Chapter 8 Quiz II

________ controls formalize standards, rules, procedures, and control disciplines to ensure that the organization's general and application controls are properly executed and enforced.

• Implementation

• Software

• Input

• Administrative

• Data security

Which of the following statements about passwords is not true?

• A user's actions with respect to passwords can compromise security.

• Passwords can be sniffed when being transmitted over a network.

• Authentication cannot be established by the use of a password.

• Passwords can be stolen through social engineering.

• Password systems that are too rigorous may hinder employee productivity.

Which of the following statements about blockchain is not true?

• Each block in a blockchain is connected to all the blocks before and after it.

• Blockchain is vulnerable in some of the same ways as conventional, centralized record-keeping systems.

• Once recorded, a blockchain transaction cannot be changed.

• The data represented in a blockchain is maintained in a central database. 

• The records in a blockchain are secured through cryptography.

Comprehensive security management products, with tools for firewalls, VPNs, intrusion detection systems, and more, are called ________ systems.

• DPI

• PKI

• UTM

• NSP

• MSSP

A NAT conceals the IP addresses of the organization's internal host computer(s) to prevent sniffer programs outside the firewall from ascertaining them and using that information to penetrate internal systems.

• True

• False

Public key encryption uses one key.

• True

• False

Symmetric encryption is more secure than public key encryption.

• True

• False

In cloud computing, accountability and responsibility for protection of sensitive data resides with the company owning the data.

• True

• False

Digital resiliency focuses solely on the resiliency of the IT function.

• True

• False

Authentication refers to verifying that people are who they claim to be.

• True

• False