ITE302 - FPT Final

1 Each society forms a set of rules that establishes the boundaries of generally accepted behavior. These rules are often expressed in statements about how people should behave, and they fit together to form the ____ by which a society lives.

moral code

2 A set of beliefs about right and wrong behavior within a society is called ____.

ethics

3 Arthur Andersen, once a major international accounting firm, was indicted for obstruction of justice, lost its auditing license, and eventually closed its U.S. offices based on the actions of a few employees even though they were performing in a manner contrary to corporate policy and their employer's directions. This is an example of the principle called respondeat superior or ____.

"let the master answer."

4 In 2007, ____ of all software in circulation worldwide was pirated.

around 38%

5 ____ had one of the highest software piracy rates in 2007.

Armenia

6 Habits that incline people to do what is acceptable are called ____.

virtues

7 ____ describes standards or codes of behavior expected of an individual by a group (nation, organization, profession) to which an individual belongs.

Morals

8 ____ is a system of rules that tells us what we can and cannot do.

Laws

9 ____ hired private investigators to identify members of its board of directors who were responsible for leaking confidential company information to the press.

Hewlett-Packard

10 Someone who stands to gain or lose, depending on how a situation is resolved is called a(n) ____.

stakeholder

11 Companies that develop and maintain strong employee relations ____.

suffer lower turnover rates

12 A judge found ____ guilty of not providing timely on-site technical support that customers were entitled to and, as a result, lost its place as the world's largest computer manufacturer.

Dell

13 The Department of Justice established sentencing guidelines that suggest more ____ treatment for convicted executives if their companies have ethics programs.

lenient

14 One characteristic of an organization that has a successful ethics program is that ____.

employees are rewarded for ethical behavior.

15 A rapid increase in the appointment of corporate ethics officers typically follows

the revelation of a major business scandal.

16 In a for-profit organization, it is the primary objective of the ____ to oversee the organization's business activities and management for the benefit of shareholders, employees, customers, suppliers, and the community.

Board of Directors

17 While nearly half of all employees surveyed saw some form of ethical misconduct in 2007, less than ____ of those employees reported the misconduct to management.

60%

18 In a(n) ____, an organization reviews how well it is meeting its ethical and social responsibility goals, and communications its new goals for the upcoming year.

social audit

19 Ethical conduct criteria that could be used in an employee's performance evaluation includes ____.

operating effectively in a multicultural environment

20 ____ is a likely cause of employees feeling "No one will ever know the difference, and if they do, so what?"

Management failing to hold people accountable for unethical actions

21 The step in the five-step decision-making process during which the decision maker (s) consider laws, guidelines, policies, and principles that might apply to the decision is the ____ step.

evaluate and choose alternative

22 The step of the five-step decision process during which those who will be affected by the decision are identified is the ____ step.

develop problem statement

23 Part of developing a good problem statement includes ____.

determining who is directly affected by the problem

24 An approach to ethical decision making that is based on a vision of society as a community whose members work together to achieve a common set of values and goals is the ____ approach.

common good

25 An approach to ethical decision making that states you should choose the action or policy that has the best overall consequences for all people who are directly or indirectly affected is the ____ approach.

utilitarian

26 From a legal perspective, IT workers are not recognized as professionals because they are not ____ by the state or federal government.

licensed

27 Many courts have ruled that IT workers are not liable for ____ because they do not meet the legal definition of a professional.

malpractice

28 As a result of increased ____, clients and service providers have built their working relationships on the expectation that they can communicate easily and instantly around the globe through electronic teleconferences, audio conferences, e-mail, and wireless devices.

connectivity

29 As a result of improved ____, clients are able to break down their business processes into their fundamental steps and decide which they will perform themselves and which they will outsource to service providers.

modularization

30 The mission of the Business Software Alliance is to ____.

stop the unauthorized copying of software

31 Software manufacturers can file a civil suit against software pirates with penalties of up to ____ per copyrighted work.

$100,000

32 A ____ is information, generally unknown to the public, that a company has taken strong measures to keep confidential.

trade secret

33 Whistle-blowing is an effort by an employee to attract attention to a negligent, illegal, unethical, abusive, or dangerous act by a company that threatens the ____.

public interest

34 Before becoming a whistle-blower, an employee would normally call attention to a problem and try to correct it by first working with appropriate resources within ____.

the company

35 To prove fraud in a court of law, prosecutors must demonstrate that ____.

the accused made a false representation of a material fact

36 ____ occurs when a party fails to perform certain express or implied obligation, which impairs or destroys the essence of a contract.

