ISM 3004 Exam 4 | University of Florida | UPDATED
Questions with 100% Verified Answers
Q1: Three reasons to secure data
A: 1. It's the most valuable asset.
2. Privacy Regulations.
3. Systems can be hijacked.
Q2: What are digital identities and why protect them?
A: Log-in credentials such as usernames and passwords. To protect your identity.
Q3: What is a zero day exploit?
A: Everyday vulnerability becomes known to the world, because bad guys are using it to
break into other people's systems.
A hole in the software that is unknown to the vendor. This security hole is then exploited
by hackers before the vendor becomes aware and hurries to fix it.
Q4: According to the PWC report, what is the annual growth rate
for security incidents?
A: 66%
Q5: Reading: Biggest hack in history. How did hackers get in ?
A: An employee opened a bad email.
Q6: Reading: Biggest Hack in History. What damage was suffered?
A: In a matter of hours, 35,000 computers were partially wiped or totally destroyed.
Without a way to pay them, gasoline tank trucks seeking refills had to be turned away.
Saudi Aramco's ability to supply 10% of the world's oil was suddenly at risk.
Employees had to use typewriters since they could not use the computer to prevent the
virus from spreading further.
Q7: What does it mean for something to be vulnerable?
A: Susceptible to attack or harm.
Q8: What are the broad categories of IT vulnerability?
A: Physical
Technological
Human
Q9: Percentage of laptops lost over their service life?
A: 7%
,Q10: Stolen Veteran's Affairs laptop incident: What data was
exposed, what was the impact?
A: One laptop stolen!
Exposure: name, SSN, birth date for 26.5 million people.
Lawsuit settlement: 20 Mil
Individual impact: ID theft
Q11: Percentage of smartphones lost EACH YEAR?
A: 5%
Q12: About _____% of lost smartphones had sensitive data?
A: 60%
Q13: Were the lost smartphone protected?
A: NO
Q14: As a rule of thumb, each data record lost costs a company
about $_____?
A: $200
Q15: _____% of companies surveyed suffered loss of
sensitive/confidential information from lost flash drives?
A: 70%
Q16: What is Shoulder Surfing?
A: Acquiring sensitive information just by looking over somebody's shoulder.
Q17: How do attackers use shoulder surfing?
A: Stealing confidential data.
Stealing mobile devices.
Q18: A company's dumpster can be a "_________________________" to
cybercriminals.
A: Gold Mine of Information
Q19: What kinds of information might be in a company's 'dumpster'?
A: Pre-attack research
Q20: What kinds of things actually contain the desired information
from dumpster diving?
, A: Phone Lists, Print outs, and media
Q21: How would the cyber-criminal use the information from the
dumpster dive?
A: SELL IT
Q22: What risk must be considered when disposing of obsolete
equipment?
A: Computers and copy machines at risk due to their hard drives.
Q23: As one example, why was one healthcare company over $1
million?
A: Improper photocopy equipment disposal.
Q24: What is a bug?
A: A programming flaw or oversight that can be exploited.
Q25: Is it reasonable to expect that large software systems would
be truly and totally bug-free? Why?
A: NO. There are millions of lines of codes that could contain bugs.
Q26: What can an attacker do with a bug?
A: Run undesired programs.
Unauthorized data access.
Gain full control.
Q27: What are the three user password vulnerabilities?
A: Sticky Notes: writing the passwords down.
Guessable: people who know you.
Lack on complexity: too simple.
Q28: What are the root causes of problems with user passwords?
A: Easily remembered.
Resistant to change.
Q29: Why are default password a potential security problem?
A: Weak.
Easily guessable.
Doesn't change network identifier.
Q30: Organizations spend most of their IT security dollars
protecting _________________________.
Questions with 100% Verified Answers
Q1: Three reasons to secure data
A: 1. It's the most valuable asset.
2. Privacy Regulations.
3. Systems can be hijacked.
Q2: What are digital identities and why protect them?
A: Log-in credentials such as usernames and passwords. To protect your identity.
Q3: What is a zero day exploit?
A: Everyday vulnerability becomes known to the world, because bad guys are using it to
break into other people's systems.
A hole in the software that is unknown to the vendor. This security hole is then exploited
by hackers before the vendor becomes aware and hurries to fix it.
Q4: According to the PWC report, what is the annual growth rate
for security incidents?
A: 66%
Q5: Reading: Biggest hack in history. How did hackers get in ?
A: An employee opened a bad email.
Q6: Reading: Biggest Hack in History. What damage was suffered?
A: In a matter of hours, 35,000 computers were partially wiped or totally destroyed.
Without a way to pay them, gasoline tank trucks seeking refills had to be turned away.
Saudi Aramco's ability to supply 10% of the world's oil was suddenly at risk.
Employees had to use typewriters since they could not use the computer to prevent the
virus from spreading further.
Q7: What does it mean for something to be vulnerable?
A: Susceptible to attack or harm.
Q8: What are the broad categories of IT vulnerability?
A: Physical
Technological
Human
Q9: Percentage of laptops lost over their service life?
A: 7%
,Q10: Stolen Veteran's Affairs laptop incident: What data was
exposed, what was the impact?
A: One laptop stolen!
Exposure: name, SSN, birth date for 26.5 million people.
Lawsuit settlement: 20 Mil
Individual impact: ID theft
Q11: Percentage of smartphones lost EACH YEAR?
A: 5%
Q12: About _____% of lost smartphones had sensitive data?
A: 60%
Q13: Were the lost smartphone protected?
A: NO
Q14: As a rule of thumb, each data record lost costs a company
about $_____?
A: $200
Q15: _____% of companies surveyed suffered loss of
sensitive/confidential information from lost flash drives?
A: 70%
Q16: What is Shoulder Surfing?
A: Acquiring sensitive information just by looking over somebody's shoulder.
Q17: How do attackers use shoulder surfing?
A: Stealing confidential data.
Stealing mobile devices.
Q18: A company's dumpster can be a "_________________________" to
cybercriminals.
A: Gold Mine of Information
Q19: What kinds of information might be in a company's 'dumpster'?
A: Pre-attack research
Q20: What kinds of things actually contain the desired information
from dumpster diving?
, A: Phone Lists, Print outs, and media
Q21: How would the cyber-criminal use the information from the
dumpster dive?
A: SELL IT
Q22: What risk must be considered when disposing of obsolete
equipment?
A: Computers and copy machines at risk due to their hard drives.
Q23: As one example, why was one healthcare company over $1
million?
A: Improper photocopy equipment disposal.
Q24: What is a bug?
A: A programming flaw or oversight that can be exploited.
Q25: Is it reasonable to expect that large software systems would
be truly and totally bug-free? Why?
A: NO. There are millions of lines of codes that could contain bugs.
Q26: What can an attacker do with a bug?
A: Run undesired programs.
Unauthorized data access.
Gain full control.
Q27: What are the three user password vulnerabilities?
A: Sticky Notes: writing the passwords down.
Guessable: people who know you.
Lack on complexity: too simple.
Q28: What are the root causes of problems with user passwords?
A: Easily remembered.
Resistant to change.
Q29: Why are default password a potential security problem?
A: Weak.
Easily guessable.
Doesn't change network identifier.
Q30: Organizations spend most of their IT security dollars
protecting _________________________.
