IT MID CHAP 5

63問 • 2年前

Irina Kayla Rottey

通報

問題一覧

is any event or action that could cause a loss of or damage to a computer or mobile device hardware

Digital security risk

Any illegal act involving the use of a computer or related devices generally is referred to as a

computer crime

is an online or Internet-based illegal act

cybercrime

Digital Security Risks

Hacker Cracker Script kiddie Corporate spies Unethical employees Cyberextortionist Cyberterrorist

short for malicious software, consists of programs that act without a user’s knowledge and deliberately alter the operations of computers and mobile devices

Malware

Common type of Malware

Virus Worm Trojan Horse Rootkit Spyware Adware

is a group of compromised computers or mobile devices connected to a network

botnet

compromised computer or device is known as a

zombie

disrupts computer access to an Internet service

denial of service attack (DoS attack)

is a program or set of instructions in a program that allow users to bypass security controls

back door

a technique intruders use to make their network or Internet transmission appear legitimate

Spoofing

hardware and/or software that protects a network’s resources from intrusion

firewall

the use of a computer or network without permission use is the use of a computer or its data for unapproved or possibly illegal activities

Unauthorized access

Organizations take _ to help prevent unauthorized access and use

several methods

Organizations use:

Acceptable use policy Disable file and printer sharing

define who can access a computer, device, or network; when they can access it;

Access controls

the computer, device, or network should maintain an audit trail that records in a file both successful and unsuccessful access attempts

– User name – Password

private combination of words,

passphrase

sometimes called a passcode, is a numeric password,

PIN (Personal Identification Number)

authenticates a person’s identity by translating a personal characteristic into a digital code

biometric device

Unauthorized Access and Use:

Fingerprint reader Face recognition system Hand geometry system Voice verification system Signature verification system Iris recognition system

uses two separate methods, one after the next, to verify the identity of a user

Two-step verification

is the discovery, collection, and analysis of evidence found on computers and networks

Digital forensics

Many areas use digital forensics:

Law enforcement Criminal prosecutors Military intelligence Insurance agencies Information security departments

occurs when someone: Steals software media Intentionally erases programs Illegally registers and/or activates a program Illegally copies a program

Software theft

users provide the software product’s identification number to associate the software

product activation

is the right to use software

license agreement

occurs when someone steals personal or confidential information

Information theft

is a process of converting data that is readable by humans into encoded characters

Encryption

is an encrypted code that verify the identity of the message sender

digital signature

is a notice that guarantees a user or a website is legitimate

digital certificate

website that uses encryption techniques to secure its data is known as

secure site

is the act of stealing digital equipment

Hardware theft

is the act of defacing or destroying digital equipment

Hardware vandalism

is a duplicate of a file, program, or media

backup

a file means to make a copy of it

To back up

Categories of backups:

– Full – Differential – Incremental – Selective – Continuous data protection – Cloud

Type of Back ups

*refer to image

Wireless access poses additional security risks • Some perpetrators connect to other’s wireless networks to gain free Internet access or confidential data • Others connect to a network through an unsecured wireless access point (WAP) or combination router/WAP

TRUE

are the moral guidelines that govern the use of computers, mobile devices, information systems, and related technologies

Technology ethics

– Not all information on the Internet is correct

Information accuracy is a concern

refers to unique and original works such as ideas, inventions, art, writings, processes, company and product names, and logos

Intellectual property

are the rights to which creators are entitled to their work

Intellectual property rights

protects any tangible form of expression

is a strategy designed to prevent illegal distribution of movies, music, and other digital content

Digital rights management (DRM)

is a written guideline that helps determine whether a specification is ethical/unethical or allowed/not allowed

code of conduct

involves reducing the electricity and environmental waste while using computers

Green computing

refers to the right of individuals and companies to deny or restrict the collection, use, and dissemination of info about them

Information privacy

• Huge databases store data online • Websites often collect data about you, so that they can customize advertisements and send you personalized email messages • Some employers monitor your computer usage and email messages

TRUE

• Information about you can be stored in a database when you:

– Fill out a printed or online form – Create a profile on an online social network – Register a product warranty

is a small text file that a web server stores on your computer

Websites use cookies for a variety of reasons:

Allow for personalization Store user names and/or passwords Assist with online shopping Track how often users visit a site Target advertisements

is a scam in which a perpetrator sends an official looking email message

Phishing

an object that can be tapped or clicked on a website contains a malicious program

clickjacking

is a program placed on a device without the user’s knowledge that secretly collects information about the user and then communicates it to some outside site

Spyware

is a program that displays an online advertisement in a banner or pop-up window

Adware

is defined as gaining unauthorized access to or obtaining confidential information by taking advantage

Social engineering

involves the use of computers, mobile devices, or cameras to observe, record, and review an employee’s use of a technology,

Employee monitoring

Many programs exist that easily allow employers to monitor employees. Further, it is legal for employers to use these programs

TRUE

The concern about privacy has led to the enactment of federal and state laws regarding the storage and disclosure of personal data

