Font size
WorksheetsBM2 Unit 4 Test Review
Total questions: 110
Worksheet time: 55mins
What is the process by which an organization’s accounts and records are verified?
Audit
Decision making
Compliance
Data processing
What term refers to an organization’s ability to function after a disaster?
Outsourcing
Consistency
Business continuity
Information management
What does compliance mean?
Stability and regularity
Unauthorized access to a computer system
Acquiring assistance from outside organizations
Fulfilling the requirements of the law
What term refers to stability and regularity?
Trade secret
Consistency
Audit
Spam
What are facts and figures called?
Virus
Hack
Information
Data
What is the process of converting facts and figures into useful information?
Decision making
Wireless network
Data processing
Information overload
What term refers to choosing among alternatives?
Audit
Decision making
Proprietary information
Spam
What is unauthorized access to a computer system called?
Virus
Hack
Trade secret
Spam
What is knowledge, facts, or data presented in a useful form called?
Audit
Data
Information
Compliance
What is the process of accessing, processing, maintaining, evaluating, and disseminating knowledge, facts, or data for assisting business decision making?
Information management
Management information system
Business continuity
Outsourcing
What term refers to communication that is too much and/or comes too fast to process at one time?
Hack
Spam
Virus
Information overload
What is an integrated technology that assists with an organization’s information management needs?
Management information system (MIS)
Information management
Sarbanes-Oxley Act
Wireless network
What term refers to acquiring assistance from outside organizations/consultants to obtain goods or services?
Trade secret
Outsourcing
Compliance
Audit
What is private information that belongs to an organization and cannot be released to the public called?
Virus
Proprietary information
Trade secret
Spam
What is a computer network connected without the use of wires or cables called?
Wireless network
Hack
Management information system
Information overload
Which of the following actions is a part of information management:
Creating technology
Observing competitors
Creating data
Disseminating information
What is big data?
Large amounts of information automatically collected from electronic sources
A small set of manually collected data
Data that is only collected from physical sources
Information that is not stored electronically
What is competitive advantage?
A condition that puts a business in a favorable position over its competitors
A disadvantage that a business faces in the market
A strategy to reduce competition
A method to increase product prices
What does 'consistent' mean?
Unchanging
Changing frequently
Irregular
Unpredictable
What are cookies in the context of websites?
Text files put on a visitor’s hard drive to track internet behavior
A type of dessert
A software used to block ads
A virus that infects computers
What is a data breach?
A situation where private data is potentially viewed, stolen, or used by unauthorized individuals
A method to secure data
A process of encrypting data
A way to share data securely
What is data encryption?
The process of transforming information into a secret code so only the recipient can read it
The process of deleting data permanently
The process of sharing data publicly
The process of storing data in a cloud
What are the Fair Information Practice Principles (FIPP)?
A set of guidelines by the FTC to establish ethical practices for handling information in the electronic marketplace
A set of rules for encrypting data
A law to prevent identity theft
A policy for managing customer complaints
What is the Federal Trade Commission responsible for?
Administering and enforcing customer-protection laws
Managing data encryption standards
Creating privacy policies for businesses
Tracking internet behavior through cookies
What is identity theft?
The fraudulent acquisition and use of a person’s private identifying information for financial gain
The process of encrypting personal data
A method to protect personal information
A way to share personal data securely
What does 'integrity' mean?
Adhering to an established set of ethics and sound moral principles
Changing principles frequently
Being inconsistent in actions
Avoiding ethical practices
What is a privacy policy?
A statement that discloses how an organization will gather, use, and manage a customer’s data
A document that encrypts customer data
A law to prevent data breaches
A guideline for creating cookies
What is spam?
Junk email that the recipient did not request
A type of encrypted message
A secure way to send emails
A method to track email behavior
What does 'transparency' mean?
