Question 1. Social media sites result in loss of personal information because

• sites lack appropriate tools to prevent security fraud.
• hackers spend more time working to penetrate the sites.
• users are not careful and share inappropriate business or personal information.
• Wikileaks is publishing social media site information.

Question 2. Information systems

• pose traditional ethical situations in new manners.
• raise new ethical questions.
• raise the same ethical questions created by the Industrial Revolution.
• raise ethical questions primarily related to information rights and obligations.

Question 3.  The feature of social institutions that means mechanisms are in place to determine responsibility for an action is called

• due process.
• accountability.
• courts of appeal.
• the judicial system.

Question 4. The process in law-governed societies in which laws are known and understood and there is an ability to appeal to higher authorities to ensure that the laws are applied correctly is called

• liability.
• due process.
• courts of appeal.
• FOI appeals.

Question 5. Immanuel Kant's Categorical Imperative states that

• if an action cannot be taken repeatedly, then it is not right to be taken at any time.
• one should take the action that produces the least harm or incurs the least cost.
• one can put value in rank order and understand the consequences of various courses of action.
• if an action is not right for everyone to take, it is not right for anyone to take.

Question 6. The ethical "no free lunch" rule states that

• if an action cannot be taken repeatedly, then it is not right to be taken at any time.
• one should take the action that produces the least harm or incurs the least cost.
• one can put values in rank order and understand the consequences of various courses of action.
• everything is owned by someone else, and that the creator wants compensation for this work.

Question 7. European privacy protection is _____ than in the United States.

• less far-reaching
• less liable to laws
• much less stringent
• much more stringent

Question 8. Intellectual property can best be described as

• intangible property created by individuals or corporations.
• unique creative work or ideas.
• tangible property created from a unique idea.
• the manifestation of an intangible idea.

Question 9. It is not feasible for companies to produce error-free software because

• any programming code is susceptible to error.
• it is not possible to create perfect software on a large scale.
• errors can be introduced in the maintenance stage of development.
• any software of any complexity will have errors.

Question 10. The practice of spamming has been growing because

• it is unregulated.
• it is good advertising practice and brings in many new customers.
• it helps pay for the Internet.
• it is so inexpensive and can reach so many people.

Question 11.  Which of the five moral dimensions of the information age does spamming raise?

• Quality of life
• System quality
• Accountability and control
• Information rights and obligations

Question 12. Policies, procedures, and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems refers to

• security.
• controls.
• benchmarks.
• algorithms.

Question 13. Security challenges posed by the communications between layers in a client/server environment are

• line taps and denial of service attacks.
• tapping, sniffing, and message alteration.
• computer viruses, line taps, and loss of machine.
• vandalism, theft and fraud, and line taps.

Question 14. Phishing involves

• redirecting users to a fraudulent website even when the user has typed in the correct address in the Web browser.
• pretending to be a legitimate business' representative in order to garner information about a security system.
• pretending that attached information is from a business associate, or directing users to fake websites.
• Using e-mails for threats and harassment.

Question 15. Evil twins are

• Trojan horses that appears to the user to be legitimate commercial software applications.
• E-mail messages that mimic the e-mail message of a legitimate business.
• Fraudulent websites that mimic a legitimate business's website.
• bogus wireless networks that look legitimate to users.

Question 16.  The HIPAA Act of 1996

• requires financial institutions to ensure the security of customer data.
• specifies best practices in information systems security and control.
• imposes responsibility on companies and management to safeguard the accuracy of financial information.
• outlines medical security and privacy rules.

Question 17. Financial institutions are required to ensure the security and confidentiality of customer data through the

• Investor Protection Act.
• Financial Services Modernization Act of 1999.
• Financial Security Act of 1997.
• Personal Security and Confidentiality Act of 1986.

Question 18. Automated data are more susceptible to destruction, fraud, error, and misuse because information systems concentrate data in computer files that

• are usually embedded in legacy systems that are easy to access.
• are not secure because the technology to secure them did not exist at the time the files were created.
• have the potential to be accessed by large numbers of people and by groups outside of the organization.
• are frequently available on the Internet.

Question 19. The vulnerability inherent in wireless networking is due to

• use of the SSIDs.
• broken encryption or users who do not set up secure systems.
• the lack of robust encryption capabilities.
• the lack of protection against war driving.

Question 20. Statement ranking information risks are included in a(n)

• security policy.
• AUP.
• risk assessment.
• business impact analysis.