Question 1

What is the difference between phishing and pharming?

Accepted Answer

A)  Phishing is not illegal, pharming is illegal.
B)  Phishing is the right of the company, where pharming is the right of the individual.
C)  Phishing is a technique to gain personal information for the purpose of identity theft, and pharming reroutes requests for legitimate websites to false websites.
D)  All of these.E) B) and D)
F) B) and C)

Question 2

Through social engineering, hackers use their social skills to trick people into revealing access credentials or other valuable information.

Accepted Answer

A) True 
 B)False

Question 3

A zombie farm is a group of computers on which a hacker has planted zombie programs.

Accepted Answer

A) True 
 B)False

Question 4

What is a device that is around the same size as a credit card, containing embedded technologies that can store information and small amounts of software to perform some limited processing?

Accepted Answer

A)  Token
B)  Password
C)  Smart card
D)  BiometricsE) C) and D)
F) B) and C)

Question 5

What is a destructive agent?

Accepted Answer

A)  A form of social engineering in which one individual lies to obtain confidential data about another individual.
B)  Hackers looking through your trash to find personal information.
C)  Legitimate users who purposely or accidentally misuses their access to the environment and cause some kind of business-affecting incident.
D)  Malicious agents designed by spammers and other Internet attackers to farm email addresses off websites or deposit spyware on machines.E) B) and D)
F) C) and D)

Question 6

Which of the following is an example of a way to maintain information security that a company should include in its information security policies?

Accepted Answer

A)  Requiring computer users to log off before leaving for lunch
B)  Never sharing user or password information with anyone
C)  Changing passwords every 30 to 60 days
D)  All of theseE) B) and D)
F) B) and C)

Question 7

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident are called insiders.

Accepted Answer

A) True 
 B)False

Question 8

Applications allowed to be placed on the corporate network, like IM software, and corporate computer equipment used for personal reason on personal networks are two areas that should be addressed by managers in which of the following company policies?

Accepted Answer

A)  Information ethics policy
B)  Information security policies
C)  Information technology plan
D)  All of theseE) None of the above
F) C) and D)

Question 9

Two-factor authentication requires the user to provide two means of authentication, what the user knows (password) and what the user has (security token).

Accepted Answer

A) True 
 B)False

Question 10

A process of providing a user with permission including access levels and abilities such as file access, hours of access, and amount of allocated storage space is called authentication.

Accepted Answer

A) True 
 B)False

Question 11

Which of the following represents the biggest problem of information security breaches?

Accepted Answer

A)  People misusing organizational information.
B)  Technology failures.
C)  Customers misusing organizational systems.
D)  Company departments missing sales goals.E) A) and B)
F) None of the above

Question 12

Charles Mott works for a company called VeriSign that acts a trusted third party to verify information.One of Charles's largest clients is CheckMd, which holds and authenticates customer reviews of doctors and dentists online.Having a third party validating the reviews is critical to CheckMd's success.What type of authentication technique is VeriSign providing for CheckMd?

Accepted Answer

A)  Firewall
B)  Certificate authority
C)  Online certificate
D)  Digital content certificateE) A) and B)
F) A) and C)

Question 13

What is the most secure type of authentication?

Accepted Answer

A)  Something the user knows such as a user ID and password
B)  Something the user has such as a smart card or token
C)  Something that is part of the user such as a fingerprint or voice signature
D)  Combination of all of theseE) C) and D)
F) A) and D)

Question 14

What is a masquerading attack that combines spam with spoofing?

Accepted Answer

A)  Pharming
B)  Phishing
C)  Phishing expedition
D)  Spear phishingE) B) and D)
F) A) and B)

Question 15

Worms are computer viruses that wait for a specific date before executing their instructions.

Accepted Answer

A) True 
 B)False

Question 16

What is a form of social engineering in which one individual lies to obtain confidential data about another individual?

Accepted Answer

A)  Dumpster texting
B)  Dumpster diving
C)  Trash retrieval
D)  PretextingE) A) and B)
F) A) and C)

Question 17

Which of the following protection techniques scans and searches hard drives to prevent, detect, and remove known viruses, adware, and spyware?

Accepted Answer

A)  Firewall
B)  Digital certificate
C)  Virus software
D)  Antivirus softwareE) B) and D)
F) B) and C)

Question 18

Identity theft is the category of computer security that addresses the protection of data from unauthorized disclosure and confirmation of data source authenticity.

Accepted Answer

A) True 
 B)False

Question 19

What is two-factor authentication?

