Mis Midterm 2

Front 1

Name 4 reasons why we should have information security (4 predators)

Back 1

1. Viruses

2. Web Defacements

3. Worms

4. Password Crackers

Front 2

What does CIA stand for in information security?

Back 2

Confidentiality -Protecting information from unauthorized disclosure

Integrity -Protecting information from unauthorized alteration / destruction

Availability -Ensuring the availability and access to the information

Front 3

Definition of security policy

Back 3

Documented Security Principles

Front 4

name 5 "security basics" that help keep sound security.

Back 4

1. Security Policy

2. Educate users - security awareness

3. Physical Security

4. Monitor Network, review logs

5. Passwords

Front 5

Name two functions of the firewall

Back 5

1. Examines network packets entering/leaving an organization

2. Determine whether packets are allowed to travel 'through' the firewall.

Front 6

What is the Intrusion detection system prevention system (IDS / IPS)?

Back 6

1. Features full-time monitoring tools that search for patterns in network traffic to identify intruders

2. Protects against suspicious network traffic

3. attempts to access files and data

Front 7

Name two functions of "Operational Controls"

Back 7

Investigates error messages, reports, alarms

Front 8

why use encryption? (4)

Back 8

1. disguising message

2. confidentiality

3. non-repudiation - sender cannot deny they sent message

4.C,I,A

Front 9

what is steganography?

Back 9

hiding information in a picture / video / audio file

Front 10

what is a Symmetric / Secret Key (look up in book)

Back 10

A same key that's used for encryption and decryption

Front 11

Asymmetric (private/public) key

Back 11

When there are two different keys: private key is used for decryption (user), and a public key is used for encryption (distribution)

Front 12

What is a hash Function? Name some examples

Back 12

Any function that can be used to map digital data of arbitrary size.

MD5 - 128 Bit Hash

Front 13

Facts on conversion methods - parallel

Back 13

1. Using both the new and old system at the same time

2. If the new system fails, then we can stop the new, and the old system can keep on going.

Front 14

facts on conversion methods- pilot

Back 14

1. use a demo group that will use the new system.

2. Can take time to fix bugs. Demo group can be used as the guinea pigs.

Front 15

What will the IDS do if a suspicious event or unauthorized traffic is identified?

Back 15

IDS will generate an alarm, and can be customized to shut down a particularly sensitive part of the network.

Front 16

Describe the process of a digital signature (5)

Back 16

1. Hash algorithm creates a unique abstract of the message.

2.Hash function goes through the message digest

3. Private Key of Sender encrypts digest.

4. Encrypted digest becomes digital signature

5. when then the message digital signature appears.

Front 17

Name three features of digital signatures

Back 17

1. integrity - message not changed

2. Creates non-repudiation

3. Used to authenticate software, data, images,. 4. Verifies sender identity

Front 18

What are biometrics?

Back 18

Multi-factor authentication in which you can identify people by measuring some aspect of individual anatomy, physiology, some deeply ingrained skill, or other behavioral characteristic.

Front 19

What is a false positive?

Back 19

a client is accepted as authenticated when they should have been rejected.

Front 20

What is a false negative

Back 20

a client is rejected as NOT authenticated when in fact they should have been accepted.

Front 21

list all of the components in the system development life cycle (waterfall approach

Back 21

investigation phase

Analysis phase

Design phase

implementation phase

maintenance phase

I - in

A - ass

D - dick

I - is

M - massive

Front 22

What report needs to be typed when in the investigation phase?

Back 22

feasibility report

Front 23

During the investigation phase, you conduct a preliminary study to determine _____ (3 things)

Back 23

estimated costs

general information system needs

What the new system should include / exclude

Front 24

What do you do in the analysis phase? (2)

Back 24

1. Examine current system

2. Requirements report

Front 25

Name some features of the design phase (2)

Back 25

1. "how" question is answered

2. more technical phase

Front 26

Name some features of the implementation phase:(2)

Back 26

1. Building/buying and delivering the actual system.

2. activities such as testing, conversion, training

Front 27

Name some features of the maintenance phase: (2)

Back 27

1. ongoing

2. monitoring, updating

3. takes more time and resources than anticipated

Front 28

name some characteristics of agile development / scrum projects: (2)

Back 28

1. make progress in a series of 2-4 week long "sprints"

2. product componet is: designed, coded, and tested during sprint

Front 29

Name 3 IS Project Success Factors

Back 29

1. USer involvement

2. clear statement of requirement

3. proper planning

Front 30

What does EFT stand for?

Back 30

Electronic Funds Transfer

Front 31

What does EDI stand for

Back 31

Electronic Data Interchange

Front 32

Name three factors affecting retailing the web

Back 32

performance and service

personalization

socialization

Front 33

What types of management are required in E-Commerce Process components

Back 33

Search

Conent

Catalog

Workflow

Front 34

Name 3 functions of Decision Support Systems

Back 34

1. Information Reporting versus decision-making.

2. Seek out goals, and optimization.

3. use models, and specialized databases.

Front 35

Name 3 areas of Artificial Intelligence

Back 35

1. Intelligent Agents

2. Expert Systems

Front 36

Definition: a special-purpose knowledge-based information system that accomplishes specific tasks on behalf of its users.

Back 36

Intelligent Agents

Front 37

this is known as the "sherlock holmes for an information search agent

Back 37

intelligent agents

Front 38

List the process of expert systems (4)

Back 38

1. knowledge base

2. inference engine program

3. user interface programs

4. expert advice

Front 39

Name 3 things that are being outsourced:

Back 39

1. programming

2. data entry

3. help desk operations

Front 40

Name 3 weaknesses of outsourcing

Back 40

1. Job loss threat

2. loss of intellectual properties

3. Loss of control of IT function

Front 41

What are 2 difficulties of outsourcing?

Back 41

1. Cultural barriers

2. Legal Differences

3. Time and distance costs