The quality of being just as one seems; trustworthy
Hiding information from others
Being inconsistent in actions
Changing principles frequently
Which risk might result from ethical misconduct?
decreased company value
decreased whistle-blowing
increased positive publicity
increased employee support of the company
Which risk might result from ethical misconduct?
decreased company value
decreased whistle-blowing
increased positive publicity
increased employee support of the company
To reduce the risks associated with noncompliance, a business should continuously monitor:
government regulations
competitors’ activities
judicial opinions
social etiquette
ABC Corporation makes its employees sign a noncompete agreement. This agreement states that employees who leave the company are restricted from working for a competitor for two years. The purpose of this agreement is to make sure that competitors are unable to obtain ABC Corporation's trade secrets. What type of information is ABC Corporation protecting?
business
employee
technology
management
Tim is the technology manager for the MSJ Company. He is responsible for backing up the computer system every evening to ensure the company has a copy of each day’s computer activities and transactions. On Tuesday evening, Tim was running late for a meeting and decided not to conduct the backup activities. Later that night, the computer system crashed and all of Tuesday’s computer data was lost. By apologizing to his boss for making a poor decision and offering to work extra hours to help fix the problem, Tim was:
taking the time to make informed decisions
promising not to make any mistakes in the future
blaming others for the consequences of his actions
accepting the consequences for the decisions he made
To reduce the risk of future legal problems, a company might require its business partners to sign a formal:
contract
invoice
premium
warrant
During a staff meeting, the company's president states, 'Samari Enterprises experienced a three percent increase during the first quarter and a five percent increase during the second quarter of this fiscal year.' What type of information is the president providing?
raw data
tacit knowledge
personal opinion
explicit knowledge
Which of the following best describes confidentiality in the workplace?
Allowing employees to access all information to promote transparency
Keeping trusted or sensitive information private
Selling customer data only with permission
Encrypting information on all company devices
A manager limits access to payroll files so only HR can view them. What strategy is the manager using?
Data expansion
Access control
Open-source sharing
Data mining
A business encrypts customer credit card information to prevent hackers from reading it. This is an example of protecting:
privacy
security
fairness
transparency
What type of risk is MOST likely when employees discuss coworker salaries or disciplinary actions openly?
Loss of trade secrets
Confidentiality breach
Increase in tacit knowledge
Improved morale
Which category of information includes business plans, financial data, and client lists?
Employee information
Management information
Business information
Required public information
An employee accidentally emails customer info to the wrong person. This is an example of a risk caused by:
cyberattacks
human error
transparency
system upgrades
Which tool is MOST closely associated with digital data security?
Employee evaluations
Firewalls and antivirus software
Confidentiality agreements
Customer feedback forms
A company shreds old personnel files before disposal. This practice supports:
transparency
secure data destruction
public reporting
employee morale
Why must managers protect private and confidential data?
It increases the amount of information the company collects
It is required by law and maintains trust
It guarantees no cybersecurity issues will occur
It allows employees to access personal information freely
A manager reminding employees to update passwords every 60 days is reinforcing:
informal communication
system transparency
security best practices
leadership accountability
Which type of information would MOST likely require confidentiality due to legal and ethical reasons?
Public event schedule
Employee disciplinary records
Store hours
Marketing flyer designs
A company’s confidentiality agreement requiring employees not to share trade secrets even after leaving the job is an example of:
long-term privacy rights
ongoing confidentiality obligations
temporary data protection
personal information disclosure
A manager encourages employees to report suspicious emails immediately. This supports which goal?
Increasing transparency
Avoiding excessive monitoring
Reducing cyber threats
Sharing sensitive information
When a company only collects the customer information necessary to complete a transaction, it is following which guideline?
Collect only what’s necessary
Report all data to third parties
Increase transparency
Expand customer records
Which challenge often makes data security harder for companies with remote workers?
Using office desktops
Unsecured home or public Wi-Fi
Required training sessions
Limited access to personal devices
What is an intangible asset?
A tangible product sold by a company
A type of financial liability
A physical resource like machinery
A non-physical resource with value to a business
Which of the following is considered intellectual property?
A company's employee handbook
A company's financial statements
A legally protected invention or artwork
A company's office building
What does a trademark protect?
A company's trade secrets
A word, phrase, symbol, or design identifying goods or services
A company's financial assets
A company's customer data
What is copyright designed to protect?
A company's confidential business information
A company's patents
Original creative works fixed in a tangible form
A company's brand reputation
What does a patent grant?
Protection for trade secrets
Ownership of a company's brand
Legal rights to use copyrighted material
Exclusive legal rights for an invention
What is a trade secret?
