MIS Chapter 4

_________ is a physical control.

A company gate

Which of the following is NOT an advantage of VPN?

Cost

A(n) _________ to an information resource is any danger to which a system may be exposed.

Threat

Biometrics is an example of something the user _________.

is

Typing in your password to access a system is an example of something the user _________.

knows

Auditing _________ the computer means auditors check inputs, outputs, and processing.

through

A _________ site typically does not include the actual application the company needs to get the business back up and running immediately.

warm

Auditing _________ the computer means using a combination of client data, auditor software, and client and auditor hardware.

with

_________ is an attack by a programmer developing a system.

A Trojan horse

_________ controls restrict unauthorized individuals from using information resources.

Access

Which of the following does NOT contribute to the increasing vulnerability of organizational information resources?

Additional Management Support

_________ causes pop-up advertisements to appear on your screen.

Adware

Piracy costs businesses _________ of dollars per year.

Billions

Spam costs US companies _________ of dollars per year.

Billions

_________ controls secure the movement of data across networks.

Communications

A(n) _________ is located between two firewalls.

DMZ

_________ is a remote attack requiring no user action.

DoS

_________ is an access control.

Encryption

_________ is the process of converting an original message into a form that cannot be read by anyone except the intended receiver.

Encryption

_________ occurs when an unauthorized individual attempts to gain illegal access to organizational information.

Espionage

The _________ of an information resource is the harm, loss, or damage that can result if a threat compromises that resource.

Exposure

A(n) _________ is a system that prevents a specific type of information from moving between untrusted networks and private networks.

Firewall

_________ is a communications control.

Firewall

Which of the following does NOT contribute to the increasing vulnerability of organizational information resources?

Increasing Skills necessary to be a hacker

_________ occur(s) when an attacker either threatens to steal, or actually steals, information from a company and then demands payment for not carrying out a particular act.

Information Extortion

A _________ is an official document that grants the holder exclusive rights on an invention or a process for a specified period of time.

Patent

_________ controls prevent unauthorized individuals from gaining access to a company's facilities.

Physical

You purchased a copy of Microsoft Office and give a copy to a friend so he/she doesn't have to buy it too. This is _________ and is _________.

Piracy; illegal

Intellectual property is NOT protected under _________ laws.

Privacy

If a hacker takes control of equipment such as power grids or nuclear power plants, this is an example of a(n) _________ attack.

SCADA

_________ is a deliberate act that involves defacing an organization's website, potentially damaging the organization's image and causing its customers to lose faith.

Sabotage

_________ is an attack in which the perpetrator uses social skills to trick or manipulate legitimate employees into providing confidential company information such as passwords.

Social Engineering

_________ is an unintentional threat.

Social Engineering

_________ is pestware that users your computer as a launch pad for unsolicited e-mail, usually advertising for products and services.

Spamware

Keystroke loggers and screen scrapers are examples of _________.

Spyware

_________ collects personal information about users without their consent.

Spyware

A URL that begins with https uses _________.

TLS

_________ is a private network that uses a public network to connect users.

VPN

_________ is a remote attack requiring user action.

Virus

An information resource's _________ is the possibility that the system will be harmed by a threat.

Vulnerability

Careless Internet surfing is _________ and is an _________ mistake.

a human error, unintentional

Carelessness using unmanaged devices is _________ and is an _________ mistake.

a human error, unintentional

You don't lock your computer when you go to the restroom. This is _________ and is an _________ mistake.

a human error, unintentional

You get a new smartphone and throw your old one away without erasing all your data. This is _________ and is an _________ mistake.

a human error, unintentional

You lose the company's USB with your sales spreadsheets on it. This is _________ and is an _________ mistake.

a human error, unintentional

You never wipe the dust off your computer. This is _________ and is an _________ mistake.

a human error, unintentional

You open an e-mail from your friend that looks a little odd, but you figure your friend would never send you anything bad. This is _________ and is an _________ mistake.

a human error, unintentional

A(n) _________ is a software package that attempts to identify and eliminate viruses and worms.

anti-malware system

Auditing _________ the computer means verifying processing by checking for known outputs using specific inputs.

around

A _________ site provides only rudimentary services and facilities.

cold

A _________ is a statutory grant that provides the creators or owners of intellectual property with ownership of the property for a designated period.

copyright

If you have to speak into your phone to unlock it, this is an example of something the user _________.

does

Your student ID is an example of something the user _________.

has

A _________ site is a fully configured computer facility with all of the company's services, communication links, and physical plant operations.

hot

A _________ site is the most expensive option.

hot

Suppose you have a primary location in New York City where you main corporate servers are located. Just in case something happens in New York City, you have backup servers that are updated every minute in Chicago. This is an example of a _________ site.

hot

Suppose your university automatically logs you off of a university computer after 15 minutes of disuse. This is an example of a(n) _________ control.

physical

In public-key encryption, the _________ key is used for locking and the _________ key is used for unlocking.

public; private

You are a nice person, so you hold the door open for the person running in behind you. Since you needed to use your ID badge to open the door, the person running in behind you is __________; this is _________.

tailgating, an unintentional threat to your organization

A _________ is an intellectual work that is not based on public information.

trade secret

A(n) _________ network is any network within your organization; a(n) _________ network is any network external to your organization.

trusted; untrusted

If humans are careless with laptops, this is an _________ error which could cause theft of equipment or information (an _________ error) .

unintentional, intentional