Information Security Chapter 3 – Flashcards

75 test answers

Unlock all answers in this set

Unlock answers 75
question
Which of the following acts is also widely known as the Gramm-Leach-Bliley Act?
answer
Financial Services Modernization Act
question
"Long arm ____________________" refers to the long arm of the law reaching across the country or around the world to draw an accused individual into its court systems.
answer
Jurisdiction
question
Family law, commercial law, and labor law are all encompassed by ____________________ law.
answer
Private
question
Individuals with authorization and privileges to manage information within the organization are most likely to cause harm or damage ____.
answer
By accident
question
The ____________________ Act of 2001 provides law enforcement agencies with broader latitude in order to combat terrorism-related activities.
answer
USA Patriot or U.S.A Patriot
Unlock the answer
question
____________________ is the legal obligation of an entity that extends beyond criminal or contract law.
answer
Liability
Unlock the answer
question
Which of the following countries reported generally intolerant attitudes toward personal use of organizational computing resources?
answer
Singapore
Unlock the answer
question
____________________ are rules that mandate or prohibit certain behavior in society.
answer
Laws
Unlock the answer
question
The National Information Infrastructure Protection Act of 1996 modified which Act?
answer
Computer Fraud and Abuse Act
Unlock the answer
question
The _____________Association is a professional association that focuses on auditing, control, and security and whose membership comprises both technical and managerial professionals.
answer
Information Systems Audit and Control or ISACA
Unlock the answer
question
Laws and policies and their associated penalties only deter if which of the following conditions is present?
answer
Probability of penalty being administered, Probability of being caught, and Fear of penalty
Unlock the answer
question
____ law regulates the structure and administration of government agencies and their relationships with citizens, employees, and other governments.
answer
Public
Unlock the answer
question
The Computer ____ and Abuse Act of 1986 is the cornerstone of many computer-related federal laws and enforcement efforts.
answer
Fraud
Unlock the answer
question
The ____________________ Act of 1996 attempts to prevent trade secrets from being illegally shared.
answer
Economic Espionage
Unlock the answer
question
____ law comprises a wide variety of laws that govern a nation or state.
answer
Civil
Unlock the answer
question
Which of the following acts is a collection of statutes that regulate the interception of wire, electronic, and oral communications?
answer
Electronic Communications Privacy Act
Unlock the answer
question
What is the subject of the Computer Security Act?
answer
Federal Agency Information Security
Unlock the answer
question
Key studies reveal that the overriding factor in leveling the ethical perceptions within a small population is ____________________.
answer
Education
Unlock the answer
question
The Privacy of Customer Information Section of the common carrier regulation states that any proprietary information shall be used explicitly for providing services, and not for any ____ purposes.
answer
Marketing
Unlock the answer
question
____________________ are the fixed moral attitudes or customs of a particular group.
answer
Cultural Mores
Unlock the answer
question
The _________ is the American contribution to an international effort to reduce the impact of copyright, trademark, and privacy infringement, especially when accomplished via the removal of technological copyright protection measures.
answer
DMCA or Digital Millennium Copyright Act
Unlock the answer
question
Criminal or unethical ____ goes to the state of mind of the individual performing the act.
answer
Intent
Unlock the answer
question
The ____ Portability and Accountability Act Of 1996, also known as the Kennedy-Kassebaum Act, protects the confidentiality and security of health care data by establishing and enforcing standards and by standardizing electronic data interchange.
answer
Health Insurance
Unlock the answer
question
The _______________ manages a body of knowledge on information security and administers and evaluates examinations for information security certifications.
answer
International Information Systems Security Certification Consortium, Inc. (ISC)
Unlock the answer
question
Software license infringement is also often called software ____________________.
answer
Piracy
Unlock the answer
question
____ defines stiffer penalties for prosecution of terrorist crimes.
answer
USA Patriot Act
Unlock the answer
question
According to the National Information Infrastructure Protection Act of 1996, the severity of the penalty for computer crimes depends on the value of the information obtained and whether the offense is judged to have been committed for each of the following except ____.
answer
To Harass
Unlock the answer
question
The ______________________________ contains a number of provisions focusing on facilitating affiliation among banks, securities firms, and insurance companies.
answer
Financial Services Modernization or Gramm-Leach-Bliley Act of 1999)
Unlock the answer
question
The ____________________ Act seeks to improve the reliability and accuracy of financial reporting, as well as increase the accountability of corporate governance, in publicly traded companies.
answer
Sarbanes-Oxley
Unlock the answer
question
The ____________ Act of 1986 is a collection of statutes that regulates the interception of wire, electronic, and oral communications.
answer
Electronic Communications Privacy
Unlock the answer
question
The low overall degree of tolerance for ____________________ system use may be a function of the easy association between the common crimes of breaking and entering, trespassing, theft, and destruction of property to their computer-related counterparts.
answer
Illicit
Unlock the answer
question
____ attempts to prevent trade secrets from being illegally shared.
answer
Economic Espionage Act
Unlock the answer
question
The _________ Act of 1966 allows any person to request access to federal agency records or information not determined to be a matter of national security.
answer
Freedom of Information
Unlock the answer
question
____________________ information is created by combining pieces of non-private data—often collected during software updates, and via cookies—that when combined may violate privacy.
answer
Aggregate
Unlock the answer
question
Which of the following acts defines and formalizes laws to counter threats from computer related acts and offenses?
answer
Computer Fraud and Abuse Act
