Changing passwords every 30-60 days
D) All of these

Accepted Answer

All of the options listed are examples of good practices to maintain information security. Requiring users to log off before leaving their computer unattended, not sharing login credentials, and regularly changing passwords are all measures that can help protect against unauthorized access and potential security breaches.

Question 5

What is dumpster diving?
A) A form of social engineering in which one individual lies to obtain confidential data about another individual.
B) A hacker that looks through your trash to find personal information.
C) Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident.
D) Malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines.

Accepted Answer

Dumpster diving refers to the practice where individuals, often hackers, sift through someone's trash to find personal or sensitive information that can be used for fraudulent activities or gaining unauthorized access to systems.

Question 6

Which of the below represents the biggest problem of information security breaches?
A) People misusing organizational information
B) Technology failures
C) Customers misusing organizational systems
D) Company departments missing sales goals

Accepted Answer

People misusing organizational information is often cited as the biggest problem in information security breaches, as human error or malicious intent can lead to significant vulnerabilities and incidents.

Question 7

What is a destructive agent?
A) A form of social engineering in which one individual lies to obtain confidential data about another individual.
B) A hacker looks through your trash to find personal information.
C) Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident.
D) Malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines.

Accepted Answer

Destructive agents are malicious software or codes designed by attackers to perform harmful actions, such as farming email addresses or depositing spyware, which can compromise privacy and security.

Question 8

Janet is a financial aid counselor at a local community college and she shares an office with her three coworkers. Janet feels safe in her office environment and frequently leaves her username and password on a sticky note next to her computer. Without realizing it Janet is creating the potential for which type of information security breach to occur?
A) Insiders to hack into the college system
B) Dumpster diving to find usernames and passwords
C) Viruses and worms to spread through the college system
D) All of these

Accepted Answer

Leaving usernames and passwords on a sticky note can allow insiders, such as her coworkers or anyone else with access to the office, to easily obtain her login credentials and potentially hack into the college system.

Question 9

Imagine you accidently mistype the URL for your bank and you are redirected to a fake website that collects your information. What type of identity theft were you just a victim of?
A) Pharming
B) Worm holes
C) Phishing
D) Insider hacking

Accepted Answer

Pharming involves redirecting users from legitimate websites to fraudulent ones for the purpose of extracting confidential information.

Question 10

What is forging of someone's identity for the purpose of fraud?
A) Identity crisis
B) Identity theft
C) Ediscovery
D) All of these

Accepted Answer

Identity theft is the act of stealing someone's personal information to commit fraud.

Question 11

Working at a ski resort in the mountains has its own unique security issues. Kenny is the chief information officer for Sundance Ski Resort, and he is faced with both physical and information security threats every month. Since the resort implemented a new software system, they have been having larger number of threats and breaches of company information. He suspects that this may be caused by an internal employee. He needs to clarify and establish what type of plan to help reduce further problems?
A) An information security plan
B) An ethical information policy
C) An antivirus plan
D) None of these

Accepted Answer

An information security plan is essential for addressing the threats and breaches of company information, especially when there's suspicion of internal threats. It encompasses policies, tools, and procedures to protect information assets.

Question 12

Applications allowed to be placed on the corporate network, like IM software, and corporate computer equipment used for personal reason on personal networks are two areas that should be addressed by managers in which of the below company policies?
A) Information ethics policy
B) Information security policy
C) Information technology plan
D) All of these

Accepted Answer

The correct answer is B) Information security policy. This policy typically outlines the rules for ensuring the security of corporate information and technology assets, including the use of applications on the corporate network and the use of corporate equipment on personal networks.

Question 13

eBay is an example of an online company that has been faced with numerous security issues. For example, imagine you purchase a digital camera on eBay. Three months later you might receive an email asking you to log in to the system to update your credit card or PayPal information. Of course, this email is not actually from eBay and as soon as you log in your information will be stolen. What type of information security breach would you consider this to be?
A) An Insider
B) Dumpster diving
C) Social engineering
D) Phishing

Accepted Answer

This scenario describes a phishing attack, where fraudulent emails that appear to be from reputable companies are sent to individuals to induce them to reveal personal information, such as passwords and credit card numbers.

