CISA 3358 Final Exam Review

What does CAN-SPAM stand for?

This/these is a system of rules that tells us what we can and cannot do. They are enforced by a set of institutions.

Network of physical objects or “things” embedded with sensors and network connectivity enabling them to exchange data.

A network attack when an intruder gains access to a network & stays undetected with the plan of stealing data over time.

The intimidation of the government or civilian population using technology to disable critical national infrastructure.

This plan is a documented process to recover an organization’s information system assets in the event of a disaster.

A multiphase strategic planning process begins with a situation analysis to identify an organization's SWOT.

This involves the deployment of malware that secretly steals data in the computer systems of organizations.

This is the process of determining whether laws or regulations may prevent or limit a system development project.

A set of programs enabling its user to gain admin-level access to a computer without the user’s consent or knowledge.

This is the ability to mimic or duplicate the functions of the human brain.

What does CAPTCHA stand for?

During this test, trained users test the IS to verify that it can complete required tasks in the real-world.

The process of determining how a system will be accepted by people and meet various system performance expectations.

This is a variation of phishing in which the phisher sends fraudulent emails to a certain organization’s employees.

This is a code that states the principles & core values that are essential to a set of people and govern their behavior.

Tacit knowledge is the knowledge that is documented, stored, and codified, like standards and procedures.

A business policy that permits, and in some cases encourages, employees, to use their own mobile devices.

This examines whether a project is feasible within the current limits of available technology.

Tacit knowledge is the know-how that someone has developed as a result of personal experience.

This refers to one’s personal beliefs about right and wrong.

The type of testing that evaluates the performance of the IS under varying work volume & operating conditions.

What does COPPA stand for?

This type of testing involves linking individual components together and testing them as a group to uncover any defects.

This determines whether the expected benefits associated with the project outweigh the expected costs sufficiently.

Net neutrality is the expansion of the services sector & emergence of new information technologies.

This is the process of determining whether a project can be completed within the desired time frame.

This is the act of fraudulently using email to try to get the recipient to reveal personal data.

This term describes standards or codes of behavior expected of an individual by a group to which an individual belongs.

Smashing is the sending of sexually explicit texts and/or photos.

Planning begins with identifying and analyzing key issues facing an organization & setting strategies to address them.

The Fourth Amendment protects individuals against unreasonable searches & seizures & requires that warrants be issued.

Planning that defines the organization’s vision and values and then identifies projects and initiatives to achieve it.

This act was passed by Congress in October 1998 and was directed at Web sites catering to children.

Act states it's legal to spam if, spammers don't disguise their identity, email includes a label, & email must allow out