MSIS 4123 Final Exam Questions with Correct Answers Latest Update 2025/2026
End User License Agreement - Answers You accept the terms and conditions of your software
lease when you click the box saying that you've read and understand the _________________
direct - Answers Evidence that establishes a fact is _______ evidence.
civil - Answers "The preponderance of evidence" is the standard of proof in a ________ case.
circumstantial - Answers Evidence that suggests a fact is __________ evidence.
criminal - Answers "Beyond a reasonable doubt" is the standard of proof in a ___________ case
PCTDD - Answers _________ are the extra numbers you might press on your phone for something
like your user id number.
civil - Answers Contracts fall under _________ law.
Mandatory Arbitration - Answers ________________ bars class action suits and removes your right
to bring suit in a court of law. (2 words)
hearsay - Answers If I'm in court telling the judge what my wife said, and she is not there, my
testimony would be considered ______________ because the judge cannot cross-examine my wife.
Bribe - Answers Under the FCPA a ________ is called a facilitating transaction.
SEC - Answers Red Flags Rule is overseen by the ________ and the CFTC.
302 - Answers SOX section _______ deals with the signing officers certifying the internal controls.
directory - Answers Under FERPA I can give out your phone number because it is _________
information.
acquiring banks - Answers PCI penalizes the _______ rather than the merchants (2 words)
402 - Answers SOX section ___ deals with the scope, adequacy and effectiveness of internal
controls and procedures.
NIST - Answers _______ oversees FISMA compliance.
Protected health information - Answers Anything that can identify a user with health information
of any kind is called __________________.
compliance - Answers Hiring an outside firm to check your adherence to various regulations is
called a _______ audit.
Incident Response Plan - Answers The _____________ specifies the procedures for dealing with a
security event, like somebody hacking into a server. (2 words)
, TEMPEST - Answers If I wanted to buy CAT6 ethernet cable that is heavily shielded to reduce
the likelihood of wiretapping I'd Google products that are _________ certified.
UPS - Answers A ___ is a battery backup solution for computers. (Acronym)
frequency - Answers Knowing that most car tires wear around after 50,000 miles allows me to
make a __________ likelihood estimate about the life of the tires on my truck.
Verifiability - Answers _____________ means that you can actually measure the impact of a new
control.
intangible, tangible - Answers Hacking into our servers cost us some customers, which is a(n)
_________ cost. We also had to hire some IT folks to rebuild the database and they charged us
$7,000. That was a(n) ___________ tangible cost.
Constraints - Answers ___________ direct the implementation of requirements in security
administration.
classical - Answers The _________ likelihood estimate relies on physical probabilities, like the
odds of a 3 showing up on a dice roll.
what, how - Answers Requirements should specify ________ should be done, not ___ it should be
done.
risk impact - Answers The loss associated with a parking lot accident is the ____________.
champion - Answers A _________ is an upper level manager with access to power and money
who will back your efforts
degaussing - Answers Using magnetism to wipe a physical hard drive is ________. . It also
removes remanence.
risk leverage - Answers The risk of my server being hacked went down 20% when I bought the
new Snowflake Solutions product for $300. My ________________ is about .07%. I would prefer
that it was closer to 1% of course. (2 words)
cold - Answers A ____ site is a shell of a location set up by an organization in case of an
emergency. It needs most things.
hot - Answers A ___ site is a location set up by an organization in case of an emergency that
largely duplicates the existing workplace. It's pretty much ready to move staff in and get to work.
security plan - Answers A ___________ is the written document that details how an organization
will address its security needs. (2 words)
Traceability - Answers ___________ means that you can establish causality between a new
control and a reduction in bad things happening.
End User License Agreement - Answers You accept the terms and conditions of your software
lease when you click the box saying that you've read and understand the _________________
direct - Answers Evidence that establishes a fact is _______ evidence.
civil - Answers "The preponderance of evidence" is the standard of proof in a ________ case.
circumstantial - Answers Evidence that suggests a fact is __________ evidence.
criminal - Answers "Beyond a reasonable doubt" is the standard of proof in a ___________ case
PCTDD - Answers _________ are the extra numbers you might press on your phone for something
like your user id number.
civil - Answers Contracts fall under _________ law.
Mandatory Arbitration - Answers ________________ bars class action suits and removes your right
to bring suit in a court of law. (2 words)
hearsay - Answers If I'm in court telling the judge what my wife said, and she is not there, my
testimony would be considered ______________ because the judge cannot cross-examine my wife.
Bribe - Answers Under the FCPA a ________ is called a facilitating transaction.
SEC - Answers Red Flags Rule is overseen by the ________ and the CFTC.
302 - Answers SOX section _______ deals with the signing officers certifying the internal controls.
directory - Answers Under FERPA I can give out your phone number because it is _________
information.
acquiring banks - Answers PCI penalizes the _______ rather than the merchants (2 words)
402 - Answers SOX section ___ deals with the scope, adequacy and effectiveness of internal
controls and procedures.
NIST - Answers _______ oversees FISMA compliance.
Protected health information - Answers Anything that can identify a user with health information
of any kind is called __________________.
compliance - Answers Hiring an outside firm to check your adherence to various regulations is
called a _______ audit.
Incident Response Plan - Answers The _____________ specifies the procedures for dealing with a
security event, like somebody hacking into a server. (2 words)
, TEMPEST - Answers If I wanted to buy CAT6 ethernet cable that is heavily shielded to reduce
the likelihood of wiretapping I'd Google products that are _________ certified.
UPS - Answers A ___ is a battery backup solution for computers. (Acronym)
frequency - Answers Knowing that most car tires wear around after 50,000 miles allows me to
make a __________ likelihood estimate about the life of the tires on my truck.
Verifiability - Answers _____________ means that you can actually measure the impact of a new
control.
intangible, tangible - Answers Hacking into our servers cost us some customers, which is a(n)
_________ cost. We also had to hire some IT folks to rebuild the database and they charged us
$7,000. That was a(n) ___________ tangible cost.
Constraints - Answers ___________ direct the implementation of requirements in security
administration.
classical - Answers The _________ likelihood estimate relies on physical probabilities, like the
odds of a 3 showing up on a dice roll.
what, how - Answers Requirements should specify ________ should be done, not ___ it should be
done.
risk impact - Answers The loss associated with a parking lot accident is the ____________.
champion - Answers A _________ is an upper level manager with access to power and money
who will back your efforts
degaussing - Answers Using magnetism to wipe a physical hard drive is ________. . It also
removes remanence.
risk leverage - Answers The risk of my server being hacked went down 20% when I bought the
new Snowflake Solutions product for $300. My ________________ is about .07%. I would prefer
that it was closer to 1% of course. (2 words)
cold - Answers A ____ site is a shell of a location set up by an organization in case of an
emergency. It needs most things.
hot - Answers A ___ site is a location set up by an organization in case of an emergency that
largely duplicates the existing workplace. It's pretty much ready to move staff in and get to work.
security plan - Answers A ___________ is the written document that details how an organization
will address its security needs. (2 words)
Traceability - Answers ___________ means that you can establish causality between a new
control and a reduction in bad things happening.
