Intellectual property is defined as “the creation, ownership, and control of ideas as well as the representation of those ideas.” ______

The ______ hijacking attack uses IP spoofing to enable an attacker to impersonate another entity on the network.

When voltage levels lag (experience a momentary increase), the extra voltage can severely damage or destroy equipment. ______

Suppose an act of theft performed by a hacker was accompanied by defacement actions to delay discovery. The first act is obviously in the category of “theft” but the second act is another category—in this case it is a “force of nature.”

Information security’s primary mission is to ensure that systems and their contents retain their confidentiality at any cost.

The malicious code attack includes the execution of viruses, worms, Trojan horses, and active Web scripts with the intent to destroy or steal information. ______

Software code known as a(n) cookie can allow an attacker to track a victim's activity on Web sites. ______

When information gatherers employ techniques that cross a legal or ethical threshold, they are conducting ______.

Cyberterrorists hack systems to conduct terrorist activities via network or Internet pathways. ______

Web hosting services are usually arranged with an agreement defining minimum service levels known as a(n) ____.

______ are malware programs that hide their true nature and reveal their designed behavior only when activated.

A device (or a software program on a computer) that can monitor data traveling on a network is known as a socket sniffer. ______

______ are compromised systems that are directed remotely (usually by a transmitted command) by the attacker to participate in an attack.

Much human error or failure can be prevented with effective training and ongoing awareness activities.

Microsoft acknowledged that if you type a res:// URL (a Microsoft-devised type of URL) longer than ______ characters in Internet Explorer 4.0, the browser will crash.

One form of e-mail attack that is also a DoS attack is called a mail spoof, in which an attacker overwhelms the receiver with excessive quantities of e-mail. ______

Which of the following is an example of a Trojan horse program?

A number of technical mechanisms—digital watermarks and embedded code, copyright codes, and even the intentional placement of bad sectors on software media—have been used to deter or prevent the theft of software intellectual property.

Hackers are “persons who access systems and information without authorization and often illegally.” ______

Within security perimeters the organization can establish security redundancies, each with differing levels of security, between which traffic must be screened. _____

The global information security community has universally agreed with the justification for the code of practices as identified in the ISO/IEC 17799.

The security framework is a more detailed version of the security blueprint.

The ISSP is a plan which sets out the requirements that must be met by the information security blueprint or framework.

In early 2014, in response to Executive Order 13636, NIST published the Cybersecurity Framework, which intends to allow organizations to _____.

To remain viable, security policies must have a responsible manager, a schedule of reviews, a method for making recommendations for reviews, and a policy issuance and revision date. _____

Systems-specific security policies are organizational policies that provide detailed, targeted guidance to instruct all members of the organization in the use of a resource, such as one of its processes or technologies. _____

A policy should state that if employees violate a company policy or any law using company technologies, the company will protect them, and the company will provide for the employee's legal defense.

To remain viable, security policies must have a responsible individual, a schedule of reviews, a method for making recommendations for reviews, and policy issuance and planned revision dates.

_____often function as standards or procedures to be used when configuring or maintaining systems.

The goals of information security governance include all but which of the following?

NIST 800-14's Principles for Securing Information Technology Systems can be used to make sure the needed key elements of a successful effort are factored into the design of an information security program and to produce a blueprint for an effective security architecture.

The SETA program is a control measure designed to reduce the instances of _____ security breaches by employees.

_____ controls cover security processes that are designed by strategic planners and implemented by the security administration of the organization.

The stated purpose of ISO/IEC 27002 is to offer guidelines and voluntary directions for information security management. _____

Technical controls are the tactical and technical implementations of security in the organization. _____

The key components of the security perimeter include firewalls, DMZs (demilitarized zones), Web servers, and IDPSs. _____