TRUE

is the process of restricting access to certain material

Content filtering

restricts access to specified websites

Web filtering software

*refer to image

Common type of Malware

STS CHAP 6 n 7

Irina Kayla Rottey · 36問 · 2年前

STS CHAP 6 n 7

36問 • 2年前

Irina Kayla Rottey

STS CHAP 8

Irina Kayla Rottey · 32問 · 2年前

STS CHAP 8

32問 • 2年前

Irina Kayla Rottey

HPC CHAP 3

Irina Kayla Rottey · 16問 · 2年前

HPC CHAP 3

16問 • 2年前

Irina Kayla Rottey

HPC CHAP 5

Irina Kayla Rottey · 33問 · 2年前

HPC CHAP 5

33問 • 2年前

Irina Kayla Rottey

Irina Kayla Rottey · 21問 · 2年前

21問 • 2年前

Irina Kayla Rottey

HK 1

Irina Kayla Rottey · 32問 · 2年前

HK 1

32問 • 2年前

Irina Kayla Rottey

HK 2

Irina Kayla Rottey · 61問 · 2年前

HK 2

61問 • 2年前

Irina Kayla Rottey

Legal 3

Irina Kayla Rottey · 30問 · 1年前

Legal 3

30問 • 1年前

Irina Kayla Rottey

Irina Kayla Rottey · 37問 · 1年前

37問 • 1年前

Irina Kayla Rottey

問題一覧

is any event or action that could cause a loss of or damage to a computer or mobile device hardware

Digital security risk

Any illegal act involving the use of a computer or related devices generally is referred to as a

computer crime

is an online or Internet-based illegal act

cybercrime

Digital Security Risks

Hacker Cracker Script kiddie Corporate spies Unethical employees Cyberextortionist Cyberterrorist

short for malicious software, consists of programs that act without a user’s knowledge and deliberately alter the operations of computers and mobile devices

Malware

Common type of Malware

Virus Worm Trojan Horse Rootkit Spyware Adware

is a group of compromised computers or mobile devices connected to a network

botnet

compromised computer or device is known as a

zombie

disrupts computer access to an Internet service

denial of service attack (DoS attack)

is a program or set of instructions in a program that allow users to bypass security controls

back door

a technique intruders use to make their network or Internet transmission appear legitimate

Spoofing

hardware and/or software that protects a network’s resources from intrusion

firewall

the use of a computer or network without permission use is the use of a computer or its data for unapproved or possibly illegal activities

Unauthorized access

Organizations take _ to help prevent unauthorized access and use

several methods

Organizations use:

Acceptable use policy Disable file and printer sharing

define who can access a computer, device, or network; when they can access it;

Access controls

the computer, device, or network should maintain an audit trail that records in a file both successful and unsuccessful access attempts

– User name – Password

private combination of words,

passphrase

sometimes called a passcode, is a numeric password,

PIN (Personal Identification Number)

authenticates a person’s identity by translating a personal characteristic into a digital code

biometric device

Unauthorized Access and Use:

Fingerprint reader Face recognition system Hand geometry system Voice verification system Signature verification system Iris recognition system

uses two separate methods, one after the next, to verify the identity of a user

Two-step verification

is the discovery, collection, and analysis of evidence found on computers and networks

Digital forensics

Many areas use digital forensics:

Law enforcement Criminal prosecutors Military intelligence Insurance agencies Information security departments

occurs when someone: Steals software media Intentionally erases programs Illegally registers and/or activates a program Illegally copies a program

Software theft

users provide the software product’s identification number to associate the software

product activation

is the right to use software

license agreement

occurs when someone steals personal or confidential information

Information theft

is a process of converting data that is readable by humans into encoded characters

Encryption

is an encrypted code that verify the identity of the message sender

digital signature

is a notice that guarantees a user or a website is legitimate

digital certificate

website that uses encryption techniques to secure its data is known as

secure site

is the act of stealing digital equipment

Hardware theft

is the act of defacing or destroying digital equipment

Hardware vandalism

is a duplicate of a file, program, or media

backup

a file means to make a copy of it

To back up

Categories of backups:

– Full – Differential – Incremental – Selective – Continuous data protection – Cloud

Type of Back ups

*refer to image

TRUE

are the moral guidelines that govern the use of computers, mobile devices, information systems, and related technologies

Technology ethics

– Not all information on the Internet is correct

Information accuracy is a concern

refers to unique and original works such as ideas, inventions, art, writings, processes, company and product names, and logos

Intellectual property

are the rights to which creators are entitled to their work

Intellectual property rights

protects any tangible form of expression

is a strategy designed to prevent illegal distribution of movies, music, and other digital content

Digital rights management (DRM)

is a written guideline that helps determine whether a specification is ethical/unethical or allowed/not allowed

code of conduct

involves reducing the electricity and environmental waste while using computers

Green computing

refers to the right of individuals and companies to deny or restrict the collection, use, and dissemination of info about them

Information privacy

TRUE

• Information about you can be stored in a database when you:

– Fill out a printed or online form – Create a profile on an online social network – Register a product warranty

is a small text file that a web server stores on your computer

Websites use cookies for a variety of reasons:

Allow for personalization Store user names and/or passwords Assist with online shopping Track how often users visit a site Target advertisements

is a scam in which a perpetrator sends an official looking email message

Phishing

an object that can be tapped or clicked on a website contains a malicious program

clickjacking

is a program placed on a device without the user’s knowledge that secretly collects information about the user and then communicates it to some outside site

Spyware

is a program that displays an online advertisement in a banner or pop-up window

Adware

is defined as gaining unauthorized access to or obtaining confidential information by taking advantage

Social engineering

involves the use of computers, mobile devices, or cameras to observe, record, and review an employee’s use of a technology,

Employee monitoring

Many programs exist that easily allow employers to monitor employees. Further, it is legal for employers to use these programs

TRUE

The concern about privacy has led to the enactment of federal and state laws regarding the storage and disclosure of personal data

TRUE

is the process of restricting access to certain material

Content filtering

restricts access to specified websites

Web filtering software

*refer to image

Common type of Malware