Unlock the answer
question
The ___________ is a respected professional society that was established in 1947 as "the world's first educational and scientific computing society."
answer
Association of Computing Machinery
Unlock the answer
question
What is the subject of the Sarbanes-Oxley Act?
answer
Financial Reporting
Unlock the answer
question
The ____ of 1999 provides guidance on the use of encryption and provides protection from government intervention.
answer
Security and Freedom through Encryption Act
Unlock the answer
question
Guidelines that describe acceptable and unacceptable employee behaviors in the workplace are known as ____________________.
answer
Policies
Unlock the answer
question
The Council of Europe adopted the Convention of Cybercrime in ____.
answer
2001
Unlock the answer
question
The United States has implemented a version of the DMCA law called the Database Right, in order to comply with Directive 95/46/EC.
answer
False
Unlock the answer
question
Individuals with authorization and privileges to manage information within the organization are most likely to cause harm or damage by accident.
answer
True
Unlock the answer
question
Every state has implemented uniform laws and regulations placed on organizational use of computer technology.
answer
False
Unlock the answer
question
In 1995 the Directive 95/46/EC was adopted by the European Union.
answer
True
Unlock the answer
question
The U.S. Secret Service is a department within the Department of the Interior.
answer
False
Unlock the answer
question
DHS is made up of three directorates.
answer
False
Unlock the answer
question
Established in January 2001, the National InfraGard Program began as a cooperative effort between the FBI's Cleveland Field Office and local technology professionals.
answer
True
Unlock the answer
question
The key difference between laws and ethics is that ethics carry the authority of a governing body and laws do not.
answer
False
Unlock the answer
question
Ethics define socially acceptable behaviors.
answer
True
Unlock the answer
question
The code of ethics put forth by (ISC)2 focuses on four mandatory canons: "Protect society, the commonwealth, and the infrastructure; act honorably, honestly, justly, responsibly, and legally; provide diligent and competent service to principals; and advance and protect the profession.".
answer
True
Unlock the answer
question
Due care requires that an organization make a valid effort to protect others and continually maintain this level of effort.
answer
False
Unlock the answer
question
The Economic Espionage Act of 1996 protects American ingenuity, intellectual property, and competitive advantage.
answer
True
Unlock the answer
question
The Federal Privacy Act of 1974 regulates government agencies and holds them accountable if they release information about national security.
answer
False
Unlock the answer
question
Studies on ethics and computer use reveal that people of different nationalities have different perspectives; difficulties arise when one nationality's ethical behavior violates the ethics of another national group.
answer
True
Unlock the answer
question
Privacy is not absolute freedom from observation, but rather is a more precise "state of being free from unsanctioned intrusion."
answer
True
Unlock the answer
question
The Graham-Leach-Bliley Act is a critical piece of legislation that affects the executive management of publicly traded corporations and public accounting firms.
answer
False
Unlock the answer
question
Civil law addresses activities and conduct harmful to society and is actively enforced by the state.
answer
False
Unlock the answer
question
Thirty-four countries have ratified the European Council Cyber-Crime Convention as of April 2010.
answer
False
Unlock the answer
question
The Information Systems Security Association (ISSA) is a nonprofit society of information security professionals whose primary mission is to bring together qualified information security practitioners for information exchange and educational development.
answer
True
Unlock the answer
question
Deterrence can prevent an illegal or unethical activity from occurring.
answer
True
Unlock the answer
question
The Department of Homeland Security is the only U.S. federal agency charged with the protection of American information resources and the investigation of threats to, or attacks on, the resources.
answer
False
Unlock the answer
question
The communications networks of the United States carry more funds than all of the armored cars in the world combined.
answer
True
Unlock the answer
question
The NSA is responsible for signal intelligence and information system security.
answer
True
Unlock the answer
question
Studies have reported that the Pacific Rim countries of Singapore and Hong Kong are hotbeds of software piracy.
answer
True
Unlock the answer
question
Cultural differences can make it easy to determine what is and is not ethical—especially when it comes to the use of computers.
answer
False
Unlock the answer
question
The Federal Bureau of Investigation's National InfraGard Program serves its members in four basic ways: Maintains an intrusion alert network using encrypted e-mail; Maintains a secure Web site for communication about suspicious activity or intrusions; Sponsors local chapter activities; Operates a help desk for questions.
answer
True
Unlock the answer
question
HIPAA specifies particular security technologies for each of the security requirements to ensure the privacy of the health-care information.
answer
False
Unlock the answer
question
The difference between a policy and a law is that ignorance of a law is an acceptable defense.
answer
False
Unlock the answer
question
In a study on software licence infringement, those from United States were significantly more permissive.
answer
False
Unlock the answer
question
The Association for Computing Machinery and the Information Systems Security Association have the authority to banish violators of their ethical standards from practicing their trade.
answer
False
Unlock the answer
question
Intellectual privacy is recognized as a protected asset in the United States.
answer
False
Unlock the answer
question
There are four general causes of unethical and illegal behavior.
answer
False
Unlock the answer
question
The Secret Service is charged with the detection and arrest of any person committing a United States federal offense relating to computer fraud and false identification crimes.
answer
True
Unlock the answer
question
The Department of Homeland Security was created in 1999.
answer
False
Unlock the answer
question
The Clipper Chip can be used to monitor or track private communications.
answer
True
Unlock the answer
Get an explanation on any task
Get unstuck with the help of our AI assistant in seconds
New