Material breach of contract

37 Accepting payment of entry fees for a golf tournament from a supplier is ____.

could be perceived as a bribe

38 The U.S. Foreign Corrupt Practices Act makes it a crime to bribe a foreign official unless the payment was ____.

lawful under the laws of the foreign country in which it was paid

39 The Foreign Corrupt Practices Act permits facilitating payments so that an official performs or makes a(n) ____.

official function faster

40 Studies have shown that around ____ of all job applicants exaggerate their accomplishments on their resume.

30%

41 An IT professional organization whose mission is to provide superior leadership and education in information technology and that has a goal to help its members make themselves more marketable within their industry is ____.

AITP

42 Certification indicates that a professional possesses a particular set of skills, knowledge, or abilities, in the opinion of the ____.

certifying organization

43 A government license grants permission for an individual to engage in an activity or to operate a business. It is generally administered at the ____ level and often requires that the recipient pass a test of some kind.

state

44 The obligation to protect people against any unreasonable harm or risk is called ____.

duty of care

45 Because there are no ____ against which to compare a software engineer's professional behavior, he or she cannot be subject to malpractice lawsuits.

uniform standards

46 A device that limits access to the company's network based on the organization's Internet usage policy is called a(n) ____.

firewall

47 Adherence to a professional code of ethics means that practitioners use a common set of ____ as a guideline for ethical decision making.

core values and beliefs

48 IT workers have a key responsibility to establish an environment that supports ethical behavior by users. Such an environment discourages software piracy, minimizes the inappropriate use of corporate computing resources, and avoids the inappropriate sharing of ____.

information

49 A feature that is associated with a bribe is that a bribe ____.

encourages an obligation for the recipient

50 If misrepresentation causes a party to enter into a contract, that party may have the legal right to ____.

cancel the contract and seek reimbursement for damages

51 The Societe Generale employee alleged to have committed fraud against the firm that resulted in a loss to the bank of some €4.9 billion was ____.

Jerome Kerviel

52 ____ is a form of security incident that first registered on the CSI Computer Crime and Security Survey in 2007.

Instant messaging abuse

53 A(n) ____ is a term for any sort of general attack on an information system that takes advantage of a particular system vulnerability.

exploit

54 Often a successful attack on an information system is due to poor system design or implementation. Once such a vulnerability is discovered, software developers quickly create and issue a ____ to eliminate the problem.

patch

55 Some IT security experts warn that is will not be long before we see ____ aimed at smartphones to steal user's data or turn them into remote-controlled bots.

exploits

56 ____ viruses have become a common and easily created form of virus. Attackers use an application macro language to create these programs that infect documents and templates.

Macro

57 ____ was a worm that was released in 2007 and caused billions of dollars in damages.

Storm

58 ____ is a form of Trojan horse which executes when it is triggered by a specific event such as a change in a particular files, by typing a specific series of keystrokes, or by a specific time or date.

Logic bomb

59 A ____ attack keeps the target so busy responding to a stream of automated requests that legitimate users cannot get in.

distributed denial-of-service

60 It is estimated that about one in ____ personal computers in the United States is part of a botnet.

four

61 The ____ code portion of a rootkit gets the rootkit installation started and can be easily activated by clicking on a link to a malicious Website in an e-mail or opening an infected .pdf file.

dropper

62 Rootkits are designed so cleverly that it is difficult to even discover if they are installed on a computer. The fundamental problem with trying to detect a rootkit is that the operating system cannot be trusted to provide ____.

valid test results

63 ____ is (are) the abuse of e-mail systems to send unsolicited e-mail to large numbers of people.

E-mail spam

64 Spammers can defeat the registration process of free e-mail services by launching a coordinated ____ attack that can sign up for thousands of untraceable e-mail accounts.

bot

65 Edward Davidson ran a spamming operation out of his home that sent hundreds of thousands of spam e-mails. The header information of these e-mails concealed the actual sender from the recipient of the e-mail, a violation of the ____ Act.

CAN-SPAM

66 ____ have become the primary means for distributing spam, malware, and phishing scams.

Botnets

67 The ____ is a type of computer crime perpetrator whose primary motive is to achieve a financial gain.

cybercriminal

68 ____ is an annual gathering in Las Vegas of computer hackers.

DEFCON

69 Chinese hackers have repeatedly hacked into systems to intercept e-mails between U.S. and UK officials. This is an example of ____.

cyberterrorism

70 The ____ is a Federal law that primarily addresses unlawful access to stored electronic communications.

US Code Title 18, Part I, Chapter 121

71 ____ has made a strong commitment to support trustworthy computing and defined four pillars of trustworthy computing.

