Management Information Systems Final Exam. ACTUAL UPDATED QUESTIONS
AND CORRECT ANSWERS
ethics a system of moral principles that human beings use to judge right & wrong & to
develop rules of conduct.
natural laws & rights an ethical system that judges the morality of an action based on how well it
adheres to broadly accepted rules, regardless of the actions' actual
consequences.
utilitarianism an ethical system that judges whether an act is right or wrong by considering the
consequences of the action, weighing its positive effects against its harmful ones.
intellectual property (IP) intangible assets such as music, written works, software, art, designs, movies,
creative ideas, discoveries, inventions, & other expressions of the human mind that
may be legally protected by means of copyrights or patents.
digital rights management (DRM) technologies that software developers, publishers, media companies, & other
intellectual property owners use to control access to their digital content.
, information privacy a protection of data about individuals.
proxy an intermediary server that receives & and analyzes requests from clients and then
directs them to their destinations; sometimes used to protect privacy.
information security a term that encompasses the protection of an organization's information assets
against misuse, disclosure, unauthorized access, or destruction.
malware malicious software designed to attack computer systems.
botnet a combination of the terms robot & network referring to a collection of computers
that have been compromised by malware & used to attack other computers.
distributed denial of service (DDoS) an attack in which computers in a botnet are directed to flood a single website
server with rapid-fire page requests, causing it to slow down or crash.
phishing an attempt to steal passwords or other sensitive information by persuading the
victim, often in an email, to enter the information into a fraudulent website that
masquerades as the authentic version.
risk matrix a matrix that lists an organization's vulnerabilities, with ratings that assess each one
in terms of likelihood & impact on business operations, reputation, & other areas.
incidence response plan a plan that an organization uses to categorize a security threat, determine the
cause, preserve any evidence, & also get the systems back online so the
organization can resume business.
multifactor authentication a combination of two or more authentications a user must pass to access an
information system, such as a fingerprint scan combined with a password.
encryption technique that scrambles data using mathematical formulas, so that it cannot be
read without applying the key to decrypt it.
public key encryption a security measure that uses a pair of keys, one to encrypt the data & the others to
decrypt it; one key is public, widely shared with everyone, but the other is private,
known only to the recipient.
firewall a defensive technical control that inspects incoming & outgoing traffic & either
blocks or permits it according to rules the organization establishes; it can be a
hardware device or a software program.
AND CORRECT ANSWERS
ethics a system of moral principles that human beings use to judge right & wrong & to
develop rules of conduct.
natural laws & rights an ethical system that judges the morality of an action based on how well it
adheres to broadly accepted rules, regardless of the actions' actual
consequences.
utilitarianism an ethical system that judges whether an act is right or wrong by considering the
consequences of the action, weighing its positive effects against its harmful ones.
intellectual property (IP) intangible assets such as music, written works, software, art, designs, movies,
creative ideas, discoveries, inventions, & other expressions of the human mind that
may be legally protected by means of copyrights or patents.
digital rights management (DRM) technologies that software developers, publishers, media companies, & other
intellectual property owners use to control access to their digital content.
, information privacy a protection of data about individuals.
proxy an intermediary server that receives & and analyzes requests from clients and then
directs them to their destinations; sometimes used to protect privacy.
information security a term that encompasses the protection of an organization's information assets
against misuse, disclosure, unauthorized access, or destruction.
malware malicious software designed to attack computer systems.
botnet a combination of the terms robot & network referring to a collection of computers
that have been compromised by malware & used to attack other computers.
distributed denial of service (DDoS) an attack in which computers in a botnet are directed to flood a single website
server with rapid-fire page requests, causing it to slow down or crash.
phishing an attempt to steal passwords or other sensitive information by persuading the
victim, often in an email, to enter the information into a fraudulent website that
masquerades as the authentic version.
risk matrix a matrix that lists an organization's vulnerabilities, with ratings that assess each one
in terms of likelihood & impact on business operations, reputation, & other areas.
incidence response plan a plan that an organization uses to categorize a security threat, determine the
cause, preserve any evidence, & also get the systems back online so the
organization can resume business.
multifactor authentication a combination of two or more authentications a user must pass to access an
information system, such as a fingerprint scan combined with a password.
encryption technique that scrambles data using mathematical formulas, so that it cannot be
read without applying the key to decrypt it.
public key encryption a security measure that uses a pair of keys, one to encrypt the data & the others to
decrypt it; one key is public, widely shared with everyone, but the other is private,
known only to the recipient.
firewall a defensive technical control that inspects incoming & outgoing traffic & either
blocks or permits it according to rules the organization establishes; it can be a
hardware device or a software program.
