Quiz
IFMG 300 |Chapter 12
This quiz has question types that open in the usual player.
Questions in this quiz (37)
1Information security is made up of
- Athreats
- Bvulnerabilities
- Csafeguards
- Dtargets
2Threats can be human or man-made.
- ATrue
- BFalse
3Common crimes that results in unauthorized data disclosure are
- Apretexting
- Bphishing
- Cspoofing
- Dsniffing
- Ehacking
4Spoofing involves altering header information, etc. to cause the recipient to trust an email they otherwise would not.
- ATrue
- BFalse
5Data can be changed or lost during a natural disaster due to problems recovering data.
- ATrue
- BFalse
6the two common types of spoofing are
- Aemail
- BIP
7Incorrect data modification can be caused by
- Aprocedures not followed or incorrectly designed
- Bimproper internal controls on systems
- Csystem errors
- Dfaulty recovery actions after a disaster
8Reasons a service can become faulty are
- Aincorrect data modification
- Bsystems working incorrectly
- Cprocedural mistakes
- Dprogramming errors
- EIT installation errors
- FUsurpation
- Gdenial of service (unintentional)
- Hdenial of service (intentional)
9DDOS stands for [blank_start]Distributed Denial of Service[blank_end]
- ADistributed Denial of Service
10Loss of infrastructure can be caused by
- Ahuman accidents
- Btheft and terrorist events
- Ca disgruntled or terminated employee
- Dnatural disaster
- EAdvanced Persistent Threat (APT) or cyberwarfare
11APT stands for [blank_start]Advanced Persistent Threat[blank_end]
- AAdvanced Persistent Threat
12Data theft is most serious in large companies.
- ATrue
- BFalse
13The four most common computer crimes in 2011 were
- Acriminal activity against servers
- Bviruses
- Ccode insertion
- Ddata loss on a user computer
14Malware infection remains the most common type of attack experienced
- ATrue
- BFalse
15Insider abuse of internet or email remains very high
- ATrue
- BFalse
16IDS stands for [blank_start]Intrusion Detection System[blank_end]
- AIntrusion Detection System
17The number one rule in data privacy is "don't collect what you don't absolutely need"
- ATrue
- BFalse
18A security policy must contain
- Awhat sensitive data may be stored
- Bhow sensitive data will be processed
- Cwhat data can be shared with other organizations
- Dhow employees and others can obtain data about themselves
- Ehow employees and others can request changes to inaccurate data about themselves
- FWhat employees can do with their own mobile devices at work
- Gwhat non-organizational activities an employee can take with employee-owned equipment
19The five IS components are
- Ahardware
- Bsoftware
- Cdata
- Dprocedures
- Epeople
20Technical safeguards to involve hardware and software and include
- Aidentification and authorization
- Bencryption
- Cfirewalls
- Dmalware protection
- Eapplication design
21Data safeguards includes
- Athe definition of data rights and responsibilities
- Bpasswords
- Cencryption
- Dbackup and recovery
- Ephysical security
22Human safeguards involving procedures and people include
- Ahiring practices
- Btraining
- Ceducation
- Dprocedure design
- Eadministration
- Fassessment
- Gcompliance
- Haccountability
23Identification and authentication are most often performed using a userid/password pair
- ATrue
- BFalse
24Malware includes viruses, trojans, spyware, adware, keystroke loggers, erc.
- ATrue
- BFalse
25SSL uses asymmetric encryption
- ATrue
- BFalse
26SSL stands for [blank_start]Secure Sockets Layer[blank_end]
- ASecure Sockets Layer
27DMZ stands for [blank_start]demilitarized zone[blank_end]
- Ademilitarized zone
28A common network design has servers exposed to the internet located between two firewalls in the DMZ.
- ATrue
- BFalse
29Safeguards against malware include
- Ausing antivirus and antispyware programs
- Bperforming frequent scans
- Cupdate malware definitions frequently
- Dopen email from known sources only
- Einstall software updates ASAP
- Fbrowse only reputable internet neighbourhoods
30SQL injection is the most common cause of data disclosure
- ATrue
- BFalse
31SQL injections are successful when forms are poorly designed
- ATrue
- BFalse
32Human safeguards to protect against security threats include
- Aseparation of duties
- Bproviding access based on concept of least privilege
- Cclassify data based on confidentiality and sensitivity
- Dthorough hiring and screening practices
- Esecurity awareness programs
- Ffriendly termination procedures
33Security threats can be reduced through account administration by
- Ahaving standards for account administration which include rules for modifying permissions and deletion of inactive accounts
- Brequiring passwords be changed regularly
- CHelp Desk policies regarding password resets etc.
34All employees should be required to sign an access agreement form which states that they will follow company policies
- ATrue
- BFalse
35Response plans for security incidents must be in place, just like disaster plans
- ATrue
- BFalse
36A speedy response to any suspected security incident is essential
- ATrue
- BFalse
37An Advanced Persistent Threat involves a multi-step attack usually targeted at a large business or government.
- ATrue
- BFalse
Information
- Description
- Quiz on IFMG 300 |Chapter 12, created by bjduguid on 04/11/2015.
- Author
- bjduguid
- Language
- English
- Views
- 21
- Tags
- Rating
- No ratings yet Rate this quiz