Verified Solutions For CSIT 161 Final Exam

Verified Solutions For CSIT 161 Final Exam Information security is specific to securing information, whereas information systems security is focused on the security of the systems that house the information. - CORRECT ANSWER -True Software manufacturers limit their liability when selling software using which of the following - CORRECT ANSWER -End-User License Agreement (EULA) The __________ tenet of information systems security is concerned with the recovery time objective. - CORRECT ANSWER -Availability If you are a publicly traded company or U.S. federal government agency, what should you do? - CORRECT ANSWER -You must go public and announce that you have had a data breach and must inform the impacted individuals of that data breach. Organizations that require customer service representatives to access private customer data can best protect customer privacy and make it easy to access other customer data by using which of the following security controls? - CORRECT ANSWER -Blocking out customer private data details and allowing access only to the last four digits of Social Security numbers or account numbers The __________ is the weakest link in an IT infrastructure. - CORRECT ANSWER - User Domain Which of the following security controls can help mitigate malicious email attachments? - CORRECT ANSWER -Email filtering and quarantining Email attachment antivirus scanning Verifying with users that email source is reputable Holding all inbound emails with unknown attachments You can help ensure confidentiality by implementing __________. - CORRECT ANSWER -A virtual private network for remote access What is needed if you are sending confidential information within an email message through the public Internet. - CORRECT ANSWER -Encrypting email communications What helps organizations decrease risks and threats? - CORRECT ANSWER -Using security policies, standards, procedures, and guidelines A data classification standard is usually part of which policy definition? - CORRECT ANSWER -Asset protection policy