CISA 3358 Final Exam Review

This refers to one’s personal beliefs about right and wrong.

During this test, trained users test the IS to verify that it can complete required tasks in the real-world.

This is the act of fraudulently using email to try to get the recipient to reveal personal data.

A set of programs enabling its user to gain admin-level access to a computer without the user’s consent or knowledge.

Tacit knowledge is the knowledge that is documented, stored, and codified, like standards and procedures.

Planning begins with identifying and analyzing key issues facing an organization & setting strategies to address them.

What does COPPA stand for?

A network attack when an intruder gains access to a network & stays undetected with the plan of stealing data over time.

This is a code that states the principles & core values that are essential to a set of people and govern their behavior.

Smashing is the sending of sexually explicit texts and/or photos.

This act was passed by Congress in October 1998 and was directed at Web sites catering to children.

This type of testing involves linking individual components together and testing them as a group to uncover any defects.

A business policy that permits, and in some cases encourages, employees, to use their own mobile devices.

A multiphase strategic planning process begins with a situation analysis to identify an organization's SWOT.

This plan is a documented process to recover an organization’s information system assets in the event of a disaster.

What does CAPTCHA stand for?

This is the process of determining whether laws or regulations may prevent or limit a system development project.

What does CAN-SPAM stand for?

Tacit knowledge is the know-how that someone has developed as a result of personal experience.

This/these is a system of rules that tells us what we can and cannot do. They are enforced by a set of institutions.

Network of physical objects or “things” embedded with sensors and network connectivity enabling them to exchange data.

This involves the deployment of malware that secretly steals data in the computer systems of organizations.

Planning that defines the organization’s vision and values and then identifies projects and initiatives to achieve it.

This examines whether a project is feasible within the current limits of available technology.

This determines whether the expected benefits associated with the project outweigh the expected costs sufficiently.

This term describes standards or codes of behavior expected of an individual by a group to which an individual belongs.

Act states it's legal to spam if, spammers don't disguise their identity, email includes a label, & email must allow out

The intimidation of the government or civilian population using technology to disable critical national infrastructure.

This is a variation of phishing in which the phisher sends fraudulent emails to a certain organization’s employees.

The process of determining how a system will be accepted by people and meet various system performance expectations.

Net neutrality is the expansion of the services sector & emergence of new information technologies.

This is the ability to mimic or duplicate the functions of the human brain.

The Fourth Amendment protects individuals against unreasonable searches & seizures & requires that warrants be issued.

This is the process of determining whether a project can be completed within the desired time frame.

The type of testing that evaluates the performance of the IS under varying work volume & operating conditions.