1
Q
- The key difference between laws and ethics is that ethics carry the authority of a governing body and laws do not.
A
F
2
Q
- Due care requires that an organization make a valid effort to protect others and continually maintain this level of effort.
A
F
3
Q
- The Clipper Chip can be used to monitor or track private communications.
A
T
4
Q
- HIPAA specifies particular security technologies for each of the security requirements to ensure the privacy of the health-care information.
A
F
5
Q
- Every state has implemented uniform laws and regulations placed on organizational use of computer technology.
A
F
6
Q
- Thirty-four countries have ratified the European Council Cyber-Crime Convention as of April 2010.
A
F
7
Q
- The United States has implemented a version of the DMCA law called the Database Right, in order to comply with Directive 95/46/EC.
A
F
8
Q
- The Association for Computing Machinery and the Information Systems Security Association have the authority to banish violators of their ethical standards from practicing their trade.
A
F
9
Q
- Studies on ethics and computer use reveal that people of different nationalities have different perspectives; difficulties arise when one nationality’s ethical behavior violates the ethics of another national group.
A
T
10
Q
- Cultural differences can make it easy to determine what is and is not ethical—especially when it comes to the use of computers.
A
F
11
Q
- Studies have reported that the Pacific Rim countries of Singapore and Hong Kong are hotbeds of software piracy.
A
T
12
Q
- The difference between a policy and a law is that ignorance of a law is an acceptable defense.
A
F
13
Q
- There are four general causes of unethical and illegal behavior.
A
F
14
Q
- Individuals with authorization and privileges to manage information within the organization are most likely to cause harm or damage by accident.
A
T
15
Q
- The Information Systems Security Association (ISSA) is a nonprofit society of information security professionals whose primary mission is to bring together qualified information security practitioners for information exchange and educational development.
A
T
16
Q
- The Department of Homeland Security is the only U.S. federal agency charged with the protection of American information resources and the investigation of threats to, or attacks on, the resources.
A
F
17
Q
- DHS is made up of three directorates.
A
F
18
Q
- Established in January 2001, the National InfraGard Program began as a cooperative effort between the FBI’s Cleveland Field Office and local technology professionals.
A
T
19
Q
- The NSA is responsible for signal intelligence and information system security.
A
T
20
Q
- The Secret Service is charged with the detection and arrest of any person committing a United States federal offense relating to computer fraud and false identification crimes.
A
T
21
Q
- ____ law comprises a wide variety of laws that govern a nation or state.
a. Criminal c. Public
b. Civil d. Private
A
b. Civil
22
Q
- ____ law regulates the structure and administration of government agencies and their relationships with citizens, employees, and other governments.
a. Public c. Civil
b. Private d. Criminal
A
a. Public
23
Q
- The Computer ____ and Abuse Act of 1986 is the cornerstone of many computer-related federal laws and enforcement efforts.
a. Violence c. Theft
b. Fraud d. Usage
A
b. Fraud
24
Q
- According to the National Information Infrastructure Protection Act of 1996, the severity of the penalty for computer crimes depends on the value of the information obtained and whether the offense is judged to have been committed for each of the following except ____.
a. for purposes of commercial advantage c. to harass
b. for private financial gain d. in furtherance of a criminal act
A
c. to harass
25
5. The National Information Infrastructure Protection Act of 1996 modified which Act?
a. USA PATRIOT Act
b. USA PATRIOT Improvement and Reauthorization Act
c. Computer Security Act
d. Computer Fraud and Abuse Act
d. Computer Fraud and Abuse Act
26
6. The Privacy of Customer Information Section of the common carrier regulation states that any proprietary information shall be used explicitly for providing services, and not for any ____ purposes.
a. troubleshooting c. customer service
b. billing d. marketing
d. marketing
27
7. The ____ Portability and Accountability Act Of 1996, also known as the Kennedy-Kassebaum Act, protects the confidentiality and security of health care data by establishing and enforcing standards and by standardizing electronic data interchange.
a. Customer c. Computer
b. Health Insurance d. Telecommunications
b. Health Insurance
28
8. Which of the following acts is a collection of statutes that regulate the interception of wire, electronic, and oral communications?
a. Electronic Communications Privacy Act
b. Financial Services Modernization Ac
c. Sarbanes-Oxley Act
d. Economic Espionage Act
a. Electronic Communications Privacy Act
29
9. Which of the following acts is also widely known as the Gramm-Leach-Bliley Act?
a. Financial Services Modernization Act
b. Communications Act
c. Computer Security Act
d. Economic Espionage Act
a. Financial Services Modernization Act
30
10. What is the subject of the Computer Security Act?
a. Federal Agency Information Security
b. Telecommunications Common Carriers
c. Cryptography Software Vendors
d. Banking Industry
a. Federal Agency Information Security
31
11. Which of the following acts defines and formalizes laws to counter threats from computer related acts and offenses?
a. Electronic Communications Privacy Act of 1986
b. Freedom of Information Act (FOIA)
c. Computer Fraud and Abuse Act
d. Federal Privacy Act of 1974
c. Computer Fraud and Abuse Act
32
12. ____ defines stiffer penalties for prosecution of terrorist crimes.
a. USA Patriot Act c. Gramm-Leach-Bliley Act
b. Sarbanes-Oxley Act d. Economic Espionage Act
a. USA Patriot Act
33
13. ____ attempts to prevent trade secrets from being illegally shared.
a. Electronic Communications Privacy Act
b. Sarbanes-Oxley Act
c. Financial Services Modernization Act
d. Economic Espionage Act
d. Economic Espionage Act
34
14. The ____ of 1999 provides guidance on the use of encryption and provides protection from government intervention.
a. Sarbanes-Oxley Act
b. Gramm-Leach-Bliley Act
c. U.S.A. Patriot Act
d. Security and Freedom through Encryption Act
d. Security and Freedom through Encryption Act
35
15. What is the subject of the Sarbanes-Oxley Act?
a. Banking c. Privacy
b. Financial Reporting d. Trade secrets
b. Financial Reporting
36
16. The Council of Europe adopted the Convention of CyberCrime in ____.
a. 1976 c. 1998
b. 1986 d. 2001
d. 2001
37
17. Which of the following countries reported generally intolerant attitudes toward personal use of organizational computing resources?
a. Australia c. Singapore
b. United States d. Sweden
c. Singapore
38
18. Individuals with authorization and privileges to manage information within the organization are most likely to cause harm or damage ____.
a. with intent c. with malice
b. by accident d. with negligence
b. by accident
39
19. Criminal or unethical ____ goes to the state of mind of the individual performing the act.
a. attitude c. accident
b. intent d. ignorance
b. intent
40
20. Laws and policies and their associated penalties only deter if which of the following conditions is present?
a. Fear of penalty
b. Probability of being caught
c. Probability of penalty being administered
d. All of the above
d. All of the above
sim
flashcards
Decks in class (6)
# Cards
