Protecting Information Resources Part 2

18. When an organization develops a comprehensive security plan, it should set up a security committee with representatives from all departments as well as upper management. a. True b. Fals e ANSWER: True RATIONALE: Correct When an organization develops a comprehensive security plan, it should set up a security committee with representatives from all departments as well as upper management. See 5-5: Guidelines for a Comprehensive Security System 19. When disaster strikes, an organization should contact the insurance company to resume normal operations as soon as possible. a. True b. Fals e ANSWER: True RATIONALE: Correct When disaster strikes, an organization should contact the insurance company to resume normal operations as soon as possible. To lessen the effects of a natural disaster or a network attack or intrusion, planning the recovery is important. See 5-5: Guidelines for a Comprehensive Security System 1 Multiple Choice 20. _____ can interfere with users’ control of their computers, through such methods as installing additional software and redirecting Web browsers. a. Keystroke loggers b. Spyware c. Firmware d. Script loggers ANSWER: b RATIONALE: Correct. Spyware can interfere with users’ control of their computers, through such methods as installing additional software and redirecting Web browsers. It is software that secretly gathers information about users while they browse the Web. See 5-1: Risks Associated with Information Technologies 21. Which statement best describes spyware? a. It is software that secretly gathers information about users while they browse the Web. b.It is an attack that floods a server with service requests to prevent legitimate users’ access to the system. c. It is encryption security that manages transmission security on the Internet. d.It is a programming routine built into a system by its designer to bypass system security and sneak back into the system later to access programs or files. ANSWER: a RATIONALE: Correct. Spyware is software that secretly gathers information about users while they browse the Web. This information could be used for malicious purposes. See 5-1: Risks Associated with Information Technologies 22. Which statement is true of phishing? a. It involves monitoring and recording keystrokes. b. It involves sending fraudulent e-mails that seem to come from legitimate sources. c. It consists of self-propagating program code that is triggered by a specified time or event. d. It prevents the disclosure of information to anyone who is not authorized to access it. ANSWER: b RATIONALE: Correct. Phishing is sending fraudulent e-mails that seem to come from legitimate sources, such as a bank or university. The e-mails usually direct recipients to false Web sites that look like the real thing for the purpose of capturing personal information. See 5-1: Risks Associated with Information Technologies 23. In the context of computer crimes and attacks, the difference between phishing and spear phishing is that: a. in spear phishing, the attack is targeted toward a specific person or a group. b. spear phishing involves monitoring and recording keystrokes. c. in spear phishing, hackers capture and record network traffic. d. spear phishing involves collecting sensitive information via phone calls. ANSWER: a RATIONALE: Correct. Spear phishing is the same as phishing. The difference is that the attack is targeted toward a specific person or a group. See 5-1: Risks Associated with Information Technologies 24. Similar to phishing, _____ is directing Internet users to fraudulent Web sites with the intention of stealing their personal information, such as Social Security numbers, passwords, bank account numbers, and credit card numbers. a. sniffing b. screening c. pharming d. cybersquattin g ANSWER: c RATIONALE: Correct. Pharming is similar to phishing in that Internet users are directed to fraudulent Web sites with the intention of stealing their personal information, such as Social Security numbers, passwords, bank account numbers, and credit card numbers. The difference is that pharmers usually hijack an official Web site address by hacking a Domain Name System server, then alter the legitimate Web site IP address so that users who enter the correct Web address are directed to the pharmers’ fraudulent Web site. See 5-1: Risks Associated with Information Technologies 25. The process of capturing and recording network traffic is referred to as _____. a. sniffing b. phishing c. bombing d. pharmin g ANSWER: a RATIONALE: Correct. Sniffing is capturing and recording network traffic. Although it can be done for legitimate reasons, such as monitoring network performance, hackers often use it to intercept information. See 5-1: Risks Associated with Information Technologies 26. Spoofing happens when: a. a word is converted into a digital pattern. b. keystrokes are monitored and recorded. c. an illegitimate program poses as a legitimate one. d. a firewall rejects the incoming data packets. ANSWER: c RATIONALE: Correct. Spoofing happens when an illegitimate program poses as a legitimate one. It is an attempt to gain access to a network by posing as an authorized user in order to find sensitive information, such as passwords and credit card information. See 5-1: Risks Associated with Information Technologies 27. John downloaded Alten Cleaner, a program that poses as a computer registry cleaner, on his computer. Once he installed the program on his computer, the program illegitimately gained access to John’s passwords and credit card information. In this scenario, it is evident that John was a victim of _____. a. spoofing b. phishing c. baiting d. pharmin g ANSWER: a RATIONALE: Correct. In the given scenario, it is evident that John was a victim of spoofing. Spoofing happens when an illegitimate program poses as a legitimate one. It is an attempt to gain access to a network by posing as an authorized user in order to find sensitive information, such as passwords and credit card information. See 5-1: Risks Associated with Information Technologies 28. _____ is a computer crime that involves destroying or disrupting computer services. a. Keystroke logging b. Dumpster diving c. Bombing d. Sabotage ANSWER: d RATIONALE: Correct. Sabotage is a computer crime that involves destroying or disrupting computer services. Surprisingly, most computer crimes are committed by company insiders, which makes protecting information