cis 11 - Chapter 1 Quiz

FACTA grants consumers free access to their credit score.

FALSE

The best approach to establishing strong security with passwords is to use a ____.

password management tool

A(n) ____ is a type of action that has the potential to cause harm.

threat

FACTA grants consumers the right to request one free credit report from each of the three national credit-reporting firms every ____.

12 months

The average phishing site only exists for ____ days to prevent law enforcement agencies from tracking the attackers.

3.8

From January 2005 through July 2012, over ____ electronic data records in the United States were breached, exposing to attackers a range of personal electronic data, such as address, Social Security numbers, health records, and credit card numbers.

562 million

____ ensures that data is accessible when needed to authorized users.

Availability

"____" involves breaking into a car's electronic system.

Car hacking

The ____ of 2003 contains rules regarding consumer privacy.

Fair and Accurate Credit Transactions Act

In a well-run information security program, attacks will never get through security perimeters and local defenses.

False

There is a straightforward and easy solution to securing computers.

False

In the last year, over 600,000 Apple Macs were infected with a malicious software called ____.

Flashback

____ requires banks and financial institutions to alert customers of their policies and practices in disclosing customer information.

GLBA

Under____, healthcare enterprises must guard protected health information and implement policies and procedures to safeguard it, whether it be in paper or electronic format.

HIPAA

____ involves stealing another person's personal information, such as a Social Security number, and then using the information to impersonate the victim, generally for financial gain.

Identity theft

____ ensures that information is correct and no unauthorized person or malicious software has altered that data.

Integrity

____ are individuals who want to attack computers yet they lack the knowledge of computers and networks needed to do so.

Script kiddies

Attack tools can initiate new attacks without any human participation, thus increasing the speed at which systems are attacked.

True

Financial cybercrime is often divided into two categories. The first category focuses on individuals and businesses.

True

Today, many attack tools are freely available and do not require any technical knowledge to use.

True

process that confirms a user's identity

authenication

trying to guess a password through combining a systematic combination of characters

bruce force attack

A ____ is a numerical measurement used by lenders to assess a consumer's creditworthiness.

credit score

The FBI defines ____ as any "premeditated, politically motivated attack against information, computer systems, computer programs, and data which results in violence against non-combatant targets by sub-national groups or clandestine agents."

cyberterrorism

Terrorists who turn their attacks to the network and computer infrastructure to cause panic among citizens are known as ____.

cyberterrorists

Technically speaking, the process for creating a password digital representation is based on a hash algorithm, which creates a(n) ____________________.

digest

In the past, the term ____ was commonly used to refer to a person who uses advanced computer skills to attack computers.

hacker

____ involves using someone's personal information, such as a Social Security number, to establish bank or credit card accounts that are then left unpaid, leaving the victim with the debts and ruining their credit rating.

identity theft

Social engineering ____ means to create a fictitious character and then play out the role of that person on a victim.

impersonation

The term ____ is frequently used to describe the tasks of securing information that is in a digital format.

information security

Security ____ convenience.

is inversely proportional to

any secret combination of letters, numbers, and/or symbols that serves to validate or authenticate a user by what she knows

password

A ____ is a program that lets a user create and store multiple strong passwords in a single user database file that is protected by one strong master password.

password management application

Information (contained on the devices) is protected by three layers: products, ____, and policies and procedures.

people

Instead of asking the user to visit a fraudulent Web site, ____ automatically redirects the user to the fake site.

pharming

Attackers today use common Internet ____ and applications to perform attacks, making it difficult to distinguish an attack from legitimate traffic.

protocols

information entered is observed by another person

shoulder surfing

Grouping individuals and organizations into clusters or groups based on their likes and interests is called ____.

social networking

The Web sites that facilitate linking individuals with common interests and function as an online community of users are called ____.

social networking sites

means of gathering information for an attack by relying on the weaknesses of individuals

soical engineering

Whereas phishing involves sending millions of generic e-mail messages to users, ____ targets only specific users.

spear phishing

A computer ____ is a person who has been hired to break into a computer and steal information.

spy

WUuAxB2aWBndTf7MfEtm is an example of this

strong passwords

once an authorized person opens the door then virtually any number of individuals can follow behind and also enter the building or area

tailgating

On average it takes ____ days for a victim to recover from an attack.

ten

A(n) ____ is a person or element that has the power to carry out a threat.

threat agent

Passwords are still considered a strong defense against attackers.

true

use of a telephone call instead of e-mail to contact a potential victim

vishing

A(n) ____ is a flaw or weakness that allows a threat agent to bypass security.

vulnerability

one type of spear phishing

whaling