Microsoft

72 A strong security program begins by ____.

assessing the threats to an organization's computers and network

73 Part of a thorough security risk assessment is to determine how each threat can be ____ so that it becomes much less likely to occur or, if it does occur, has less of an impact on the organizations.

mitigated

74 The concept of ____ recognizes that managers must use their judgment to ensure that the cost of control does not exceed the system's benefits or the risks involved.

reasonable assurance

75 A security policy outlines what needs to be done but not ____ to do it.

how

76 The ____ is a nonregulatory federal agency within the U.S. Department of Commerce whose Computer Security Division develops security standards and technology against threats to the confidentiality, integrity, and availability of information and services.

National Institute of Standards and Technology

77 Installation of a(n) ____ is the most common computer security precaution taken by businesses.

firewall

78 The ____ is a partnership between the Department of Homeland Security and the public and private sectors, established in 2003 to protect the nation's Internet infrastructure against cyberattacks.

U.S. Computer Emergency Readiness Team

79 A software and/or hardware device that monitors system and network resources and activities, and notifies network security personnel when it identifies possible intrusions from outside the organization or misuse from within the organization is a(n) ____.

intrusion detection system

80 A(n) ____ works to prevent an attack by blocking viruses, malformed packets, and other threats from getting into the protected network.

intrusion prevention system

81 The concept of privacy is ____.

protected by a number of amendments in the Bill of Rights

82 The Supreme Court has ruled that ____.

without a reasonable expectation of privacy, there is no privacy right

83 The ____ is a 1970 federal act that outlines who may access your credit information, how you can find out what is in your file, how to dispute inaccurate data, and how long data is retained.

Fair Credit Reporting Act

84 The ____ is an act that repealed a depression-era law known as Glass-Steagell. Some place partial blame for the financial crises that began in 2008 on the passage of this act and the loosening of banking restrictions.

Gramm-Leach-Bliley Act

85 Under the ____, financial institutions must provide a privacy notice to each consumer that explains what data about the consumer is gathered, with whom that data is shared, how the data is used, and how the data is protected.

Gramm-Leach-Bliley Act

86 Under the HIPAA provisions, healthcare providers must obtain ____ from patients prior to disclosing any information in their medical records.

written consent

87 The Children's Online Privacy Protection Act ____.

does not cover the dissemination of information to children

88 The Foreign Intelligence Surveillance Act ____.

Allows surveillance, without court order, within the United States for up to a year unless the surveillance will acquire the contents of any communications to which a U.S. person is a party

89 The ____, passed as an amendment to Title III of the Omnibus Crime Control and Safe Streets Act establishes a requirement for court-approved law enforcement use of a pen register or trap and trace.

Electronic Communications Privacy Act

90 The ____ prohibits unauthorized access to stored wire and electronic communications, such as the contents of e-mail in-boxes, instant messages, message boards, and social networking sites that are not readily accessible to the general public.

Electronic Communications Privacy Act

91 Under the ____, the Federal Communications Commission responded to appeals from the Justice Department by requiring providers of Internet phone services and broadband services to ensure that their equipment accommodated the use of law enforcement wiretaps.

Communications Assistance for Law Enforcement Act

92 The ____ gave sweeping new powers both to domestic law enforcement and international intelligence agencies, including increasing the ability of law enforcement agencies to search telephone, e-mail, medical, financial, and other records.

USA PATRIOT Act

93 A ____ allows the FBI to intercept any communications to or by an intelligence target without specifying the telephone line, computer, or other facility to be monitored.

roving wiretap

94 Under the PATRIOT Act, the FBI can issue a ____ to compel banks, Internet service providers, and credit reporting companies to turn over information about their customers without a court order simply on the basis that information is needed for an ongoing investigation.

National Security Letter

95 In Doe v. Holder, the courts ruled that the NSL gag rule (prohibits NSL recipients from informing anyone that the government has secretly requested his or her records) violates the ____.

First Amendment

96 A(n) ____ terminates or repeals a law or portions of it after a specific date unless further legislative action is taken to extend the law.

sunset provision

97 The 1980 privacy guidelines set by the Organisation for Economic Co-operation and Development are also known as the ____ and are often held up as the model of ethical treatment of consumer data for organizations to adopt.

Fair Information Practices

98 The ____ requires member countries to ensure that data transferred to non-European Union countries is protected, and bars the export of data to countries that do not have data privacy protection standards comparable to the European Union's.

European Union Data Protection Directive

99 The ____ seal program identifies online businesses that honor their own stated privacy protection policies.

BBBOnLine

100 For a Web site to receive the ____ seal, its operators must demonstrate that it adheres to established privacy principles. The Web site must also agree to comply with that organization's oversight and consumer resolution process, and pay an annual fee.

TRUSTe