COMM 226 EXAM 2025 | ALL QUESTIONS AND
CORRECT ANSWERS | GRADED A+ | VERIFIED
ANSWERS | LATEST VERSION
What is ambient AI and how does it work? ---------CORRECT ANSWER-----
------------Ambient AI is an always-on system that responds to natural inputs
like voice and gestures using sensors embedded in various devices.
What is information systems security? ---------CORRECT ANSWER-----------
------Information systems security is the process of preventing unauthorized
access to an IS or modification of its data. This includes protecting against
threats like hackers, malware, and human errors. Example: A company
uses firewalls, encryption, and strong authentication methods to protect its
data from cyberattacks.
What are the major trade-offs in information security? ---------CORRECT
ANSWER-----------------The major trade-offs in information security are:
1. **Security vs. Cost**: Implementing stronger security measures
increases costs. Example: Installing advanced intrusion detection systems
can be expensive.
2. **Security vs. Convenience**: Stronger security often reduces user
convenience. Example: Two-factor authentication adds an extra step to
logging in, which can be inconvenient but enhances security.
Define threat in the context of IS security. Provide an example. ---------
CORRECT ANSWER-----------------A threat is a person or organization that
seeks to obtain or alter data or other assets illegally, without the owner's
permission and often without the owner's knowledge.
Example: A hacker attempting to steal customer credit card data from an e-
commerce website.
,What is a vulnerability? Provide an example. ---------CORRECT ANSWER--
---------------A vulnerability is a weakness in an IS that provides an
opportunity for threats to gain access to assets.
Example: An outdated software system that hasn't been patched, making it
susceptible to malware attacks.
What is a safeguard? Provide an example. ---------CORRECT ANSWER-----
------------A safeguard is a measure taken to block a threat from obtaining
the asset.
Example: Using encryption to protect sensitive customer data during
transmission over the internet.
What is a target in IS security? Provide an example. ---------CORRECT
ANSWER-----------------A target is the asset that is desired by the threat.
Example: A company's customer database containing personal and
payment information is a target for cybercriminals.
Define risk in IS security and provide an example. ---------CORRECT
ANSWER-----------------Risk is the chance of loss, which combines the
likelihood of a threat occurring and the potential value of the loss.
Example: If a company stores sensitive data without encryption, the risk of
data theft (high likelihood) and the loss of customer trust (high value) is
significant.
What is GDPR and why is it important? ---------CORRECT ANSWER---------
--------The General Data Protection Regulation (GDPR) is a European
Union law governing the collection, processing, and transfer of personal
data. It ensures data privacy and protection for individuals.
,Importance: Companies that fail to comply with GDPR can face hefty fines.
Example: Facebook faced penalties for data privacy violations under
GDPR.
What is malware? List three types of malware and examples. ---------
CORRECT ANSWER-----------------Malware is malicious software designed
to damage or disable computers. Types include:
1. **Virus**: A program that replicates itself. Example: The 'ILOVEYOU'
virus.
2. **Worm**: Spreads across networks. Example: The 'WannaCry'
ransomware worm.
3. **Ransomware**: Encrypts files and demands payment. Example: The
'CryptoLocker' ransomware.
What are bluejacking and bluesnarfing? ---------CORRECT ANSWER--------
---------**Bluejacking**: Sending harmless, unsolicited messages via
Bluetooth. Example: Sending a prank message to a nearby smartphone.
**Bluesnarfing**: Stealing data from a Bluetooth-enabled device. Example:
A hacker accessing contacts from an unsecured smartphone.
What is two-factor authentication (2FA)? Provide an example. ---------
CORRECT ANSWER-----------------Two-factor authentication requires two
forms of verification to access an account.
Example: Logging into a bank account requires a password and a code
sent via SMS.
What is phishing? Provide an example. ---------CORRECT ANSWER---------
--------Phishing is a technique where attackers use deceptive emails to trick
people into divulging confidential information.
Example: An email pretending to be from a bank asking you to verify your
account details by clicking a malicious link.
, Explain a man-in-the-middle attack with an example. ---------CORRECT
ANSWER-----------------A man-in-the-middle (MITM) attack occurs when an
attacker intercepts communication between two parties.
Example: An attacker intercepts login credentials by spoofing a Wi-Fi
network at a coffee shop.
What is a firewall and how does it work? ---------CORRECT ANSWER--------
---------A firewall is a security system that monitors and controls incoming
and outgoing network traffic.
Example: A company's firewall blocks unauthorized traffic from reaching its
internal network.
What is encryption? Differentiate between symmetric and asymmetric
encryption. ---------CORRECT ANSWER-----------------Encryption transforms
readable data into coded text to protect it.
- **Symmetric Encryption**: Uses the same key to encrypt and decrypt.
Example: AES encryption.
- **Asymmetric Encryption**: Uses a public key to encrypt and a private key
to decrypt. Example: RSA encryption.
What is a smart card and how is it used for authentication? ---------
CORRECT ANSWER-----------------A smart card is a card with a microchip
that stores authentication data. Users insert the card and enter a PIN to
authenticate.
Example: Accessing a secure office building using a smart card and PIN.
What is hashing in authentication? Why is it important? ---------CORRECT
ANSWER-----------------Hashing converts input data into a fixed-length string
of characters (a hash). It is one-way and irreversible.
