ITN 267 Midterm 1-7 and Final 1-10 || very Flawless.
1. The main goal of information security is to protect:
A. non-public personally identifiable information
B. confidentiality, integrity, and availability
C. personal health data and biometrics
D. financial data of public entities correct answers Answer: B Reference: p 4
2. All of the following are true with respect to cryptography except:
A. hides information so unauthorized persons can't access it
B. preserves confidentiality
C. only used today by health care providers to protect health care data
D. were used by the military to protect confidential communications correct answers Answer: C
Reference: p 5
3. _______________ is the process of reviewing known vulnerabilities and threats.
A. Risk avoidance
B. Risk mitigation
C. Risk analysis
D. Risk engineering correct answers Answer: C Reference: p 16
4. What is the process of applying safeguards to avoid a negative impact?
A. risk mitigation
B. risk transfer
C. risk analysis
D. risk avoidance correct answers Answer: D Reference: p 16
5. ___________________ refers to applying safeguards designed to lower risks to a level
deemed acceptable but without eliminating such risks.
A. Residual risk
B. Risk avoidance
C. Risk mitigation
D. Risk transfer correct answers Answer: C Reference: p 16
6.______________ means that only people with the right permission can access and use
information.
A. Authorized agent
B. Confidentiality
C. Integrity
D. Encryption correct answers Answer: B Reference: p 5
, 7. All of the following are ways to protect confidentiality except:
A. encryption
B. access controls
C. passwords
D. shoulder surfing correct answers Answer: D Reference: p 6
8. _________________________ involves tricking other people into breaking security
procedures and sharing sensitive information.
A. Shoulder surfing
B. E-mail spam
C. Social engineering
D. Integrity correct answers Answer: C Reference: p 6
1._____________ is an individual's right to control the use and disclosure of his or her own
personal data.
A. Preference
B. Privacy
C. Integrity
D. Access correct answers Answer: B Reference: p 36
2. What is the source of legal authority for the U.S. government?
A. The First Amendment
B. Laws enacted by state Supreme Courts
C. The Fourth Amendment
D. The U.S. Constitution correct answers Answer: D Reference: p 38
3. Which of the following U.S. Constitution amendments contribute to the right of privacy?
A. First, Second, and Third Amendments
B. First and Sixth Amendments
C. First, Third, and Fourth Amendments
D. First, Second, and Fourth Amendments correct answers Answer: C Reference: p 38
4. __________________ is a body of law developed because of legal tradition and court cases.
A. Common law
B. Privacy law
C. Public law
D. Administrative law correct answers Answer: A Reference: p 44
5. A ______________ is some kind of wrongful act that harms or hurts a person.
1. The main goal of information security is to protect:
A. non-public personally identifiable information
B. confidentiality, integrity, and availability
C. personal health data and biometrics
D. financial data of public entities correct answers Answer: B Reference: p 4
2. All of the following are true with respect to cryptography except:
A. hides information so unauthorized persons can't access it
B. preserves confidentiality
C. only used today by health care providers to protect health care data
D. were used by the military to protect confidential communications correct answers Answer: C
Reference: p 5
3. _______________ is the process of reviewing known vulnerabilities and threats.
A. Risk avoidance
B. Risk mitigation
C. Risk analysis
D. Risk engineering correct answers Answer: C Reference: p 16
4. What is the process of applying safeguards to avoid a negative impact?
A. risk mitigation
B. risk transfer
C. risk analysis
D. risk avoidance correct answers Answer: D Reference: p 16
5. ___________________ refers to applying safeguards designed to lower risks to a level
deemed acceptable but without eliminating such risks.
A. Residual risk
B. Risk avoidance
C. Risk mitigation
D. Risk transfer correct answers Answer: C Reference: p 16
6.______________ means that only people with the right permission can access and use
information.
A. Authorized agent
B. Confidentiality
C. Integrity
D. Encryption correct answers Answer: B Reference: p 5
, 7. All of the following are ways to protect confidentiality except:
A. encryption
B. access controls
C. passwords
D. shoulder surfing correct answers Answer: D Reference: p 6
8. _________________________ involves tricking other people into breaking security
procedures and sharing sensitive information.
A. Shoulder surfing
B. E-mail spam
C. Social engineering
D. Integrity correct answers Answer: C Reference: p 6
1._____________ is an individual's right to control the use and disclosure of his or her own
personal data.
A. Preference
B. Privacy
C. Integrity
D. Access correct answers Answer: B Reference: p 36
2. What is the source of legal authority for the U.S. government?
A. The First Amendment
B. Laws enacted by state Supreme Courts
C. The Fourth Amendment
D. The U.S. Constitution correct answers Answer: D Reference: p 38
3. Which of the following U.S. Constitution amendments contribute to the right of privacy?
A. First, Second, and Third Amendments
B. First and Sixth Amendments
C. First, Third, and Fourth Amendments
D. First, Second, and Fourth Amendments correct answers Answer: C Reference: p 38
4. __________________ is a body of law developed because of legal tradition and court cases.
A. Common law
B. Privacy law
C. Public law
D. Administrative law correct answers Answer: A Reference: p 44
5. A ______________ is some kind of wrongful act that harms or hurts a person.
