Chapter 12- Information Security
Management Question and answers
correctly solved 2025/2026
threat - correct answer ✔a person or organization that seeks to obtain or alter data or other IS assets
illegally, without the owners permission and often without the owners knowledge
vulnerability - correct answer ✔an opportunity for threats to gain access to individual or organizational
assets
safeguard - correct answer ✔some measure that individuals or organizations take to block the threat
from obtaining the asset
target - correct answer ✔the asset that is desired by the threat
sources of threat - correct answer ✔human error, computer crime, natural events and disasters
types of security losses - correct answer ✔-unauthorized data disclosure
-incorrect data modification
-faulty service
-denial of service
-loss of infrastructure
unauthorized data disclosure - correct answer ✔occurs when a threat obtains data that is supposed to
be protected
, pretexting/spoofing - correct answer ✔when someone deceives by pretending to be someone else
phishing/email spoofing - correct answer ✔uses pretexting via email
phisher - correct answer ✔pretends to be a legitimate company and sends an email requesting
personal information
IP spoofing - correct answer ✔when an intruder uses another sites IP address to masquerade as that
other site
sniffing - correct answer ✔a technique for intercepting computer communications
drive-by sniffers - correct answer ✔take computers with wireless connections through an area and
search for unprotected wireless networks
hacking - correct answer ✔breaking into computers, servers or networks to steal data
incorrect data modification - correct answer ✔procedures incorrectly designed or not followed, placing
incorrect data on company website, improper internal controls on systems, system errors, faulty
recovery actions after a disaster
faulty service - correct answer ✔problems that result because of incorrect system operation
usurpation - correct answer ✔when computer criminals invade a computer system and replace
legitimate programs with their own unauthorized ones that shut down legitimate applications and
substitute their own processes to spy, steal, and manipulate data, or achieve other purposes
denial of service (DOS) - correct answer ✔users are not able to access an IS
Management Question and answers
correctly solved 2025/2026
threat - correct answer ✔a person or organization that seeks to obtain or alter data or other IS assets
illegally, without the owners permission and often without the owners knowledge
vulnerability - correct answer ✔an opportunity for threats to gain access to individual or organizational
assets
safeguard - correct answer ✔some measure that individuals or organizations take to block the threat
from obtaining the asset
target - correct answer ✔the asset that is desired by the threat
sources of threat - correct answer ✔human error, computer crime, natural events and disasters
types of security losses - correct answer ✔-unauthorized data disclosure
-incorrect data modification
-faulty service
-denial of service
-loss of infrastructure
unauthorized data disclosure - correct answer ✔occurs when a threat obtains data that is supposed to
be protected
, pretexting/spoofing - correct answer ✔when someone deceives by pretending to be someone else
phishing/email spoofing - correct answer ✔uses pretexting via email
phisher - correct answer ✔pretends to be a legitimate company and sends an email requesting
personal information
IP spoofing - correct answer ✔when an intruder uses another sites IP address to masquerade as that
other site
sniffing - correct answer ✔a technique for intercepting computer communications
drive-by sniffers - correct answer ✔take computers with wireless connections through an area and
search for unprotected wireless networks
hacking - correct answer ✔breaking into computers, servers or networks to steal data
incorrect data modification - correct answer ✔procedures incorrectly designed or not followed, placing
incorrect data on company website, improper internal controls on systems, system errors, faulty
recovery actions after a disaster
faulty service - correct answer ✔problems that result because of incorrect system operation
usurpation - correct answer ✔when computer criminals invade a computer system and replace
legitimate programs with their own unauthorized ones that shut down legitimate applications and
substitute their own processes to spy, steal, and manipulate data, or achieve other purposes
denial of service (DOS) - correct answer ✔users are not able to access an IS
