Question 1

The technique to gain personal information for the purpose of identity theft,often through fraudulent emails that look as though they came from legitimate businesses,is called phishing.

Accepted Answer

This is correct. Phishing typically involves sending fraudulent emails or messages that appear to be legitimate in order to gain personal information for the purpose of identity theft.

Question 2

Information security policies detail how an organisation is going to implement the information security plan.

Accepted Answer

False

Question 3

Downtime refers to a period of time when a system is unavailable and unplanned downtime can strike at any time for various reasons.

Accepted Answer

Downtime can occur due to hardware or software failure, power outages, natural disasters, cyber attacks, or other unforeseen circumstances. This can lead to loss of productivity, revenue, and customer satisfaction. Therefore, it is important to have measures in place to minimize downtime and to plan for recovery in case of an outage.

Question 4

e-Policies are policies and procedures that address information management along with the ethical use of computers and the internet in the business environment.

Accepted Answer

e-Policies are indeed policies and procedures that govern information management and ethical use of computers and the internet in business environments.

Question 5

An acceptable use policy (AUP)requires a user to agree to follow the policy to be provided access to corporate email,information systems and the internet.

Accepted Answer

An acceptable use policy (AUP) is a document that outlines what is considered acceptable behavior for users of a computer network or system. It usually requires the user to agree to follow the policy to be granted access to corporate email, information systems, and the internet. Therefore, the statement is true.

Question 6

Insiders are illegitimate users who purposely or accidentally misuse their access to the environment to do business.

Accepted Answer

Insiders are legitimate users who have authorized access to an organization's network, systems, or data, and may misuse their access intentionally or unintentionally, but they are not inherently illegitimate users.

Question 7

Companies do not need a privacy policy for email because an employee's work email is private and cannot be viewed by the company.

Accepted Answer

Companies do need a privacy policy for email to ensure that employee emails are properly protected and to inform employees of any monitoring that may occur. While work emails are not necessarily considered private, there are still legal and ethical considerations around the company's access to and use of employee emails.

Question 8

The Trojan-horse virus hides inside other software,usually as an attachment or a downloadable file.

Accepted Answer

The statement is true. The Trojan-horse virus is named after the story of the wooden horse used by the Greeks to infiltrate the city of Troy. Like the wooden horse, the virus hides inside other software or files to gain access to a computer system.

Question 9

Through social engineering,hackers use their social skills to trick people into revealing access credentials or other valuable information.

Accepted Answer

Social engineering is a tactic used by hackers to manipulate people into giving up sensitive information or access credentials by taking advantage of their natural human tendencies, such as trust, curiosity, and desire to be helpful.

Question 10

Ethics,privacy and security are fundamental building blocks for all organisations.

Accepted Answer

Ethics, privacy, and security are critical aspects of any organization's functional framework. They lay the foundation for an organization's reputation, trustworthiness, and long-term success.

Question 11

Information governance is a method or system of government for information management or control.

Accepted Answer

Information governance is a recognized field of enterprise information management (EIM), which involves managing information through policies, procedures, technology, and organizational structures. It encompasses various aspects such as data quality, privacy, security, compliance, and risk management. The objective is to ensure effective and efficient use of information while minimizing costs, mitigating risks, and maximizing value.

Question 12

Two of the common forms of viruses discussed in the book include the Trojan-horse virus and the acceptance-of-service attack.

Accepted Answer

The common forms of viruses include the Trojan-horse virus, but the term "acceptance-of-service attack" is incorrect; it should be "denial-of-service attack" (DoS attack).

Question 13

A social media policy outlines the corporate guidelines or principles governing employee online communications.

Accepted Answer

A social media policy provides clear expectations and guidelines for how employees should use social media, both for personal and professional purposes, in a way that contributes positively to the company's reputation and brand image. It helps prevent legal and reputational risks for the company and ensures that employees understand how their online activities can impact the organization.

Question 14

The three primary information security areas are: (1)authentication and authorisation; (2)policies and rewards; and (3)detection and response.

Accepted Answer

The three primary information security areas are: (1) authentication and authorization; (2) prevention and resistance; and (3) detection and response. "Policies and rewards" is not a standard category in information security.

Question 15

Confidentiality is the right to be left alone when you want to be,to have control over your own personal possessions,and not to be observed without your consent.

Accepted Answer

Confidentiality refers to the obligation of an individual or organization to safeguard information from unauthorized access, use, disclosure, disruption, modification, or destruction. The definition provided describes privacy, not confidentiality.

Question 16

Spyware is software which,while purporting to serve some useful function and often fulfilling that function,also allows internet advertisers to display advertisements without the consent of the computer user.

Accepted Answer

The answer of Spyware is software which,while purporting to serve...

Question 17

An ethical computer use policy contains general principles to guide computer user behaviour.

Accepted Answer

An ethical computer use policy sets out general principles and standards for appropriate and responsible computer use, including expectations for confidentiality, privacy, security, and respectful behaviour towards others.

Question 18

A hacker weapon called a splog (spam blog)is a fake blog created solely to raise the search engine rank of affiliated websites.

Accepted Answer

A splog is a type of black hat search engine optimization tactic that uses fake blogs to generate backlinks and manipulate search engine rankings.

Question 19

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident are called insiders.

Accepted Answer

This is a correct definition of insiders, individuals who have authorized access to a system or organization but misuse that access for nefarious or unintentional purposes.

Question 20

Privacy is the legal protection afforded an expression of an idea,such as a song,book or video game.

Accepted Answer

Privacy refers to the protection of personal information, while the legal protection for expressions of ideas falls under copyright law.

Quiz 11: Ethics, Privacy-Information Security