A well-implemented ethics and compliance program and a strong ethical culture can lead to:

less pressure on employees to misbehave.

identifies the concept that an organization should act ethically by taking accountability for the impact of its action

Corporate social responsibility

Title I of which of the following acts extends the protections offered under the Wiretap Act to electronic communication

Electronic Communications Privacy Act

Which act presumes that a student's records are private & not available to the public without the consent of the student

Family Educational Rights and Privacy Act

The California State Court in Pre-Paid Legal v. Sturtz et al. set a legal precedent that refined the criteria courts

subpoenas requesting the identity of anonymous Web posters

Many organizations outsource their network security operations to a company that monitors, manages, maintains computer

managed security service provider

Which trade group protects the intellectual property of members& advocates a legal &regulatory environment that benefits

Software & Information Industry Association (SIIA)

Which act bars the export of data to countries that do not have data privacy protection standards comparable to those

European Union Data Protection Directive

studbud

CIS3250 Ch. 1 - 5

100 termsStudBud Administration2 plays

Imported from external platform

Flashcards100 cardsFPractice quizPHost liveL

Questions 100

Answers

1
Multinational and global organizations must not present a consistent face to their shareholders, customers, supplier but
False
True
2
Although the Constitution does not contain the word privacy, the U.S. Supreme Court has ruled that the concept of privac
Health Insurance Portability and Accountability Act
Gramm-Leach-Bliley Act
Bill of Rights
Fair Credit Reporting Act
3
What viruses have become a common & easily created form of malware that are created using apps such as Visual Basic/VBC
Zombies
Trojan horses
Logic bombs
Macro viruses
4
The cost of a data breach can be quite expensive, by some estimates nearly $200 for each record lost.
False
True
5
Which of the following is an act that repealed a depression-era law known as Glass-Steagall?
Health Insurance Portability and Accountability Act
Electronic Communications Privacy Act
Fair Credit Reporting Act
Gramm-Leach-Bliley Act
6
Which of the following positions provides an organization with vision and leadership in the area of business conduct?
spiritual leader
corporate ethics officer
disturbance handler
disseminator
7
Intimidation of govmt or civilian population by using information technology to disable critical national infrastructure
cyberterrorism
whistleblowing
cyberespionage
hacktivism
8
With URL filtering, a particular URL/domain name is identified as an objectionable site&the user is not allowed access
True
False
9
A well-implemented ethics and compliance program and a strong ethical culture can lead to:
less comfort for employees reporting misconduct.
more negative views on the organization.
less pressure on employees to misbehave.
more fear of retaliation by management.
10
A discrepancy between employee's own values and an organization's actions:
Fosters poor performance.
creates high morale.
encourages employee commitment.
increases employee involvement.
11
Consistency means that shareholders, customers, suppliers, and the community know what they can expect of an org.
False
True
12
Employees & contract workers must be educated about the importance of security that they will be motivated to understand
False
True
13
Members of the internal audit team must be expert in detecting and investigating financial statement fraud.
True
False
14
identifies the concept that an organization should act ethically by taking accountability for the impact of its action
Corporate sustainability
Corporate governance
Corporate social responsibility
Corporate social entrepreneurship
15
Anonymity on the Internet is practically guaranteed.
True
False
16
Title I of which of the following acts extends the protections offered under the Wiretap Act to electronic communication
Foreign Intelligence Surveillance Act
Electronic Communications Privacy Act
Communications Assistance for Law Enforcement Act
USA PATRIOT Act
17
__ defined as not doing something that a reasonable person would do or doing something that a reasonable person would
professional malpractice
breach of the duty of care
software piracy
negligence
18
Which enables remote users to securely access an organization's collection of computing and storage devices&share data
virtual private network
social network
intrusion detection device
firewall
19
Anonymous political expression played an important role in the early formation of the United States.
False
True
20
Which act presumes that a student's records are private & not available to the public without the consent of the student
Children's Online Privacy Protection Act
Family Educational Rights and Privacy Act
American Recovery and Reinvestment Act
Health Insurance Portability and Accountability Act
21
The fundamental problem with trying to detect a rootkit is that the operating system cannot be trusted to provide which?
valid test results
correct system login ids
sufficient memory for operations
the correct date and time
22
The California State Court in Pre-Paid Legal v. Sturtz et al. set a legal precedent that refined the criteria courts
Internet filtering within public libraries
identification of hate speech
subpoenas requesting the identity of anonymous Web posters
determination of obscene material
23
The piracy rate is nearly 80 percent across which continent?
Africa
Europe
North America
Asia
24
When it comes to distinguishing between bribes & gifts the perceptions of the donor and recipient almost always coincide
False
True
25
Ideally, the corporate ethics officer should be a well respected, senior-level manager who reports directly to the CEO.
True
False
26
Each violation of the provisions of the Controlling the Assault of Non-Solicited Pornography and Marketing (CAN-SPAM)Act
