nsidered as a passive attack. If a hacker attempts to break into an information system,the attack is considered active.
Question 25. What Is Hacking?
Hacking can be defined positively and negatively. To writes computer programs for enjoyment to gain access to a computer illegally.
Question 26. What Is Security Blue Print?
The security blue print is the plan for the implementation of new security measures in the organization. Some times called a framework,the blue print presents an organized approach to the security planning process.
Question 27. What Is Multics?
MULTICS was an operating system ,now obsolete. MULTICS is noewothy because it was the first and only OS created with security as its primary goal. It was a mainframe ,time-sharing OS developed in mid – 1960s by a consortium from GE,Bell Labs,and MIT.
Question 28. What Is Arpanet?
Department of Defense in US,started a research program on feasibility of a redundant,networked communication system to support the military’s exchange of information.Larry Robers,known as the founder if internet ,developed the project from its inception.
Question 29. Define E-mail Spoofing ?
Information is authentic when the contents are original as it was created,palced or stored or transmitted.The information you receive as e-mail may not be authentic when its contents are modified what is known as E-mail spoofing.
Question 30. What Are The Four Important Functions, The Information Security Performs In An Organization?
Information security performs four important functions for an organization:
- Protects the organization’s ability to function
- Enables the safe operation of applications implemented on the organization’s IT systems
- Protects the data the organization collects and uses
- Safeguards the technology assets in use at the organization.
Question 31. What Are Threats?
A threat is an object, person, or other entity that represents a constant danger to an asset Management must be informed of the various kinds of threats facing the organization By examining each threat category in turn, management effectively protects its information through policy, education and training, and technology controls.
Question 32. What Are Different Acts Of Human Error Or Failure?
Includes acts done without malicious intent. It is Caused by:
- Improper training
- Incorrect assumptions
- Other circumstances.
Question 33. How Human Error Can Be Prevented?
Much human error or failure can be prevented with training and ongoing awareness activities,but also with controls,ranging from simple procedures like asking users to type a critical command twice,to more complex procedures ,such as the verification of the commands by a second party(Eg key recovery actions in PKI systems).
Question 34. What Is Intellectual Property?
Intellectual property is “the ownership of ideas and control over the tangible or virtual representation of those ideas” . Many organizations are in business to create intellectual property.
- trade secrets
Question 35. How Intellectual Property Can Be Protected?
Enforcement of copyright has been attempted with technical security mechanisms,such as using digital watermarks and embedded code.The most common reminder of the individual’s obligation to fair and responsible use is the license agreement window that usually pops up during the installation of a new software.
Question 36. What Is Deliberate Acts Of Espionage Or Trespass?
- Broad category of activities that breach confidentiality
- Unauthorized accessing of information
- Competitive intelligence vs. espionage
- Shoulder surfing can occur any place a person is accessing confidential information
- Controls implemented to mark the boundaries of an organization’s virtual territory giving notice to trespassers that they are encroaching on the organization’s cyberspace
- Hackers uses skill, guile, or fraud to steal the property of someone else.
Question 37. Who Are Hackers? What Are The Two Hacker Levels?
The classic perpetrator of deliberate acts of espionage or trespass is the hacker. Hackers are “people who use and create computer soft