WGU D322- Introduction to IT Section 8 Exam Review

Which regulation governs the actions of a company in the case of data records being compromised, lost, or stolen? Computer Matching and Primary Protection Act of 1988 Security Breach Notification laws The Electronic Communication Privacy Act of 1986 Digital Signature and Electronic Authorization laws - ANSWER-Security Breach Notification laws What is part of the role of an IT professional association? Engages in best practices for information systems Provides professional standards for ethical behavior Writes laws dealing with information technology - ANSWER-Engages in best practices for information systems Provides professional standards for ethical behavior What is not part of the role of an IT professional association? Engages in best practices for information systems Provides professional standards for ethical behavior Writes laws dealing with information technology - ANSWER-Writes laws dealing with information technology How can an organization assist employees with the ethical use of information technology? By developing policies for information usage By monitoring network throughput By ensuring databases are backed up By establishing optimal server performance - ANSWER-By developing policies for information usage Computer Security - ANSWER-Focuses on protecting data from unauthorized use and the exploitation of stolen data for profit. Computer Ethics - ANSWER-Moral guidelines that govern the use of computers and information systems. Computer Privacy - ANSWER-Focuses on the use and governance of personal data, ensuring that it is collected, shared, and used appropriately. What does the acronym CIA stand for in cybersecurity? Central Intelligence Agency Confidentiality, integrity, and availability Confidentiality, intelligence, accessibility Cybersecurity, internet, accessibility - ANSWER-Confidentiality, integrity, and availability Confidentiality [CIA triad] - ANSWER-the rules that restrict access to only those who need to know. Integrity [CIA triad] - ANSWER-Addresses the level of assurance that can be given as to how accurate and trustworthy data is. Availability [CIA triad] - ANSWER-Data being available to the people who need it when they need it. Ways to enforce confidentiality - ANSWER-- Implementing access controls - Training clients to identify and reduce security risks by doing the following: Create strong password policies and Recognize social engineering attacks. Social Engineering - ANSWER-a general term that describes any attack that takes advantage of humans' trusting nature. Ways to maintain Integrity - ANSWER-- file permissions - user access controls - version control - redundant systems or copies. Ways to ensure availability - ANSWER-- rigorously maintaining all hardware - testing compatibility with operating systems and installed applications - keeping systems patched and up-to-date. Mei is buying equipment from an online retail site, and she finds that she is able to change the price of the equipment from $1,000 to $10. Which part of the CIA triad has been broken in this scenario? Confidentiality Availability Integrity None of the above - ANSWER-Integrity