stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CIS8080 Flashcards | StudBud
Explore
/
CIS8080
CIS8080
47 terms
·
StudBud Administration
·
374 plays
Intro to Information Security
Flashcards
47 cards
F
Practice quiz
P
Host live
L
Questions
47
Answers
1
IOT stands for...
Internet Operating Time
Internet of Things
Internal Order Time
International Organization of Trades
2
What kind of cybersecurity risks can be minimized by using a Virtual Private Network (VPN)?
De-anonymization by network operators
Key-logging
Phishing attacks
Use of insecure Wi-Fi networks
3
The name of the researcher who cracked the enigma machine and is the father of the modern computer
Augusta Galileo
Issac Asimov
Issac Newton
Alan Turing
4
Which of the following four passwords is the most secure?
into*48
WTh!5Z
123456
Boat123
5
Australia regulation based on disclosure rather than criminalization
Sarbanes Oxley
CLERP 9
8th Directive
GLBA
6
What does the “https://” at the beginning of a URL denote, as opposed to “http://” (without the “s”)?
That the site is not accessible to certain computers
That information entered into the site is encrypted
That the site is the newest version available
That the site has special high definition video
7
What’s the quickest way to stop a suspected app, device, or OS from spying on you?
Drop it in the toilet
Google user reports for your device to see other people steps to stop it.
Visit Consumer Affairs or the Federal Trade Commission website for tips.
Log out of the suspected device or account and go aboutyour day.
8
What is the best way to keep employees from falling for phishing scams?
Cybersecurity awareness training.
Email filters that block suspicious attachments.
Encrypt all emails
Pop-up blockers.
9
This regulation establishes the PCAOB
Sarbanes Oxley
8th Directive
GLBA
8th Directive
10
Criminals access someone’s computer and encrypt the user’s personal files and data and demand money to decrypt. This is?
Spam
Botnet
Ransomware
War Driving
11
What is the simplest way to stop brute-force cyberattacks dead in their tracks?
Add a deadbolt lock to all entryways.
Learn Karate
Shred all paperwork containingsensitive information.
Add a few unique characters to anypassword or PIN
12
The best defense against ransomware is being proactive when you:
Back up your data regularly.
Buy Cyber Insurance
Regularly update all your devices and software with the latest patches
Keep a large number of bitcoin available
13
The theory of operating inside an opponents OODA loop was developed by
Richard Baskerville - an information systems professor
Donald Clements - a PhD student at CalTech
None of the above
John Boyd - an ace fighter pilot
14
Your new car has WiFi and Bluetooth, how can you make sure it is secure?
Nothing, it's a new car
Ask the Dealership to make sure the connection is secure.
Buy a new router for your car
Change the default username and password
15
A group of computers that is networked together and used by hackers to steal information is called a …
Rootkit
Operating System
Botnet
DDoS
16
If a public WiFi requires a password to access, it is generally considered safe to use for online banking?
True
False
17
This regulation requires providing each consumer with a privacy notice.
CLERP 9
GLBA
Sarbanes Oxley
8th Directive
18
The Sarbanes Oxley title that most greatly increased the need for better organizational information security was
Title III Corporate Responsibility
Title VIII Corporate and Criminal Fraud Accountability
Title IV Enhanced Financial Disclosures
Title XI Corporate Fraud and Accountability
19
Conducting incident response postmortem analysis is...
Baselining
Incident Closure
Ham Sandwich
Incident Containment
20
This regulation requires CEOs of publicly-traded corporations to sign corporate tax returns.
Sarbanes Oxley
HIPAA
GLBA
ISO/IEC
21
Section 404 organizations are required to disclose material information to the public on a rapid and current basis.
False
True
22
What’s the best way to secure a weak password like “monkey123”?
Add an uppercase numeral and a special character, such as $.
Use a VPN
Don’t reuse it anywhere else or share itwith anyone.
Enable two-factor authentication.
23
Under HIPAA, protected health information is
privacy and security rules.
all individually identifiable health information.
health care clearinghouses.
health care providers.
24
You’re surfing the internet when your computer notifies you that a system update is available. What should you do?
Don't ever update your computer, it's safer that way
Click the remind me later button
Click the download now button
Go to settings and install the update
25
ISP's can see the online activities of their subscribers when those subscribers are using private browsing?
False
True
26
Which one of these things will a comprehensive cyber insurance NOT protect you from?
High rates because of breaches with other companies.
The cost of paying for credit monitoring
Loss of revenue due to a breach
Poor cybersecurity hygiene and implementation.
27
ICS are considered to have high risk vulnerability when upgrades are performed or any modifications are done.
True
False
28
What are the significant reasons of adopting cloud computing in organizations?
It has enhanced security mechanisms
Provides compliance with privacy laws
Reduction in data center footprint
More reliability for storage of data
29
Which of the following is an example of a “phishing” attack?
All of these.
Sending a text that contains a malicious link disguised to look real.
A fake website that look real in order to trick users to get login info.
An email that contains a malicious link that looks like a normal email.
30
Which law launched in Europe gave greater control to users over their data?
HIPAA
GDPR
Data Protection Act (UK)
CIPP
31
Which one of these things is most effective for maintaining your digital privacy?
Encrypted cloud services.
Not sharing personal information on social media.
Long and strong passwords and two factor authentication.
End-to-end encryption.
32
The process of sorting, categorizing, and prioritizing incoming incident reports or other CSIRT requests.
Incident Containment
Baselining
Incident Closure
Triage
33
What is the safest way to connect to the internet if a trusted network is not available?
There is no safe way
Connect using a public WiFi that requires a password
Connect using your mobile device/service
Borrow someone else's computer
34
Physical Security is less important than logical security.
False
Maybe
True
35
Your laptop is having trouble connecting to campus WiFi, whom should you call?
Office of Registrar
Any CIS department professor
University help desk
Deans office
36
Turning off the GPS function of your smartphone prevents any tracking of your phone’s location.
True
False
37
To make shopping online easier to remember your passwords you should...
Use a password manager to store your passwords.
Write them on a post it note and stick to monitor
Let the browser remember your passwords for you
Use the same pasword for every site
38
The two countries suspected of creating the Stuxnet virus
Israel & Germany
Iran & Iraq
Iran & N. Korea
U.S. & Israel
39
The activities in the NIST Framework Core consist of which functions?
Protect
Detect
All of the above
Respond
40
What is the weakest link in cybersecurity?
Firewalls
Humans
Email
Policies
41
Disabling system services, accounts, network connections is...
Triage
Incident Closure
Incident Containment
Baselining
42
What is the most common delivery method for viruses?
Instant Messages
Email attachments
Portable Media
Door Handles
43
When is it ok to reuse a password?
When you have not used it for a year or more
When you are logging into social media accounts.
Never
When it is too hard to remember a long password
44
How can companies ensure regular compliance with best practices while mitigating unwanted risks?
Outsourcing important tasks to vendors
Conducting independent audits
Providing regular compliance trainings to increase user awareness
Conducting third party risk assessment
45
Which of these would be considered an "unauthorized use of data"?
Sharing PII data for users who have not 'opted out'.
Sharing user data with a third party without the users consent.
Installing a tracking cookie on a users browser.
Collecting user information with the users concent.
46
The process of following someone into a secure area without badging in is...
Sneaking
Pharming
Backdooring
Tailgating
47
Shadow IT allows end-users to bypass IT solutions and develop a customized approach to the specific task at-hand.
True
False