A company's intellectual property license
A company's trademarked logo
Confidential business information giving a competitive advantage
A public patent for an invention
What is infringement?
The unauthorized use, copying, or sale of protected intellectual property
The legal protection of a company's trade secrets
The process of registering a trademark
The act of creating a new invention
What does the doctrine of fair use allow?
Unlimited use of copyrighted material
Limited use of copyrighted material for specific purposes
The sale of copyrighted material without permission
The creation of new intellectual property
What is royalty-free media?
Media that is protected by copyright
Creative content that can be used without paying ongoing royalties
Media that is considered a trade secret
Media that requires ongoing fees for use
What is the purpose of a Non-Disclosure Agreement (NDA)?
To register a trademark with legal authorities
To grant exclusive rights to an invention
To prevent employees or contractors from sharing confidential information
To protect intellectual property from infringement
Which of the following is an example of intellectual property?
A company's office furniture
A legally protected design or symbol
A company's financial report
A company's customer list
What type of protection does copyright provide?
Protection for confidential business information
Protection for original creative works
Protection for inventions
Protection for brand reputation
Which of the following is NOT an example of intellectual property?
A company's patented invention
A company's trademarked logo
A company's office building
A company's copyrighted artwork
What is the main benefit of a trade secret?
It gives a company a competitive advantage
It provides exclusive legal rights for an invention
It protects a company's trademark
It allows unlimited use of copyrighted material
What is the primary purpose of a patent?
To protect a company's trade secrets
To grant exclusive rights to an invention
To register a company's trademark
To provide legal protection for creative works
Which of the following best describes an intangible asset?
A physical item owned by a business
A non-physical resource that has value to a business
Any product the business sells
Money collected from customers
Intellectual property refers to:
Physical property owned by a creator
Tangible products created by a business
Creations of the mind that are legally protected
Products that can be patented only
A trademark is used to:
Protect the written content of a book
Identify and distinguish the source of goods or services
Keep business information secret
Protect inventions
Copyright protects:
Ideas that have not been recorded
Any type of invention
Original creative works fixed in a tangible form
Business logos only
A patent gives an inventor:
The right to keep their identity secret
Exclusive legal rights for an invention
Ownership of all creative works
Permission to use copyrighted material freely
A trade secret is:
Any copyrighted material
Creative work shared publicly
Confidential business information that gives a competitive advantage
A type of trademark
Infringement occurs when someone:
Buys a copyrighted product
Uses someone else’s intellectual property without authorization
Creates their own version of a product
Renews a copyright
The Doctrine of Fair Use allows:
Unlimited use of copyrighted materials
Limited use of copyrighted materials without permission for specific purposes
Any business to claim a copyright
Free use of all trademarked content
Royalty-free media means:
It has no copyright at all
It can be used without paying ongoing fees under certain license conditions
It can be used for commercial purposes with no rules
It belongs to the public domain
A Non-Disclosure Agreement (NDA) is used to:
Protect copyrighted media
Allow free sharing of business information
Prevent employees or contractors from sharing confidential company information
Register a trademark
What are rules that determine who is allowed to view or use certain data or systems?
Access Control
Data Breach
Encryption
Firewall
What refers to anything valuable a business wants to protect, such as computers, files, customer data, or equipment?
Assets
Malware
Physical Security
Spam
What is it called when sensitive information is accessed, stolen, or shared without permission?
Data Breach
Risk Assessment
Security Audit
Network Security
What involves organizing information into levels (like high, medium, low sensitivity) to protect the most important data?
Data Classification
Access Control
Password Policy
Intrusion Prevention System (IPS)
What is the process that scrambles data so only people with the correct key or password can read it?
Encryption
Firewall
Malware
Spam
What is a security system that blocks unauthorized access while allowing safe communication?
Firewall
Access Control
Data Classification
Physical Security
What is a tool that watches a network for suspicious activity and alerts or blocks intruders?
Intrusion Prevention System (IPS)
Encryption
Risk Assessment
Security Audit
What is malicious software (viruses, worms, spyware) designed to damage or steal data?
Malware
Spam
Firewall
Password Policy
What involves protecting a computer network from unauthorized access, attacks, or misuse?
Network Security
Data Breach
Access Control
Physical Security
What are rules that require strong, safe passwords and regular updates?
