Capstone Mod 3

Front 1

The Societe Generale employee alleged to have committed fraud against the firm that resulted in a loss to the bank of some €4.9 billion was ____

Back 1

Jerome Kerviel

Front 2

____ is a form of security incident that first registered on the CSI Computer Crime and Security Survey in 2007

Back 2

Instant messaging abuse

Front 3

A(n) ____ is a term for any sort of general attack on an information system that takes advantage of a particular system vulnerability.

Back 3

exploit

Front 4

Often a successful attack on an information system is due to poor system design or implementation. Once such a vulnerability is discovered, software developers quickly create and issue a ____ to eliminate the problem.

Back 4

patch

Front 5

Some IT security experts warn that is will not be long before we see ____ aimed at smartphones to steal user’s data or turn them into remote-controlled bots

Back 5

exploits

Front 6

____ viruses have become a common and easily created form of virus. Attackers use an application macro language to create these programs that infect documents and templates.

Back 6

Macro

Front 7

____ is a form of Trojan horse which executes when it is triggered by a specific event such as a change in a particular files, by typing a specific series of keystrokes, or by a specific time or date.

Back 7

Logic bomb

Front 8

A ____ attack keeps the target so busy responding to a stream of automated requests that legitimate users cannot get in.

Back 8

distributed denial-of-service

Front 9

The ____ code portion of a rootkit gets the rootkit installation started and can be easily activated by clicking on a link to a malicious Website in an e-mail or opening an infected .pdf file

Back 9

dropper

Front 10

Rootkits are designed so cleverly that it is difficult to even discover if they are installed on a computer. The fundamental problem with trying to detect a rootkit is that the operating system cannot be trusted to provide ____.

Back 10

valid test results

Front 11

Spammers can defeat the registration process of free e-mail services by launching a coordinated ____ attack that can sign up for thousands of untraceable e-mail accounts

Back 11

bot

Front 12

Edward Davidson ran a spamming operation out of his home that sent hundreds of thousands of spam e-mails. The header information of these e-mails concealed the actual sender from the recipient of the e-mail, a violation of the ____ Act.

Back 12

CAN-SPAM

Front 13

The ____ is a type of computer crime perpetrator whose primary motive is to achieve a financial gain.

Back 13

cybercriminal

Front 14

____ is an annual gathering in Las Vegas of computer hackers.

Back 14

DEFCON

Front 15

Chinese hackers have repeatedly hacked into systems to intercept e-mails between U.S. and UK officials. This is an example of ____.

Back 15

cyberterrorism

Front 16

The ____ is a Federal law that primarily addresses unlawful access to stored electronic communications.

Back 16

US Code Title 18, Part I, Chapter 121

Front 17

A strong security program begins by ____.

Back 17

assessing the threats to an organization’s computers and network

Front 18

Part of a thorough security risk assessment is to determine how each threat can be ____ so that it becomes much less likely to occur or, if it does occur, has less of an impact on the organizations.

Back 18

mitigated

Front 19

The concept of ____ recognizes that managers must use their judgment to ensure that the cost of control does not exceed the system’s benefits or the risks involved.

Back 19

reasonable assurance

Front 20

A security policy outlines what needs to be done but not ____ to do it.

Back 20

how

Front 21

The ____ is a nonregulatory federal agency within the U.S. Department of Commerce whose Computer Security Division develops security standards and technology against threats to the confidentiality, integrity, and availability of information and services.

Back 21

National Institute of Standards and Technology (NIST)

Front 22

Installation of a(n) ____ is the most common computer security precaution taken by businesses

Back 22

firewall

Front 23

The ____ is a partnership between the Department of Homeland Security and the public and private sectors, established in 2003 to protect the nation’s Internet infrastructure against cyberattacks.

Back 23

U.S. Computer Emergency Readiness Team (US_CERT)

Front 24

A software and/or hardware device that monitors system and network resources and activities, and notifies network security personnel when it identifies possible intrusions from outside the organization or misuse from within the organization is a(n) ____.

Back 24

intrusion detection system

Front 25

A(n) ____ works to prevent an attack by blocking viruses, malformed packets, and other threats from getting into the protected network

Back 25

intrusion prevention system