Question 1

________ pose(s) security risks and challenges for individuals as well as organizations.

Accepted Answer

All of the options listed (social networking media, Facebook use, cyberstalking, and smartphones) pose various security risks and challenges for both individuals and organizations, such as privacy breaches, data theft, and unauthorized tracking or surveillance.

Question 2

Digitized information is not distance- or time-dependent.

Accepted Answer

Digitized information can be accessed and transmitted across vast distances almost instantaneously, making it not dependent on physical location or significant time delays.

Question 3

According to some experts, theft of money and securities of government represent the greatest threat to governments and businesses today.

Accepted Answer

While theft of money and securities poses a significant risk, experts often consider cyber threats, terrorism, and economic instability as greater threats to governments and businesses today due to their widespread and potentially catastrophic impacts.

Question 4

Information's worth can only be determined by calculating the political and financial impact of its loss.

Accepted Answer

The value of information is often determined by its potential impact, including political and financial consequences.

Question 5

With discretionary information access control, access is allowed on a need-to-know basis.

Accepted Answer

Discretionary Access Control (DAC) allows the owner of the resource to decide who is allowed to access it, often implementing a need-to-know basis to restrict access to information to individuals who require it to perform their duties.

Question 6

Mandatory access control strategies trace their origins to restrictive legislation.

Accepted Answer

Mandatory access control strategies are based on the principle of least privilege, which requires that users only have access to the information and resources that they need to perform their jobs. This principle was first enshrined in the US Department of Defense's Orange Book in 1985, which established a set of security requirements for computer systems.

Question 7

INFOSEC views operations from an adversary's perspective in an effort to seek out an organization's vulnerabilities and protect its critical information.

Accepted Answer

The answer of INFOSEC views operations from an adversary's perspective...

Question 8

Unlike business information, all government information must be released upon request.

Accepted Answer

Not all government information must be released upon request due to reasons such as national security, privacy laws, and other legal exemptions that protect certain types of information from being disclosed.

Question 9

Converting plain text to crypto text is referred to as decryption.

Accepted Answer

Converting plain text to crypto text is referred to as encryption, not decryption. Decryption is the process of converting crypto text back to plain text.

Question 10

Acoustical emanations are produced through the interplay of electrical and mechanical parts contained in communications equipment.

Accepted Answer

The answer of Acoustical emanations are produced through the interplay...

Question 11

Cryptographic security should not be viewed as a substitute for physical, personnel, and information security.

Accepted Answer

Cryptographic security is a critical component of a comprehensive security strategy, but it cannot replace the need for physical security (protecting hardware and facilities), personnel security (ensuring that employees and users are trustworthy and properly trained), and information security (protecting data from unauthorized access or alterations). These elements complement each other to provide a holistic approach to security.

Question 12

Interception of emanations can be prevented if computer rooms are constructed with acoustical materials and non-radiating electronic equipment is used.

Accepted Answer

Using acoustical materials can help absorb sound vibrations and prevent them from being intercepted, while non-radiating electronic equipment emits less electromagnetic radiation, reducing the risk of electronic eavesdropping.

Question 13

Computer crime is generally defined as any crime committed with computer technology.

Accepted Answer

Computer crime, also known as cybercrime, is broadly defined as any criminal activity that involves the use of computers or networked devices. This can range from unauthorized access, hacking, and theft of data to cyberbullying and distribution of illegal materials online.

Question 14

Anti-virus software is used to screen electronic traffic before allowing access to computer networks.

Accepted Answer

The answer of Anti-virus software is used to screen electronic...

Question 15

According to John Carroll's "simple security principle"
for safeguarding sensitive computer information, no person should view information that has a classification that exceeds the viewer's security clearance.

Accepted Answer

John Carroll's "simple security principle," also known as the "simple security property" or "no read up" rule, is a foundational concept in computer security stating that a person (or process) should not be able to access information at a higher classification level than their clearance allows.

Question 16

Phishing is not a form of identity theft.

Accepted Answer

Phishing is a form of identity theft where attackers trick individuals into revealing personal information, such as passwords and credit card numbers, often through deceptive emails or websites.

Question 17

What is the purpose of information security (INFOSEC)?

Accepted Answer

The answer of What is the purpose of information security...

Question 18

Define and contrast critical information, proprietary information, and intellectual property.

Accepted Answer

The answer of Define and contrast critical information, proprietary information,...

Quiz 6: Information, Communications, and Computer Security