Password Policy
Data Classification
Firewall
Risk Assessment
What involves protecting buildings, devices, and physical files from theft, damage, or break-ins?
Physical Security
Network Security
Access Control
Malware
What is the process of identifying threats and deciding which ones are most likely to cause harm?
Risk Assessment
Data Breach
Intrusion Prevention System (IPS)
Spam
What is a detailed check of a company’s systems to find weaknesses and improve protection?
Security Audit
Firewall
Password Policy
Data Classification
What are unwanted or suspicious emails that may contain harmful links or attachments?
Spam (Email Spam)
Malware
Encryption
Access Control
Businesses can protect customer personal information by:
holding onto personal information forever.
using personal information only when necessary.
collecting as much personal information as possible.
charging a premium when selling personal information to a third party.
What is the purpose of a control list in a small-business security audit?
to prevent people from having access to excess information
to create an intrusion prevention system that monitors the network
to include devices in the network that keep employees from having lack of control
to protect against the physical stealing of laptops and downloading data to a flash drive
To secure confidential financial data transmitted through the Internet, businesses often use:
bots.
pixels.
image maps.
encryption techniques.
Which password would be the most secure to protect personal customer information?
123456789
AntiQuE9532!
password
qwerty
What is the first step in a small-business security audit?
defining the audit
creating a control list
creating a priority list
defining any opportunities
The business owner, Mrs. James, asked the manager, Jade, to create a report of all the security threats that the store has faced in the past and how the threats were handled. Which phase of the small-business security audit was she asking for?
creating a control and intrusion protection plan
blocking physical intrusions, hackers, and viruses
learning from the past and considering future threats
defining all threats to protect email systems and networks
Why must businesses classify their data using information-ranking software?
To increase the amount of data employees can access
To ensure high-priority information receives stronger protection
To organize files alphabetically
To make customer data public for transparency
Which of the following is an example of a threat that should be included when defining threats in a security audit?
Increased product sales
Strong password guidelines
Lack of data backups
A new marketing campaign
What is the purpose of creating a priority list during a security audit?
To determine which employees need to be promoted
To identify the most valuable assets and match them with the biggest threats
To eliminate unnecessary jobs
To assign weekly cleaning responsibilities
Which situation best illustrates learning from past threats in a small-business security audit?
Buying new uniforms after employees complain
Reviewing previous data breaches to check if protections have improved
Rewriting the store’s mission statement
Upgrading decorations in the front lobby
A business wants to stop hackers from entering the system through dangerous links sent by email. What should the business focus on improving?
Employee dress code
Email protection and training
Physical building layout
Office supply inventory
Which action best supports the development of strong data policies?
Allowing employees to set passwords like “1234” so they can remember them
Giving all workers unlimited access to all data
Monitoring who accesses sensitive information
Letting employees choose whether to follow data rules
Which of the following is the BEST example of a physical intrusion threat?
A hacker sending a phishing email
An employee using a weak password
Someone breaking into the office and stealing a laptop
A computer program experiencing a software glitch
Why do businesses use intrusion prevention systems?
To increase internet speed
To monitor networks and block harmful activity
To organize computer desktop icons
To reduce the number of employees needed
Mrs. Lopez, a business owner, wants to know exactly who is allowed to access sensitive customer information. Which audit step should she review?
Create a control list
Block physical intrusions
Learn from past threats
Add intrusion protection
What is a benefit of encrypting laptops and tablets used by employees?
They load apps faster
They automatically block Wi-Fi access
Stolen devices cannot reveal sensitive information
Employees do not need passwords
Which of the following would be considered a high-priority asset in most small businesses?
Office posters
Outdated advertisements
Customer financial data
Empty storage boxes
What should executives do to support strong data security practices?
Remove all data policies to simplify the workplace
Give employees full access to all company systems
Direct more budget toward security measures
Eliminate monitoring systems to save money
During Step 1 of a security audit, which item would MOST likely go on the list of things to be tested?
Employee job satisfaction
Computers, cloud accounts, and email systems
The design of the company logo
Customer reviews on social media
An employee receives an email that looks like it is from a trusted company, but the link inside leads to a fake website. What type of threat is this?
Malware installation
Phishing
Physical intrusion
Information classification