Accepted Answer

A)  The traditional security process that requires a user name and password.
B)  A process that requires the user to provide two means of authentication, what the user knows (password)  and what the user has (security token) .
C)  A process that requires more than two means of authentication such as what the user knows (password) , what the user has (security token) , and what the user is (biometric verification) .
D)  The identification of a user based on physical characteristic such as a fingerprint, iris, face, voice or handwriting.E) All of the above
F) B) and D)

Question 20

What are computer viruses that wait for a specific date before executing their instructions?

Accepted Answer

A)  Zombie
B)  Zombie farm
C)  Pharming attack
D)  Time bombE) None of the above
F) A) and C)

Exam 25: B: Extension: A Information Security

A process of providing a user with permission including access levels and abilities such as file access, hours of access, and amount of allocated storage space is called authentication.

Correct Answer
verified

Identity theft is the category of computer security that addresses the protection of data from unauthorized disclosure and confirmation of data source authenticity.

Correct Answer
verified

Which of the following is an example of a way to maintain information security that a company should include in its information security policies?

Correct Answer
verified

What are computer viruses that wait for a specific date before executing their instructions?

Correct Answer
verified

A zombie farm is a group of computers on which a hacker has planted zombie programs.

Correct Answer
verified

Applications allowed to be placed on the corporate network, like IM software, and corporate computer equipment used for personal reason on personal networks are two areas that should be addressed by managers in which of the following company policies?

Correct Answer
verified

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident are called insiders.

Correct Answer
verified

What is a device that is around the same size as a credit card, containing embedded technologies that can store information and small amounts of software to perform some limited processing?

Correct Answer
verified

Which of the following protection techniques scans and searches hard drives to prevent, detect, and remove known viruses, adware, and spyware?

Correct Answer
verified

What is the most secure type of authentication?

Correct Answer
verified

Two-factor authentication requires the user to provide two means of authentication, what the user knows (password) and what the user has (security token).

Correct Answer
verified

Correct Answer
verified

Through social engineering, hackers use their social skills to trick people into revealing access credentials or other valuable information.

Correct Answer
verified

Which of the following represents the biggest problem of information security breaches?

Correct Answer
verified

What is two-factor authentication?

Correct Answer
verified

Worms are computer viruses that wait for a specific date before executing their instructions.

Correct Answer
verified

What is a destructive agent?

Correct Answer
verified

What is the difference between phishing and pharming?

Correct Answer
verified

What is a form of social engineering in which one individual lies to obtain confidential data about another individual?

Correct Answer
verified

What is a masquerading attack that combines spam with spoofing?

Correct Answer
verified

Exam 25: B: Extension: A Information Security

A process of providing a user with permission including access levels and abilities such as file access, hours of access, and amount of allocated storage space is called authentication.

Correct AnswerverifiedShow Answer

Identity theft is the category of computer security that addresses the protection of data from unauthorized disclosure and confirmation of data source authenticity.

Correct AnswerverifiedShow Answer

Which of the following is an example of a way to maintain information security that a company should include in its information security policies?

Correct AnswerverifiedShow Answer

What are computer viruses that wait for a specific date before executing their instructions?

Correct AnswerverifiedShow Answer

A zombie farm is a group of computers on which a hacker has planted zombie programs.

Correct AnswerverifiedShow Answer

Applications allowed to be placed on the corporate network, like IM software, and corporate computer equipment used for personal reason on personal networks are two areas that should be addressed by managers in which of the following company policies?

Correct AnswerverifiedShow Answer

Legitimate users who purposely or accidentally misuse their access to the environment and cause some kind of business-affecting incident are called insiders.

Correct AnswerverifiedShow Answer

What is a device that is around the same size as a credit card, containing embedded technologies that can store information and small amounts of software to perform some limited processing?

Correct AnswerverifiedShow Answer

Which of the following protection techniques scans and searches hard drives to prevent, detect, and remove known viruses, adware, and spyware?

Correct AnswerverifiedShow Answer

What is the most secure type of authentication?

Correct AnswerverifiedShow Answer

Two-factor authentication requires the user to provide two means of authentication, what the user knows (password) and what the user has (security token).

Correct AnswerverifiedShow Answer

Correct AnswerverifiedShow Answer

Through social engineering, hackers use their social skills to trick people into revealing access credentials or other valuable information.

Correct AnswerverifiedShow Answer

Which of the following represents the biggest problem of information security breaches?

Correct AnswerverifiedShow Answer

What is two-factor authentication?

Correct AnswerverifiedShow Answer

Worms are computer viruses that wait for a specific date before executing their instructions.

Correct AnswerverifiedShow Answer

What is a destructive agent?

Correct AnswerverifiedShow Answer

What is the difference between phishing and pharming?

Correct AnswerverifiedShow Answer

What is a form of social engineering in which one individual lies to obtain confidential data about another individual?

Correct AnswerverifiedShow Answer

What is a masquerading attack that combines spam with spoofing?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified