Smaller firms may outsource some or many security functions to

A) ISPs.

B) MISs.

C) MSSPs.

D) CAs.

Answer: C

The development and use of methods to make computer systems resume their activities more quickly after mishaps is called

A) high availability computing.

B) recovery oriented computing.

C) fault tolerant computing.

D) disaster recovery planning.

Answer: B

In controlling network traffic to minimize slow-downs, a technology called ________ is used to examine data files and sort low-priority data from high-priority data.

A) high availability computing

B) deep-packet inspection

C) application proxy filtering

D) stateful inspection

Answer: B

For 100% availability, online transaction processing requires

A) high-capacity storage.

B) a multi-tier server network.

C) fault-tolerant computer systems.

D) dedicated phone lines.

Answer: C

Downtime refers to periods of time in which a

A) computer system is malfunctioning.

B) computer system is not operational.

C) company or organization is not operational.

D) computer is not online

Answer: B

A digital certificate system

A) uses third-party CAs to validate a user's identity.

B) uses digital signatures to validate a user's identity.

C) uses tokens to validate a user's identity.

D) is used primarily by individuals for personal correspondence.

Answer: A

In which method of encryption is a single encryption key sent to the receiver so both sender and receiver share the same key?

A) SSL

B) symmetric key encryption

C) public key encryption

D) private key encryption

Answer: B

Most antivirus software is effective against

A) only those viruses active on the Internet and through e-mail.

B) any virus.

C) any virus except those in wireless communications applications.

D) only those viruses already known when the software is written.

Answer: D

Currently, the protocols used for secure information transfer over the Internet are

A) TCP/IP and SSL.

B) S-HTTP and CA.

C) HTTP and TCP/IP.

D) SSL, TLS, and S-HTTP.

Answer: D

Which of the following is the greatest threat that employees pose to an organization's information systems?

A) forgetting passwords

B) lack of knowledge

C) entering faulty data

D) introducing software errors

Answer: B

In which technique are network communications analyzed to see whether packets are part of an ongoing dialogue between a sender and a receiver?

A) stateful inspection

B) intrusion detection system

C) application proxy filtering

D) packet filtering

Answer: A

A firewall allows the organization to

A) prevent unauthorized communication both into and out of the network.

B) monitor network hot spots for signs of intruders.

C) prevent known spyware and malware from entering the system.

D) all of the above.

Answer: A

Which of the following is not a trait used for identification in biometric systems?

A) retinal image

B) voice

C) hair color

D) face

Answer: C

An authentication token is a(n)

A) device the size of a credit card that contains access permission data.

B) type of smart card.

C) gadget that displays passcodes.

D) electronic marker attached to a digital authorization file.

Answer: C

Rigorous password systems

A) are one of the most effective security tools.

B) may hinder employee productivity.

C) are costly to implement.

D) are often disregarded by employees.

Answer: B

Which of the following is not one of the main firewall screening techniques?

A) application proxy filtering

B) static packet filtering

C) NAT

D) secure socket filtering

Answer: D

A(n) ________ system is used to identify and authorize different categories of system users and specify which portions of the organization's systems each user can access.

A) identity management

B) AUP

C) authentication

D) firewall

Answer: A

Analysis of an information system that rates the likelihood of a security incident occurring and its cost is included in a(n)

A) security policy.

B) AUP.

C) risk assessment.

D) business impact analysis.

Answer: C

______ controls ensure that valuable business data files on either disk or tape are not subject to unauthorized access, change, or destruction while they are in use or in storage.

A) Software

B) Administrative

C) Data security

D) Implementation

Answer: C

Application controls

A) can be classified as input controls, processing controls, and output controls.

B) govern the design, security, and use of computer programs and the security of data files in general throughout the organization.

C) apply to all computerized applications and consist of a combination of hardware, software, and manual procedures that create an overall control environment.

D) include software controls, computer operations controls, and implementation controls.

Answer: A