Diagnostic Test - Information Security and Technology Risk

The following statements best illustrate the difference between information security and data privacy, except:

• Information security is company facing

• Data privacy is people facing

• Information security and data privacy have pertinent laws

• Information security and data privacy is both monitored by an IT professional

The following are tenets of Information Security, except ________________

• Confidentiality

• Integrity

• Availability

• Documentation

It is the art of manipulating people so they give up confidential information.

• Smishing

• Pretexting

• Pharming

• Social Engineering

It is an attack that uses disguised email as a weapon.

• Phishing

• Pharming

• Scam

• Spam

It is a form of social engineering in which an attacker tries to convince a victim to give up valuable information or access to a service or system.

• Pharming

• Pretexting

• Phishing

• Smishing

It is a form of online fraud involving malicious code and fraudulent websites.

• Pharming

• Smishing

• Phishing

• Pretexting

Having antivirus and firewall can protect you from attackers.

• Absolutely true

• Antivirus alone can protect you from attackers

• Firewall alone can protect you from attackers

• Antivirus and firewalls can be bypassed

It is a piece of code which is capable of copying itself and typically has a detrimental effect, such as corrupting the system or destroying data.

• Virus

• Fungi

• Hacking

• Passcode

You will always need technology to combat cyber security risks

• Absolutely, Yes!

• You need to have proper technology tools

• You need to know how to use your tools

• You don't always need technology to secure yourself

All information security incidents must first be reported to:

• Your immediate supervisor

• Your division head

• The information security officer

• The IT security officer