Accounting Chapter 11 2 Which of the following firewalls destroys suspicious messages

5) Which domain covers security for the electrical transmission of data through analog or digital

transmission media?

A) Security architecture and design

B) Telecommunications

C) Application security

D) Cryptography

6) Which of the following is NOT a network access point?

A) Keyboard

B) Bridge

C) Computer

D) Router

7) Which of the following firewalls destroys suspicious messages?

A) Low-level security firewall

B) Medium-level security firewall

C) High-level security firewall

D) Proxy firewall

8) Which access control threat uses programs or devices that examine traffic on the enterprise

network?

A) Network sniffers

B) Phishing

C) Identify theft

D) Spoofing at log-on

9) The company where you work is opening offices in another state. Because the manager of the

new office is determined to keep costs down, she does not want to purchase additional firewall

software for the routers and bridges being installed behind the corporate firewall. The IT

department has asked you for help. Prepare a memo explaining the need for additional firewalls.

10) What is a honeypot and why is it used?

1) A ________ is a hardware device containing a password generator protocol that creates a new

password each time the token is used.

2) Which access control threat are programs or devices that examine traffic on the enterprise

network?

A) Password attack

B) Network sniffer

C) Identify theft

D) Spoofing at log-on

3) Which authentication method involves analyzing the user’s retina?

A) Single sign-on

B) Biometrics

C) Token device

D) Dynamic password

4) List and define five access control threats.

1) ________ controls ensure that reports and messages reach intended recipients.

2) Operations security refers to

A) Security for access to the enterprise system, including computers, networks, routers, and

databases

B) Security for telecommunications, networks, and the Internet

C) The physical security of information technology components, such as hardware and software

D) Activities and procedures required to keep information technology running securely

3) IT security management responsibility includes

A) Developing contingency plans for virus attacks

B) Input/output controls

C) Maintaining security devices and software

D) Training to all employees to inform and educate them regarding security policies and

procedures

1) Physical security frameworks are useful to provide guidance on how to secure the physical

facilities, grounds, and IT assets.

2) The physical and environmental security domain addresses

A) Activities and procedures required to keep information technology running securely

B) The physical security of information technology components, such as hardware and software

C) Security for telecommunications, networks, and the Internet

D) Security for access to the enterprise system, including computers, networks, routers, and

databases

3) Which of the following is NOT considered a deterrent to the physical access to corporate

offices?

A) GPS tracking

B) Locked doors

C) Fences

D) Cameras

4) What is the purpose of a physical security framework? Provide examples of physical security.

1) A user with specialized knowledge cannot use partial database access to gain full access to a

database.

2) ________ are tiny pieces of programming code that install themselves on an infected

computer called a Zombie.

Match the malware with the appropriate definition.

A) Code is disguised as a legitimate program, that can be downloaded and installed by users

without realizing it is malware

B) A relatively small program that infects other application software by attaching to it and

disrupting application function

C) Tiny piece(s) of programming code that install themselves on the infected computer called a

Zombie

D) Similar to a virus except it does not need a host application to function or reproduce

E) Software executes when a specified event happens within the computer

3) Viruses

Diff: 2