resources even more difficult. See 5-1: Risks Associated with Information Technologies 29. In the context of computer and network security, _____ means that a system must not allow the disclosing of information by anyone who is not authorized to access it. a. reliability b. confidentialit y c. integrity d. availability ANSWER: b RATIONALE: Correct. Confidentiality means that a system must not allow the disclosing of information by anyone who is not authorized to access it. In businesses, confidentiality ensures that private information, such as payroll and personnel data, is protected from competitors and other organizations. See 5-2: Computer and Network Security: Basic Safeguards 30. In the context of computer and network security, _____ refers to the accuracy of information resources within an organization. a. validity b. confidentialit y c. integrity d. availability ANSWER: c RATIONALE: Correct. Integrity refers to the accuracy of information resources within an organization. In other words, a security system must not allow data to be corrupted or allow unauthorized changes to a corporate database. See 5-2: Computer and Network Security: Basic Safeguards 31. In the context of computer and network security, a security system is said to possess _____ when it does not allow data to be corrupted or allow unauthorized changes to a corporate database. a. integrity b. confidentialit y c. validity d. availability ANSWER: a RATIONALE: Correct. Integrity refers to the accuracy of information resources within an organization. In other words, a security system must not allow data to be corrupted or allow unauthorized changes to a corporate database. See 5-2: Computer and Network Security: Basic Safeguards 32. In the context of computer and network security, _____ means that computers and networks are operating and authorized users can access the information they need. a. validity b. confidentialit y c. integrity d. availability ANSWER: d RATIONALE: Correct. Availability means that computers and networks are operating and authorized users can access the information they need. It also means a quick recovery in the event of a system failure or disaster. See 5-2: Computer and Network Security: Basic Safeguards 33. In the context of computer and network security, _____ means a quick recovery in the event of a system failure or disaster. a. availability b. confidentialit y c. integrity d. validity ANSWER: a RATIONALE: Correct. Availability means that computers and networks are operating and authorized users can access the information they need. It also means a quick recovery in the event of a system failure or disaster. See 5-2: Computer and Network Security: Basic Safeguards 34. The Committee on National Security Systems (CNSS) proposed a model known as the _____ for evaluating information security. a. McCumber cube b. Six Sigma model c. Bohr model d. SWOT analysis ANSWER: a RATIONALE: Correct. The CNSS proposed a model known as the McCumber cube. John McCumber created this framework for evaluating information security. See 5-2: Computer and Network Security: Basic Safeguards 35. A level 1 security system is used to protect _____ against unauthorized access. a. users’ workstations b. back-end systems c. internal database servers d. front-end servers ANSWER: d RATIONALE: Correct. In level 1 security, front-end servers, those available to both internal and external users, must be protected against unauthorized access. Typically, these systems are e-mail and Web servers. See 5-2: Computer and Network Security: Basic Safeguards 36. In a level 2 security system, _____ must be protected to ensure confidentiality, accuracy, and integrity of data. a. back-end systems b. external databases c. private networks d. front-end servers ANSWER: a RATIONALE: Correct. In level 2 security, back-end systems (such as users’ workstations and internal database servers) must be protected to ensure confidentiality, accuracy, and integrity of data. See 5-2: Computer and Network Security: Basic Safeguards 37. A level 3 security system focuses on protecting the _____ against intrusion, denial-of-service attacks, and unauthorized access. a. back-end server b. corporate network c. user’s work station d. front-end server ANSWER: b RATIONALE: Correct. In level 3 security, the corporate network must be protected against intrusion, denial-of-service attacks, and unauthorized access. See 5-2: Computer and Network Security: Basic Safeguards 38. When a computer is infected by a virus, _____. a. the system’s disk access is fast b. system updates are recommended often c. some programs suddenly increase in size d. the available memory space remains constant ANSWER: c RATIONALE: Correct. A virus consists of self-propagating code that is triggered by a specific time or event. When programs suddenly increase in size, it is an indication that the computer is infected by a virus. See 5-3: Security Threats: An Overview 39. In the context of the common intentional security threats, which statement best describes a worm? a. It travels from computer to computer in a network, but it does not usually erase data. b.It attaches itself to a host program to spread to other files in a computer. c. It is a programming routine built into a system by its designer to bypass system security and sneak back into the system later to access data. d.It floods a network or server with service requests to prevent legitimate users’ access to the system. ANSWER: a RATIONALE: Correct. A worm travels from computer to computer in a network, but it does not usually erase data. Unlike a virus, it is an independent program that can spread itself without having to be attached to a host program. See 5-3: Security Threats: An Overview 40. Which of the following statements is true of a worm? a. It is usually hidden inside a popular program, but it is not capable of replicating itself. b.It floods a network or server with service requests to prevent legitimate users’ access to the system. c. It is an independent program that can spread itself without attaching itself to a host program. d.It enables a system designer to bypass the security of a system and sneak back into the system later to access files. ANSWER: c RATIONALE: Correct. A worm travels from computer to computer in a network, but it does not usually erase data. Unlike a virus, it is an independent program that can spread itself without attaching itself to a host program. See 5-3: Security Threats: An Overview