Chapter 5

Question 1

What is information security and why do companies protect information resources?

Answer 1

a. Processes/policies made to protect an org data info system from unauthorized use
b. Companies protect because security breaches are expensive

Question 2

CIA frame work

Answer 2

Confidentially
i. System must prevent disclosing info to anyone not authorized to access it

Integrity
i. Accuracy of info resources within org

Availability

i. Computers and networks are working and the right people can get the info they need
ii. Should recover quick if system fails

Question 3

Spyware Vs Adware

Answer 3

Spyware
i. software that secretly gathers info about users

adware
i. form of spyware that collects info to display ads

Question 4

Keystroke loggers

Answer 4

a. Monitors and records keystrokes

b. On hardware or software

Question 5

Sniffing Vs Spoofing

Answer 5

Sniffing
a. Capturing and recording network traffic

Spoofing
a. attempt to gain access to network by posing as an authorized person to find

Question 6

Virus, Worms, and Trojan program

Answer 6

Virus
i. Attaches itself and is triggered by time or event(click)

Worms
i. Independent programs that spread themselves without having to be attached to a host program

Trojan programs
i. Hides in a popular program and contains code to disrupt computer

Question 7

Logic bomb

Answer 7

a. type of trojan program used to release a virus worm or other code
b. triggered by an event

Question 8

Backdoor

Answer 8

a. Built by designers that allows them to sneak into system later to access files

Question 9

RAM scraping

Answer 9

a. Scans ram to find sensitive data like credit card

Question 10

Social engineering

Answer 10

a. Using people skills to trick others into revealing private info
b. Ex: using kids name aa password

Question 11

Denial of Service attacks:

Answer 11

a. Floods server with requests to prevent user from accessing system
b. DDOS

Question 12

Fault-tolerant systems

Answer 12

a.	Using hardware and software to ensure availability in event of system failure
o Commonly used methods 
i.	Mirror disks
ii.	RAID
iii.	UPS

Question 13

Access control

and the 3 types

Answer 13

a. Designed to protect systems from unauthorizes access

1. Biometric
   - Ex: facial recognition
2. Non-biometric
   - Password

3.Physical

Question 14

Firewalls

and the 3 types

Answer 14

a. Combination of hardware and software that acts as a filter or barrier between a private network and external computers or networks

1. Application firewall
   - controls use of applications such as email
2. Packet-filtering firewall
   - examines every packet passing into and out of a network
3. Proxy server
   - acts as an intermediary between two systems