CISB 210-Chapter 12 – Flashcards

A ________ is a person or an organization that seeks to obtain or alter data or other IS assets illegally, without the owner's permission and often without the owner's knowledge.

Which of the following is considered a threat caused by human error?

Which of the following is considered a computer crime?

________ occurs when someone deceives by pretending to be someone else.

When referring to security threats, pretexting, sniffing, spoofing, and phishing are all examples of ________.

A ________ pretends to be a legitimate company and sends an email requesting confidential data, such as account numbers, Social Security numbers, account passwords, and so forth.

Email spoofing is a synonym for ________.

________ is a technique for intercepting computer communications, either through a physical connection to a network or without a physical connection in the case of wireless networks.

________ take computers with wireless connections through an area and search for unprotected wireless networks and then monitor and intercept wireless traffic at will.

Which of the following is an example of a sniffing technique?

________ occurs when a person breaks into a network to steal data such as customer lists, product inventory data, employee data, and other proprietary and confidential data.

Which of the following is most likely to be a result of hacking?

________ occurs through human error when employees do not follow proper procedures or when procedures have not been well designed.

________ is the type of security loss that involves computer criminals invading a computer system and replacing legitimate programs with their own unauthorized ones that shut down legitimate applications and substitute their own processing to spy, steal, and manipulate data.

Which of the following usually happens in a malicious denial-of-service attack?

________ present the largest risk for an organization's infrastructure loss.

Which of the following statements is true about losses due to computer security threats?

A(n) ________ is a computer program that senses when another computer is attempting to scan the disk or otherwise access a computer.

Nonword passwords are vulnerable to a ________ attack, in which the password cracker tries every possible combination of characters.

________ are small files that the browser stores on the user's computer when he/she visits Web sites and enables him/her to access Web sites without having to sign in every time.

Removing and disabling ________, which may contain sensitive security data, presents an excellent example of the trade-off between improved security and cost.

Which of the following is a critical security function that the senior management should address in an organization?

In information security, which of the following is true of managing risk?

Which of the following was passed to give individuals the right to access their own health data created by doctors and other healthcare providers?

Which of the following is classified as a technical safeguard?

A(n) ________ has a microchip in it to hold data.

Users of smart cards are required to enter a ________ to be authenticated.

Which of the following is used for biometric authentication?

Which of the following statements is true of biometric identification?

A ________ is a number used to encrypt data.

In asymmetric encryption, each site has a ________ for encoding messages.

With ________, the sender and receiver transmit a message using different keys.

Secure Socket Layer is also known as ________.

Which of the following statements is true of the Secure Socket Layer (SSL)?

Mark is transferring funds online through the Web site of a reputed bank. Which of the following will be displayed in the address bar of his browser that will let him know that the bank is using the SSL protocol?

A ________ examines each part of a message and determines whether to let that part pass.

Packet-filtering firewalls ________.

________ is the term used to denote viruses, worms, and Trojan horses.

A virus is a computer program that replicates itself. The program code that causes unwanted activity is called the ________.

________ are viruses that masquerade as useful programs or files.

A ________ is a type of virus that propagates using the Internet or other computer networks.

________ is similar to spyware but it watches user activity and produces pop-ups.

Which of the following is likely to be accepted by a poorly designed application, leading to improper disclosure of data?

________ refers to an organization-wide function that is in charge of developing data policies and enforcing data standards.

________ is a function pertaining to a particular database that develops procedures and practices to control and protect the database.

Which of the following statements is true of data administration?

Key escrow is a(n) ________.

________ protect databases and other organizational data.

The computers that run the DBMS and all devices that store database data should reside in locked, controlled-access facilities. This is done to ________.

Which of the following statements is true with regard to human safeguards?

________ involve the people and procedure components of information systems.

Which of the following statements is true about human safeguards for employees?

When an employee is terminated, IS administrators should receive advance notice so that they can ________.

________ a Web site means to take extraordinary measures to reduce a system's vulnerability, using special versions of the operating system.

The process of hardening a Web site is a ________ safeguard.

________ are the primary means of authentication and are important not just for access to a user's computer, but also for authentication to other networks and servers to which the user may have access.

Which of the following systems procedures is specifically the responsibility of operations personnel?

________ involves accomplishing job tasks during failure.

Firewalls produce ________ which include lists of all dropped packets, infiltration attempts, and unauthorized access attempts from within the firewall.

________ are false targets for computer criminals to attack.