Topic 9- 12 : User Access - Application Control

Which approach provides the best outcome for software control?

• Application only

• Database control only

• Operating system only

• All three in combination

What is a common issue with poorly configured security packages?

• They don't require maintenance

• They allow high user functionality

• They may cause more harm than good

• They require minimal specialist knowledge

ISO 27002 recommends which control for database access?

• Unrestricted user access

• Asset or data ownership only

• Isolating critical systems

• Unlimited privileges for all users

Which of the following is NOT a function of the NIST Cyber Security Framework?

• Identifying incidents

• Limiting incident damage

• Ensuring data redundancy

• Restoring capabilities

Which control method is recommended by ISO 27002 for application input validation?

• Buffer Overflow Management

• Batch, Balancing, and Integrity checks

• Only Batch processing

• Selective Application Logs

Which protocol ensures a secure internet connection and prevents data modification?

• IPSec

• SSL

• S/MIME

• SMTP

What is the primary issue with social engineering attacks in e-commerce?

• It increases site traffic

• It leverages insider information

• It uses knowledge from the internet

• It requires face-to-face interaction

Which ISO standard is relevant to e-commerce security and internet use?

• ISO 9001

• ISO 27001

• ISO 14000

• ISO 31000

How does IPSec contribute to secure e-commerce?

• It provides SSL certificates

• It authenticates payment transactions

• It encrypts IP packets and authenticates their source

• It monitors data streams

Which aspect is NOT covered in an organization's acceptable internet usage policy?

• Allowed download activities

• Privacy and monitoring rules

• Staff salaries

• Consequences for policy breaches