False
True
27
Many organizations outsource their network security operations to a company that monitors, manages, maintains computer
security dashboard
managed security service provider
computer forensics
product lifecycle management
28
After virus eradication, you can use a previous backup to restore an infected computer.
False
True
29
Most people have developed a decision-making process they use almost automatically, without thinking about the steps
False
True
30
Despite the importance of which of the following in early America, it took nearly 200 years for the Supreme Court to ren
freedom
rights
privacy
anonymity
31
The Supreme Court has held that obscene speech and which of the following are not protected by the First Amendment and
audition
defamation
declaration
demarcation
32
Legal acts conform to what an individual believes to be the right thing to do.
False
True
33
A set of beliefs about right and wrong behavior within a society is known as which of the following?
Moral Code
Vices and Virtues
Ethics
Law
34
In the process of implementing the decision what plan must defined to explain to people how they will move from the old
Implementation
Transition
Evaluation
Back up
35
Which trade group protects the intellectual property of members& advocates a legal &regulatory environment that benefits
Institute of Electrical and Electronics Engineers (IEEE)
Association for Computing Machinery (ACM)
SysAdmin, Audit, Network, Security (SANS) Institute
Software & Information Industry Association (SIIA)
36
There is virtually no way to limit the deposit of cookies on a user's hard drive.
True
False
37
Which act enables the public to gain access to certain government records?
Fair Information Practices Act
USA PATRIOT Act
Freedom of Information Act
Privacy Act
38
Laws provide a complete guide to ethical behavior.
True
False
39
To extend to all people the same respect & consideration that you expect from them is considered which of the following
Ethics
Integrity
Morality
Consistency
40
Which of the following can provide a virtually untraceable level of anonymity to email messages?
Podcasts
Web mail servers
Relay servers
Remailers
41
The internal audit dept includes members of the board of directors who determine that the internal systems and controls
True
False
42
From legal perspective, there is both a reasonable person standard & a reason prof. standard to decide whether parties
False
True
43
Title III of the Wiretap Act allows state and federal law enforcement officials to use wiretapping without requiring
True
False
44
A type of computer crime perpetrator whose primary motive is to achieve financial gain is known as which of the followin
industrial spy
black hat hacker
hacktivist
cybercriminal
45
The Gramm-Leach-Bliley Act includes 3 key rules: financial privacy rule, safeguards rule, and pretexting
False
True
46
Which act bars the export of data to countries that do not have data privacy protection standards comparable to those
European Union Data Protection Directive
Freedom of Information Act
Fair Credit Reporting Act
Fair Information Protection Act
47
A U.S. citizen who posts material on the Web that is illegal in a foreign country cannot be prosecuted in that country.
True
False
48
Whenever possible, automated system rules should mirror an organization's written policies.
True
False
49
Established in 1980, The Org for Economic Co-operation and Development's created which of the following
transborder data flow principles
BBB online data protection guidelines
fair information practices
European Union Data Protection Directives
50
The Health Insurance Portability and Accountability Act requires healthcare providers to obtain which of the following
written consent
a social security number
a second opinion
payment for all services rendered
51
There is a potential conflict of interest when IT consultants or auditors recommend their own products and services
False
True
52
Vendor certifications require passing a written exam, which usually contains MultiChoice questions bc of legal concerns
False
True
53
In malpractice lawsuits, many courts have ruled that IT workers are not liable for malpractice because they:
do not belong to a professional organization.
fail to breach a duty of care.
do not meet the legal definition of a professional.
are not certified.
54
Compliance means to be in conformance with a profession's core body of knowledge.
False
True
55
A statement that highlights an organization's key ethical issues and identifies the overarching values and principles
Problem statement
mission statement
code of ethics
acceptable use policy
56
Free-speech advocates believe that purchasing adult pornographic material is illegal and wrong even for consenting adult
False
True
57
Under what circumstance might a gift be considered a bribe?
When given as a gesture of friendship
The gift exchange is made directly from donor to recipient
The gift comes with no expectation of a future favor
When the gift has not been declared
58
Based on a 2013 National Business Ethics Survey, the % of employees who said they reported misconduct in the workplace
stayed essentially the same
increased by more than 10 percentage points from 2007 to 2009
decreased from 2011 to 2013
increased from 2011 to 2013
59
Bring your own device is a policy that permits, and in some cases encourages, employees to use their own mobile devices
False
True
60
The board of directors of an organization is normally responsible for day-to-day management and operations of the org.
True
False
61
The Fifth Amendment protects American's rights to freedom of religion and freedom of expression.
False
True
62
The posting of thousands of State Department documents on the WikiLeaks Web site is an example of which of the following
inappropriate sharing of information
breach of duty of care
inappropriate use of computing resources
negligence
63
which act did the Federal Communications Commission respond to appeals from the DOJ by requiring providers of Intern