Question 14

What is it called when a hacker looks through your trash to find personal information?
A) Striker bunny
B) Dumpster diving
C) Trash retrieval
D) Approved consent

Accepted Answer

Dumpster diving is the correct term used to describe when a hacker or identity thief goes through someone's trash to find personal information that can be used in fraudulent activities.

Question 15

What is a form of social engineering in which one individual lies to obtain confidential data about another individual?
A) Dumpster texting
B) Dumpster diving
C) Trash retrieval
D) Pretexting

Accepted Answer

Pretexting is a form of social engineering where an individual lies or creates a fabricated scenario to obtain confidential information from another person.

Question 16

What is the process that provides a user with permission including access levels and abilities such as file access, hours of access, and amount of allocated storage space?
A) Pharming
B) Authentication
C) Authorization
D) Programming

Accepted Answer

Authorization is the process that determines what a user is permitted to do, such as accessing specific files or data, the hours during which access is allowed, and the amount of storage space available to them.

Question 17

What is pretexting?
A) A form of social engineering in which one individual lies to obtain confidential data about another individual.
B) A hacker looks through your trash to find personal information.
C) Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident.
D) Malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines.

Accepted Answer

Pretexting is a social engineering technique where an individual lies or uses a false pretext to gain confidential information from another person. This often involves the attacker pretending to need the information for a legitimate reason.

Question 18

Angela works for an identity protection company that maintains large amounts of sensitive customer information such as usernames, passwords, personal information, and social security numbers. Angela and a coworker decide to use the sensitive information to open credit cards in a few of her customer's names. This is a classic example of which of the following security breaches?
A) A social engineer
B) An insider
C) A spammer
D) A dumpster diver

Accepted Answer

Angela and her coworker are employees of the company and misuse their access to sensitive customer information for fraudulent purposes, making this an example of an insider threat.

Question 19

What is the difference between phishing and pharming?
A) Phishing is not illegal, pharming is illegal
B) Phishing is the right of the company, where pharming is the right of the individual
C) Phishing is a technique to gain personal information for the purpose of identity theft, and pharming reroutes requests for legitimate websites to false websites
D) All of these

Accepted Answer

Phishing involves tricking individuals into revealing personal information through deceptive emails or messages, while pharming redirects users from legitimate websites to fraudulent ones without their knowledge, often by exploiting vulnerabilities in DNS servers. Both are illegal and unethical practices aimed at stealing personal information or credentials.

Question 20

Using one's social skills to trick people into revealing access credentials or other valuable information is called ________.
A) social engineering
B) social media
C) social viruses
D) social processes

Accepted Answer

Social engineering is a manipulation technique that exploits human error to gain private information, access, or valuables. It often involves tricking people into breaking normal security procedures.

Quiz 25: Valuing and Storing Organizational Informationdatabases

What area of information security focuses on preventing identity theft, phishing, and pharming scams?

What is an insider?

Which of the following represents the three areas where technology can aid in the defense against information security attacks?

Which of the following is an example of a way to maintain information security that a company should include in their information security policies?

What is dumpster diving?

Which of the below represents the biggest problem of information security breaches?

What is a destructive agent?

Imagine you accidently mistype the URL for your bank and you are redirected to a fake website that collects your information. What type of identity theft were you just a victim of?

What is forging of someone's identity for the purpose of fraud?

Applications allowed to be placed on the corporate network, like IM software, and corporate computer equipment used for personal reason on personal networks are two areas that should be addressed by managers in which of the below company policies?

What is it called when a hacker looks through your trash to find personal information?

What is a form of social engineering in which one individual lies to obtain confidential data about another individual?

What is the process that provides a user with permission including access levels and abilities such as file access, hours of access, and amount of allocated storage space?

What is pretexting?

What is the difference between phishing and pharming?

Using one's social skills to trick people into revealing access credentials or other valuable information is called ________.