Chapter 7
1) ________ refers to policies, procedures, and technical measures used to prevent unauthorized access, alternation, theft, or physical
damage to information systems.
A) "Security" B) "Controls"
C) "Benchmarking" D) "Algorithms"
2) ________ refers to all of the methods, policies, and organizational procedures that ensure the safety of the organization's assets, the
accuracy and reliability of its accounting records, and operational adherence to management standards.
A) "Legacy systems" B) "SSID standards"
C) "Vulnerabilities" D) "Controls"
3) Large amounts of data stored in electronic form are ________ than the same data in manual form.
A) less vulnerable to damage
B) more secure
C) vulnerable to many more kinds of threats
D) more critical to most businesses
4) Electronic data are more susceptible 흔흔흔흔 흔흔 to destruction, fraud, error, and misuse because information systems concentrate data in
computer files that:
A) are usually bound up in legacy systems that are difficult to access and difficult to correct in case of error.
B) are not secure because the technology to secure them did not exist at the time the files were created.
C) have the potential to be accessed by large numbers of people and by groups outside of the organization.
D) are frequently available on the Internet.
5) Specific security challenges that threaten the communications lines in a client/server environment include:
A) tapping; sniffing; message alteration; radiation.
B) hacking; vandalism; denial of service attacks.
C) theft, copying, alteration of data; hardware or software failure.
D) unauthorized access; errors; spyware.
6) Specific security challenges that threaten clients in a client/server environment include:
A) tapping; sniffing; message alteration; radiation.
B) hacking; vandalism; denial of service attacks.
C) theft, copying, alteration of data; hardware or software failure.
D) unauthorized access; errors; spyware.
7) Specific security challenges that threaten corporate servers in a client/server environment include:
A) tapping; sniffing; message alteration; radiation.
B) hacking; vandalism; denial of service attacks.
C) theft, copying, alteration of data; hardware or software failure.
D) unauthorized access; errors; spyware.
8) The Internet poses specific security problems because:
A) it was designed to be easily accessible.
B) Internet data is not run over secure lines.
C) Internet standards are universal.
D) it changes so rapidly.
9) Which of the following statements about the Internet security is not true?
A) The use of P2P networks can expose a corporate computer to outsiders.
B) A corporate network without access to the Internet is more secure than one provides access.
C) VoIP is more secure than the switched voice network.
D) Instant messaging can provide hackers access to an otherwise secure network.
10) An independent computer program that copies itself from one computer to another over a network is called a:
A) worm. B) Trojan horse.
C) bug. D) pest.
11) A salesperson clicks repeatedly on the online ads of a competitor's in order to drive the competitor's advertising costs up. This is an
example of:
A) phishing. B) pharming.
, C) spoofing. D) click fraud.
12) In 2004, ICQ users were enticed by a sales message from a supposed anti-virus vendor. On the vendor’s site, a small program
called Mitglieder was downloaded to the user’s machine. The program enabled outsiders to infiltrate the user’s machine. What type of
malware is this an example of?
A) Trojan horse B) Virus
C) Worm D) Spyware
13) Redirecting a Web link to a different address is a form of:
A) snooping. B) spoofing.
C) sniffing. D) war driving.
14) A keylogger is a type of:
A) worm. B) Trojan horse.
C) virus. D) spyware.
15) Hackers create a botnet by:
A) infecting Web search bots with malware.
B) by using Web search bots to infect other computers.
C) by causing other people’s computers to become “zombie” PCs following a master computer.
D) by infecting corporate servers with “zombie” Trojan horses that allow undetected access through a back door.
16) Using numerous computers to inundate and overwhelm the network from numerous launch points is called a ________ attack.
A) DDoS B) DoS
C) SQL injection D) phishing
17) Which of the following is not an example of a computer used as a target of crime?
A) Knowingly accessing a protected computer to commit fraud
B) Accessing a computer system without authority
C) Illegally accessing stored electronic communication
D) Threatening to cause damage to a protected computer
18) Which of the following is not an example of a computer used as an instrument of crime?
A) Theft of trade secrets
B) Intentionally attempting to intercept electronic communication
C) Unauthorized copying of software
D) Breaching the confidentiality of protected computerized data
19) Phishing is a form of:
A) spoofing. B) logging.
C) sniffing. D) driving.
20) An example of phishing is:
A) setting up a bogus Wi-Fi hot spots.
B) setting up a fake medical Web site that asks users for confidential information.
C) pretending to be a utility company's employee in order to garner information from that company about their security system.
D) Sending bulk e-mail that asks for financial aid under a false pretext.
21) Evil twins are:
A) Trojan horses that appears to the user to be a legitimate commercial software application.
B) e-mail messages that mimic the e-mail messages of a legitimate business.
C) fraudulent Web sites that mimic a legitimate business’s Web site.
D) bogus wireless network access points that look legitimate to users.
22) Pharming involves:
A) redirecting users to a fraudulent Web site even when the user has typed in the correct address in the Web browser.
B) pretending to be a legitimate business’s representative in order to garner information about a security system.
C) setting up fake Web sites to ask users for confidential information.
D) using e-mails for threats or harassment.
23) You have been hired as a security consultant for a law firm. Which of the following constitutes the greatest source of security
threats to the firm?