Electronic Communications Privacy Act
USA PATRIOT Act
Foreign Intelligence Surveillance Act
Communications Assistance for Law Enforcement Act
64
Which type of attacker hacks computers or websites in an attempt to promote a political ideology?
Hackers
Industrial spies
Hacktivists
Cyberterrorists
65
A vendor certification:
has no effect on an IT worker's salary and career prospects.
doesnt require purchase of expensive training material & course instruction
may focus too narrowly on the technical details of the vendor's technology
requires vendors to pass lengthy essay exams.
66
Which type of exploit is defined as the sending of fraudulent emails to an organization's employees designed to
Smishing
Vishing
Spamdexing
Spear phishing
67
In the context of tenets of The EU Data Protection Directive, which of the following terms refers to an individual
enforcement
security
choice
notice
68
Info used in a business generally unknown to the public, that the company has taken strong measures to keep confidential
copyright
patent
Trade secret
certification
69
A trade secret is information, generally unknown to the public that a co. has taken strong measures to keep confidential
True
False
70
The cost of creating an email campaign for a product/service is typically more expensive & takes longer to conduct than
True
False
71
Which step in the decision-making process gathers and analyzes facts and also identifies stakeholders affected
Develop problem statement
Evaluate result
Implement decision
Identify alternatives
72
Fairness and generosity are examples of virtues.
False
True
73
Which occurs when a party fails to perform certain express or implied obligations, which impairs or destroys the essence
Bribery
misrepresentation
material breach of contract
fraud
74
Anti-SLAPP laws are designed to protect children from pornography.
True
False
75
In the context of the Fourth Amendment, the courts have ruled that:
recordings by the FBI of various telephone calls made by a U.S. citizen fro
without a reasonable expectation of privacy, there is no privacy right
Federal agents can listen to phone conversations of U.S. citizens without a
the Fourth Amendment is no longer valid
76
Gifts come with no expectation of a future favor for the donor.
False
True
77
Installation of a corp firewall is the least common precaution taken by businesses as it does not provide security.
True
False
78
Over the years, a number of federal, state, and local laws have been found unconstitutional because they violated one of
True
False
79
What exploit is characterized as the abuse of email systems to send unsolicited email to large numbers of people?
A botnet
Spam
Logic bombing
A Worm
80
Which of the following is the Supreme Court case that established a test to determine if material is obscene
Miller v. Texas
Miller v. Brown
Miller v. Stern
Miller v. California
81
The most common computer security precaution taken by businesses is the installation of which of the following?
emergency response team
firewall
virtual private network
rootkit
82
A bribe is a crime even if the payment was lawful under the laws of the foreign country in which it was paid.
True
False
83
Private schools may prohibit students, instructors, and other employees from engaging in offensive speech.
False
True
84
Pornography purveyors are free to produce and publish whatever they want; however, if what they distribute is judged
False
True
85
The right to freedom of expression is restricted when the expressions, whether spoken or written, are untrue and cause
True
False
86
An oral defamatory statement is called which of the following?
hate speech
slander
libel
exaggeration
87
Cyberterrorism is the intimidation of govmnt or civilian population by using information technology to disable critical
false
True
88
Although people have the right to express opinions, they must exercise care in their Internet communications
doxing
declamation
defamation
Internet censorship
89
Discovery is part of the pretrial phase of a lawsuit in which each party can obtain which of the following from the othe
patent royalties
trade secrets
competitive intelligence
evidence
90
Setting corporate social responsibility goals encourages an organization to achieve higher moral and ethical standards.
True
False
91
Which org offers a # of securityrelated policy templates that can help a organization quickly develop effective security
IEEE
Department of Homeland Security
US-CERT
SANS Institute
92
To prove fraud in a court of law, prosecutors must demonstrate that:
the wrongdoer made a false representation of material fact.
the wrongdoer did not intend to deceive the innocent party.
the innocent party never relied on the misrepresentation.
the wrongdoer was not injured
93
Under the Right to Financial Privacy Act, a financial institution can release a customer's financial records without
True
False
94
In Doe v. Holder, the courts ruled that the NSL gag provision violates which of the following?
sunset provision
Fair Information Practices Act
First Amendment
USA PATRIOT Act
95
Which of the following can be used against an anonymous defendant to reveal truths about the defendant's identity?
A John Doe lawsuit
An anti-SLAPP law
Hate speech
Internet censorship
96
Computer forensics is such a new field that there is little training or certification processes available.
False
True
97
American citizens are protected by the Fourth Amendment even when there is no reasonable expectation of privacy.
True
False
98
concepts recognizes that managers must use their judgment to ensure that the cost of control does not exceed the syst
separation of duties
reasonable assurance
competitive intelligence
risk assessment
99
Online marketers can capture personal information, such as names, addresses, and Social Security numbers without consent
True
False
100
An organization's mission statement highlights its key ethical issues and identifies the overarching values / principles
True
False

CIS3250 Ch. 1 - 5 Flashcards | StudBud