WGU - Introduction to IT - D322 Section 8 Review Questions & Answers(SCORED A+)

Which regulation governs the actions of a company in the case of data records being compromised, lost, or stolen? Computer Matching and Primary Protection Act of 1988 Security Breach Notification laws The Electronic Communication Privacy Act of 1986 Digital Signature and Electronic Authorization laws -ANSWER Security Breach Notification laws What is part of the role of an IT professional association? Engages in best practices for information systems Provides professional standards for ethical behavior Writes laws dealing with information technology -ANSWER Engages in best practices for information systems Provides professional standards for ethical behavior What is not part of the role of an IT professional association? Engages in best practices for information systems Provides professional standards for ethical behavior Writes laws dealing with information technology -ANSWER Writes laws dealing with information technology How can an organization assist employees with the ethical use of information technology? By developing policies for information usage By monitoring network throughput By ensuring databases are backed up By establishing optimal server performance -ANSWER By developing policies for information usage Computer Security -ANSWER Focuses on protecting data from unauthorized use and the exploitation of stolen data for profit. Computer Ethics -ANSWER Moral guidelines that govern the use of computers and information systems. Computer Privacy -ANSWER Focuses on the use and governance of personal data, ensuring that it is collected, shared, and used appropriately. What does the acronym CIA stand for in cybersecurity? Central Intelligence Agency Confidentiality, integrity, and availability Confidentiality, intelligence, accessibility Cybersecurity, internet, accessibility -ANSWER Confidentiality, integrity, and availability Confidentiality [CIA triad] -ANSWER the rules that restrict access to only those who need to know. Integrity [CIA triad] -ANSWER Addresses the level of assurance that can be given as to how accurate and trustworthy data is. Availability [CIA triad] -ANSWER Data being available to the people who need it when they need it. Ways to enforce confidentiality -ANSWER - Implementing access controls - Training clients to identify and reduce security risks by doing the following: Create strong password policies and Recognize social engineering attacks. Social Engineering -ANSWER a general term that describes any attack that takes advantage of humans' trusting nature. Ways to maintain Integrity -ANSWER - file permissions - user access controls - version control - redundant systems or copies. Ways to ensure availability -ANSWER - rigorously maintaining all hardware - testing compatibility with operating systems and installed applications - keeping systems patched and up-to-date. Mei is buying eq