Info Systems

Part I: True/False evaluation and Multiple-choice questions (0. 5 points/each question) 1. The overarching goal of information security is to ensure data integrity, availability, and confidentiality. 2. Managing security refers to a comprehensive set of activities that develop, implement, direct, and monitor the organization’s security strategy and activities. 3. The most expensive cybercrime are computer viruses. 4. Authentication is a means of providing proof of data transmission or receipt so that the occurrence of a transaction cannot later be refused. . The trend in computer security is toward policy-based management. 6. The core challenge of security management is ___________. a)Finding the right balance between shielding the organization’s main assets from potential harm b)Enabling staff to do their jobs c)Both a) and b) 7. Which of the following hacker tricks involves launching software that monitors all traffic looking for passwords or other valuable information? a)Main-in-the middle b)Denial of service c)Trojan horse d)Network sniffing 8.

Defining security policies and then managing and enforcing those policies via security management products and services is known as _______. a)Intrusion-based management b)Policy-based management c)Incident-based management 9. To protect against spoofing, firms need a way to ____________. a)Authenticate the identity of an individual b)Repudiate the identify of an individual c)Dispute the identity of an individual 10. To protect against hacking, companies install ___________ which controls access between networks. a)Virtual private systems b)Encryption c)Firewalls