CORRECT ANSWERS | GRADED A+ | VERIFIED
ANSWERS | LATEST VERSION
What is ambient AI and how does it work? ---------CORRECT ANSWER-----
------------Ambient AI is an always-on system that responds to natural inputs
like voice and gestures using sensors embedded in various devices.
What is information systems security? ---------CORRECT ANSWER-----------
------Information systems security is the process of preventing unauthorized
access to an IS or modification of its data. This includes protecting against
threats like hackers, malware, and human errors. Example: A company
uses firewalls, encryption, and strong authentication methods to protect its
data from cyberattacks.
What are the major trade-offs in information security? ---------CORRECT
ANSWER-----------------The major trade-offs in information security are:
1. **Security vs. Cost**: Implementing stronger security measures
increases costs. Example: Installing advanced intrusion detection systems
can be expensive.
2. **Security vs. Convenience**: Stronger security often reduces user
convenience. Example: Two-factor authentication adds an extra step to
logging in, which can be inconvenient but enhances security.
Define threat in the context of IS security. Provide an example. ---------
CORRECT ANSWER-----------------A threat is a person or organization that
seeks to obtain or alter data or other assets illegally, without the owner's
permission and often without the owner's knowledge.
Example: A hacker attempting to steal customer credit card data from an e-
commerce website.
,What is a vulnerability? Provide an example. ---------CORRECT ANSWER--
---------------A vulnerability is a weakness in an IS that provides an
opportunity for threats to gain access to assets.
Example: An outdated software system that hasn't been patched, making it
susceptible to malware attacks.
What is a safeguard? Provide an example. ---------CORRECT ANSWER-----
------------A safeguard is a measure taken to block a threat from obtaining
the asset.
Example: Using encryption to protect sensitive customer data during
transmission over the internet.
What is a target in IS security? Provide an example. ---------CORRECT
ANSWER-----------------A target is the asset that is desired by the threat.
Example: A company's customer database containing personal and
payment information is a target for cybercriminals.
Define risk in IS security and provide an example. ---------CORRECT
ANSWER-----------------Risk is the chance of loss, which combines the
likelihood of a threat occurring and the potential value of the loss.
Example: If a company stores sensitive data without encryption, the risk of
data theft (high likelihood) and the loss of customer trust (high value) is
significant.
What is GDPR and why is it important? ---------CORRECT ANSWER---------
--------The General Data Protection Regulation (GDPR) is a European
Union law governing the collection, processing, and transfer of personal
data. It ensures data privacy and protection for individuals.
,Importance: Companies that fail to comply with GDPR can face hefty fines.
Example: Facebook faced penalties for data privacy violations under
GDPR.
What is malware? List three types of malware and examples. ---------
CORRECT ANSWER-----------------Malware is malicious software designed
to damage or disable computers. Types include:
1. **Virus**: A program that replicates itself. Example: The 'ILOVEYOU'
virus.
2. **Worm**: Spreads across networks. Example: The 'WannaCry'
ransomware worm.
3. **Ransomware**: Encrypts files and demands payment. Example: The
'CryptoLocker' ransomware.
What are bluejacking and bluesnarfing? ---------CORRECT ANSWER--------
---------**Bluejacking**: Sending harmless, unsolicited messages via
Bluetooth. Example: Sending a prank message to a nearby smartphone.
**Bluesnarfing**: Stealing data from a Bluetooth-enabled device. Example:
A hacker accessing contacts from an unsecured smartphone.
What is two-factor authentication (2FA)? Provide an example. ---------
CORRECT ANSWER-----------------Two-factor authentication requires two
forms of verification to access an account.
Example: Logging into a bank account requires a password and a code
sent via SMS.
What is phishing? Provide an example. ---------CORRECT ANSWER---------
--------Phishing is a technique where attackers use deceptive emails to trick
people into divulging confidential information.
Example: An email pretending to be from a bank asking you to verify your
account details by clicking a malicious link.
, Explain a man-in-the-middle attack with an example. ---------CORRECT
ANSWER-----------------A man-in-the-middle (MITM) attack occurs when an
attacker intercepts communication between two parties.
Example: An attacker intercepts login credentials by spoofing a Wi-Fi
network at a coffee shop.
What is a firewall and how does it work? ---------CORRECT ANSWER--------
---------A firewall is a security system that monitors and controls incoming
and outgoing network traffic.
Example: A company's firewall blocks unauthorized traffic from reaching its
internal network.
What is encryption? Differentiate between symmetric and asymmetric
encryption. ---------CORRECT ANSWER-----------------Encryption transforms
readable data into coded text to protect it.
- **Symmetric Encryption**: Uses the same key to encrypt and decrypt.
Example: AES encryption.
- **Asymmetric Encryption**: Uses a public key to encrypt and a private key
to decrypt. Example: RSA encryption.
What is a smart card and how is it used for authentication? ---------
CORRECT ANSWER-----------------A smart card is a card with a microchip
that stores authentication data. Users insert the card and enter a PIN to
authenticate.
Example: Accessing a secure office building using a smart card and PIN.
What is hashing in authentication? Why is it important? ---------CORRECT
ANSWER-----------------Hashing converts input data into a fixed-length string
of characters (a hash). It is one-way and irreversible.
