Question 1

All of the following have contributed to an increase in software flaws except:

Accepted Answer

A)   the growing complexity of software programs.
B)   the growing size of software programs.
C)   demands for timely delivery to markets.
D)   the inability to fully test programs.
E)   the increase in malicious intruders seeking system access.F) A) and B)
G) None of the above E

Question 2

________ is spyware that logs and transmits everything a user types.

Accepted Answer

A)   Spyware
B)   A Trojan horse
C)   A keylogger
D)   A worm
E)   A snifferF) A) and B)
G) A) and C)

Question 3

Packet filtering catches most types of network attacks.

Accepted Answer

A) True 
 B)False

Question 4

In cloud computing, accountability and responsibility for protection of sensitive data is transferred to the cloud provider.

Accepted Answer

A) True 
 B)False

Question 5

Organizations can use existing network security software to secure mobile devices.

Accepted Answer

A) True 
 B)False

Question 6

WPA2 is a more effective way to secure a wireless network than WEP because it:

Accepted Answer

A)   includes an AUP.
B)   operates on a VPN.
C)   uses much longer encryption keys.
D)   uses symmetric encryption methods.
E)   is part of most vendors UTM products.F) B) and E)
G) B) and D)

Question 7

Malicious software programs referred to as spyware include a variety of threats such as computer viruses, worms, and Trojan horses.

Accepted Answer

A) True 
 B)False

Question 8

Evil twins are:

Accepted Answer

A)   Trojan horses that appears to the user to be a legitimate commercial software application.
B)   email messages that mimic the email messages of a legitimate business.
C)   fraudulent websites that mimic a legitimate business's website.
D)   computers that fraudulently access a website or network using the IP address and identification of an authorized computer.
E)   bogus wireless network access points that look legitimate to users.F) A) and D)
G) B) and C)

Question 9

Three major concerns of system builders and users are disaster, security, and human error. Of the three, which do you think is most difficult to deal with? Why?

Accepted Answer

Student answers will vary. Example answe...

Question 10

Fault tolerant information systems offer 100 percent availability because they use:

Accepted Answer

A)   high-capacity storage.
B)   a multitier server network.
C)   redundant hardware, software, and power supplies.
D)   dedicated phone lines.
E)   a digital certificate system.F) A) and E)
G) A) and B)

Question 11

Which of the following is a virus that uses flaws in Windows software to take over a computer remotely?

Accepted Answer

A)   Sasser
B)   Zeus
C)   Cryptolocker
D)   ILOVEYOU
E)   ConfickerF) All of the above
G) B) and C)

Question 12

Why is software quality important to security? What specific steps can an organization take to ensure software quality?

Accepted Answer

Software errors pose a constant threat t...

Question 13

The Gramm-Leach-Bliley Act:

Accepted Answer

A)   requires financial institutions to ensure the security of customer data.
B)   specifies best practices in information systems security and control.
C)   imposes responsibility on companies and management to safeguard the accuracy of financial information.
D)   outlines medical security and privacy rules.
E)   identifies computer abuse as a crime and defines abusive activities.F) A) and B)
G) A) and C)

Question 14

________ is malware that hijacks a user's computer and demands payment in return for giving back access.

Accepted Answer

A)   A Trojan horse
B)   Ransomware
C)   Spyware
D)   A virus
E)   An evil twinF) A) and D)
G) A) and E)

Question 15

How is the security of a firm's information system and data affected by its people, organization, and technology? Is the contribution of one of these dimensions any more important than the other? Why?

Accepted Answer

There are various technological essentia...

Question 16

Wireless networks are more difficult for hackers to gain access to because radio frequency bands are difficult to scan.

Accepted Answer

A) True 
 B)False

Question 17

Blockchain refers to a technology that:

Accepted Answer

A)   uses a distributed ledger system of transactions.
B)   uses a centralized data store in the cloud.
C)   relies on the Internet to provide secure transactions.
D)   uses existing banking systems to transfer funds.
E)   relies on peer-to-peer networks.F) C) and D)
G) A) and B)

Question 18

Which of the following statements about botnets is not true?

Accepted Answer

A)   Eighty percent of the world's malware is delivered by botnets.
B)   Botnets are often used to perpetrate DDoS attacks.
C)   Ninety percent of the world's spam is delivered by botnets.
D)   Botnets are often used for click fraud.
E)   It is not possible to make a smartphone part of a botnet.F) A) and B)
G) A) and E)

Question 19

________ controls formalize standards, rules, procedures, and control disciplines to ensure that the organization's general and application controls are properly executed and enforced.

Accepted Answer

A)   Software
B)   Administrative
C)   Data security
D)   Implementation
E)   InputF) A) and B)
G) All of the above B

Question 20

A foreign country attempting to access government networks in order to disable a national power grid is an example of:

Accepted Answer

A)   phishing.
B)   denial-of-service attacks.
C)   cyberwarfare.
D)   cyberterrorism.
E)   evil twins.F) B) and D)
G) A) and B) C

Exam 8: Securing Information Systems

All of the following have contributed to an increase in software flaws except:

Correct AnswerverifiedE

________ is spyware that logs and transmits everything a user types.

Correct AnswerverifiedShow Answer

Packet filtering catches most types of network attacks.

Correct AnswerverifiedShow Answer

In cloud computing, accountability and responsibility for protection of sensitive data is transferred to the cloud provider.

Correct AnswerverifiedShow Answer

Organizations can use existing network security software to secure mobile devices.

Correct AnswerverifiedShow Answer

WPA2 is a more effective way to secure a wireless network than WEP because it:

Correct AnswerverifiedShow Answer

Malicious software programs referred to as spyware include a variety of threats such as computer viruses, worms, and Trojan horses.

Correct AnswerverifiedShow Answer

Evil twins are:

Correct AnswerverifiedShow Answer

Three major concerns of system builders and users are disaster, security, and human error. Of the three, which do you think is most difficult to deal with? Why?

Correct AnswerverifiedStudent answers will vary. Example answe...View AnswerShow Answer

Fault tolerant information systems offer 100 percent availability because they use:

Correct AnswerverifiedShow Answer

Which of the following is a virus that uses flaws in Windows software to take over a computer remotely?

Correct AnswerverifiedShow Answer

Why is software quality important to security? What specific steps can an organization take to ensure software quality?

Correct AnswerverifiedSoftware errors pose a constant threat t...View AnswerShow Answer

The Gramm-Leach-Bliley Act:

Correct AnswerverifiedShow Answer

________ is malware that hijacks a user's computer and demands payment in return for giving back access.

Correct AnswerverifiedShow Answer

How is the security of a firm's information system and data affected by its people, organization, and technology? Is the contribution of one of these dimensions any more important than the other? Why?

Correct AnswerverifiedThere are various technological essentia...View AnswerShow Answer

Wireless networks are more difficult for hackers to gain access to because radio frequency bands are difficult to scan.

Correct AnswerverifiedShow Answer

Blockchain refers to a technology that:

Correct AnswerverifiedShow Answer

Which of the following statements about botnets is not true?

Correct AnswerverifiedShow Answer

________ controls formalize standards, rules, procedures, and control disciplines to ensure that the organization's general and application controls are properly executed and enforced.

Correct AnswerverifiedB

A foreign country attempting to access government networks in order to disable a national power grid is an example of:

Correct AnswerverifiedC

Correct Answer
verified
E

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Student answers will vary. Example answe...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Software errors pose a constant threat t...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
There are various technological essentia...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified
C