1) ________ refers to policies, procedures, and technical measures used to prevent unauthorized access, alternation, theft, or physical
damage to information systems.
A) "Security" B) "Controls"
C) "Benchmarking" D) "Algorithms"
2) ________ refers to all of the methods, policies, and organizational procedures that ensure the safety of the organization's assets, the
accuracy and reliability of its accounting records, and operational adherence to management standards.
A) "Legacy systems" B) "SSID standards"
C) "Vulnerabilities" D) "Controls"
3) Large amounts of data stored in electronic form are ________ than the same data in manual form.
A) less vulnerable to damage
B) more secure
C) vulnerable to many more kinds of threats
D) more critical to most businesses
4) Electronic data are more susceptible 흔흔흔흔 흔흔 to destruction, fraud, error, and misuse because information systems concentrate data in
computer files that:
A) are usually bound up in legacy systems that are difficult to access and difficult to correct in case of error.
B) are not secure because the technology to secure them did not exist at the time the files were created.
C) have the potential to be accessed by large numbers of people and by groups outside of the organization.
D) are frequently available on the Internet.
5) Specific security challenges that threaten the communications lines in a client/server environment include:
A) tapping; sniffing; message alteration; radiation.
B) hacking; vandalism; denial of service attacks.
C) theft, copying, alteration of data; hardware or software failure.
D) unauthorized access; errors; spyware.
6) Specific security challenges that threaten clients in a client/server environment include:
A) tapping; sniffing; message alteration; radiation.
B) hacking; vandalism; denial of service attacks.
C) theft, copying, alteration of data; hardware or software failure.
D) unauthorized access; errors; spyware.
7) Specific security challenges that threaten corporate servers in a client/server environment include:
A) tapping; sniffing; message alteration; radiation.
B) hacking; vandalism; denial of service attacks.
C) theft, copying, alteration of data; hardware or software failure.
D) unauthorized access; errors; spyware.
8) The Internet poses specific security problems because:
A) it was designed to be easily accessible.
B) Internet data is not run over secure lines.
C) Internet standards are universal.
D) it changes so rapidly.
9) Which of the following statements about the Internet security is not true?
A) The use of P2P networks can expose a corporate computer to outsiders.
B) A corporate network without access to the Internet is more secure than one provides access.
C) VoIP is more secure than the switched voice network.
D) Instant messaging can provide hackers access to an otherwise secure network.
10) An independent computer program that copies itself from one computer to another over a network is called a:
A) worm. B) Trojan horse.
C) bug. D) pest.
11) A salesperson clicks repeatedly on the online ads of a competitor's in order to drive the competitor's advertising costs up. This is an
example of:
A) phishing. B) pharming.
, C) spoofing. D) click fraud.
12) In 2004, ICQ users were enticed by a sales message from a supposed anti-virus vendor. On the vendor’s site, a small program
called Mitglieder was downloaded to the user’s machine. The program enabled outsiders to infiltrate the user’s machine. What type of
malware is this an example of?
A) Trojan horse B) Virus
C) Worm D) Spyware
13) Redirecting a Web link to a different address is a form of:
A) snooping. B) spoofing.
C) sniffing. D) war driving.
14) A keylogger is a type of:
A) worm. B) Trojan horse.
C) virus. D) spyware.
15) Hackers create a botnet by:
A) infecting Web search bots with malware.
B) by using Web search bots to infect other computers.
C) by causing other people’s computers to become “zombie” PCs following a master computer.
D) by infecting corporate servers with “zombie” Trojan horses that allow undetected access through a back door.
16) Using numerous computers to inundate and overwhelm the network from numerous launch points is called a ________ attack.
A) DDoS B) DoS
C) SQL injection D) phishing
17) Which of the following is not an example of a computer used as a target of crime?
A) Knowingly accessing a protected computer to commit fraud
B) Accessing a computer system without authority
C) Illegally accessing stored electronic communication
D) Threatening to cause damage to a protected computer
18) Which of the following is not an example of a computer used as an instrument of crime?
A) Theft of trade secrets
B) Intentionally attempting to intercept electronic communication
C) Unauthorized copying of software
D) Breaching the confidentiality of protected computerized data
19) Phishing is a form of:
A) spoofing. B) logging.
C) sniffing. D) driving.
20) An example of phishing is:
A) setting up a bogus Wi-Fi hot spots.
B) setting up a fake medical Web site that asks users for confidential information.
C) pretending to be a utility company's employee in order to garner information from that company about their security system.
D) Sending bulk e-mail that asks for financial aid under a false pretext.
21) Evil twins are:
A) Trojan horses that appears to the user to be a legitimate commercial software application.
B) e-mail messages that mimic the e-mail messages of a legitimate business.
C) fraudulent Web sites that mimic a legitimate business’s Web site.
D) bogus wireless network access points that look legitimate to users.
22) Pharming involves:
A) redirecting users to a fraudulent Web site even when the user has typed in the correct address in the Web browser.
B) pretending to be a legitimate business’s representative in order to garner information about a security system.
C) setting up fake Web sites to ask users for confidential information.
D) using e-mails for threats or harassment.
23) You have been hired as a security consultant for a law firm. Which of the following constitutes the greatest source of security
threats to the firm?
