IMS657 EXERCISE 18 JUNE 2024 (20242)

The information security function in an organization safeguards its technology operations.

• True

• False

Script kiddies are extremely talented individuals who usually devote lots of time and energy to attempting to break into other people’s information systems.

• True

• False

Organizations can use dictionaries to regulate password selection during the reset process and thus guard against easy-to-guess passwords.

• True

• False

Which of the following functions does information security perform for an organization?

• Protecting the data the organization collects and uses.

• Protecting the organization’s ability to function.

• Enabling the safe operation of applications implemented on the organization’s IT systems.

• All of the above.

____ is one form of e-mail attack that is also a DoS attack is called a mail spoof, in which an attacker overwhelms the receiver with excessive quantities of e-mail.

• Backdoor attack

• E-Mail attack

• False - bomb

• SQL injection

____ is a computer assets are the focus of information security and are the information that has value to the

organization, as well as the systems that store, process, and transmit the information.

• False - Data

• False - Information

• False - Alarm

• False - Security

Hackers can be generalized into two skill groups: expert and ____.

• packet monkey

• journeyman

• professional

• novice

The upper management of an organization must structure the IT and information security functions to defend the organization’s information assets.

• True

• False

Risk identification is the application of control that reduce the risks to an organization’s information assets to an acceptable level.

• True

• False

Some people search trash and recycling bins—a practice known as ____ — to retrieve information that could embarrass a company or compromise information security.

• corporate espionage

• shoulder surfing

• dumpster diving

• cracker