Question 1

The Controlling the Assault of Non-Solicited Pornography and Marketing (CAN-SPAM) Act states that it is legal to spam, provided the messages meet a few basic requirements.

Accepted Answer

The CAN-SPAM Act does not outright ban spam emails but imposes requirements on sending behavior, content, and offers recipients the right to have senders stop emailing them.

Question 2

After virus eradication, you can use a previous backup to restore an infected computer.

Accepted Answer

False

Question 3

Ransomware is malware that stops you from using your computer or accessing your data until you meet certain demands, such as paying a ransom or sending photos to the attacker.

Accepted Answer

Ransomware is a type of malware that typically encrypts a victim's files and demands payment in exchange for the decryption key or to prevent the release of stolen data. The demands may vary, but they usually involve some form of payment or action by the victim to regain access to their data or device.

Question 4

Vishing frequently leads consumers to counterfeit Web sites designed to trick them into initiating a denial-of-service attack.

Accepted Answer

Vishing typically involves phone calls or voicemail messages that attempt to trick consumers into sharing sensitive information, such as credit card numbers or login credentials. It is not directly related to denial-of-service attacks or counterfeit websites.

Question 5

Employees and contract workers must be educated about the importance of security so that they will be motivated to understand and follow the security policies.

Accepted Answer

This statement is true. Educating employees and contract workers about security policies and their importance can increase their motivation to understand and follow these policies, ultimately increasing overall security within an organization.

Question 6

The cost to repair the worldwide damage done by a computer worm has exceeded $1 billion on more than one occasion.

Accepted Answer

There have been several instances where computer worms have caused damage exceeding $1 billion, such as the Love Bug virus in 2000 and the Mydoom worm in 2004.

Question 7

Computer forensics is such a new field that there is little training or certification processes available.

Accepted Answer

There are training and certification programs available in computer forensics. Organizations such as the International Association of Computer Investigative Specialists (IACIS) and the SANS Institute offer certification programs for computer forensics professionals. Additionally, universities and colleges offer degree programs and training in the field.

Question 8

Whenever possible, automated system rules should mirror an organization's written policies.

Accepted Answer

Automated system rules should be based on and align with an organization's written policies to ensure consistency and avoid conflicts.

Question 9

Trojan horse has become an umbrella term for many types of malicious code.

Accepted Answer

The answer of Trojan horse has become an umbrella term...

Question 10

Computer viruses differ from worms in that viruses can propagate without human intervention, often sending copies of themselves to other computers by email.

Accepted Answer

Computer viruses require human intervention to propagate, such as opening an infected email attachment or downloading and executing a file, whereas worms can spread themselves without human intervention.

Question 11

Bring your own device (BYOD) is a business policy that permits, and in some cases encourages, employees to use their own mobile devices (smartphones, tablets, or laptops) to access company computing resources and applications.

Accepted Answer

BYOD allows employees to use their own mobile devices to access company computing resources and applications.

Question 12

The cost of creating an email campaign for a product or a service is typically more expensive and takes longer to conduct than a direct-mail campaign.

Accepted Answer

This statement is false. Creating and conducting an email campaign is generally less expensive and faster than a direct-mail campaign.

Question 13

Cyberterrorism involves the deployment of malware that secretly steals data in the computer systems of organizations, such as government agencies, military contractors, political organizations, and manufacturing firms.

Accepted Answer

The answer of Cyberterrorism involves the deployment of malware that...

Question 14

Today's computer menace is much better organized and may be part of an organized group.

Accepted Answer

Over the years, cybercriminals have become more sophisticated and organized, often operating in groups or networks to launch coordinated attacks.

Question 15

A completed risk assessment identifies the most dangerous threats to a company and helps focus security efforts on the areas of highest payoff.

Accepted Answer

A complete risk assessment can help identify the most dangerous threats to a company and prioritize security efforts accordingly. By focusing on the areas of highest payoff, a company can allocate resources effectively and increase the effectiveness of their security measures.

Question 16

Cyberterrorism is the intimidation of government or civilian population by using information technology to disable critical national infrastructure to achieve political, religious, or ideological goals.

Accepted Answer

Cyberterrorism is defined as the use of technology to cause harm, create fear, or disrupt critical infrastructure with political, religious, or ideological motives. It involves acts such as hacking, spreading viruses, and conducting coordinated attacks on computer systems or networks.

Question 17

The Fifth Amendment regulates the collection of the content of wire and electronic communications.

Accepted Answer

The Fourth Amendment regulates the collection of the content of wire and electronic communications, not the Fifth Amendment. The Fifth Amendment protects against self-incrimination and double jeopardy, among other things.

Question 18

Rootkit is a set of programs that enables its users to gain administrator-level access to a computer without the end user's consent or knowledge.

Accepted Answer

Rootkits are specifically designed to hide from detection and allow unauthorized access to a computer system without the knowledge or consent of the user.

Question 19

A security policy outlines exactly what needs to be done to safeguard computers and their data, but not how it must be accomplished.

Accepted Answer

A security policy should provide clear guidelines and rules for protecting computer systems and data, but should not dictate specific technological solutions or approaches. This allows for flexibility and adaptation to changing threats and technologies.

Question 20

A spear phishing attack typically employs a group of zombies to keep the target so busy responding to a stream of automated requests that legitimate users cannot access the target.

Accepted Answer

A spear phishing attack is a targeted attack that aims to trick a specific individual into divulging sensitive information, rather than using zombies to overwhelm the target's system.

Quiz 3: Cyberattacks and Cybersecurity