Application Controls and Organizational Framework Quiz

What type of attack takes advantage of vulnerabilities in poorly coded web application software?

SQL injection attack

What can an attacker do when exploiting an input validation error in a web application?

Accessing the database, planting malicious code, or accessing other systems on the network

Why are large web applications using databases most vulnerable to SQL injection attacks?

They often fail to properly validate or filter user-entered data

How does the security of a firm's information system and data get affected by its people, organization, and technology?

It becomes vulnerable due to lack of governance and technological advancements Signup and view all the answers

Which of the following is an analysis that rates the likelihood of a security incident occurring and its cost?

Risk assessment Signup and view all the answers

Where would a statement ranking information risks and identifying security goals be included?

Security policy Signup and view all the answers

Which of the following components defines acceptable uses of a firm's information resources and computing equipment?

Administrative Signup and view all the answers

In the context of an organizational framework for security and control, where would a business continuity plan fall?

Business continuity plan Signup and view all the answers

What is the term for e-mail messages that mimic the e-mail messages of a legitimate business?

Phishing Signup and view all the answers

What are evil twins in the context of information systems vulnerability?

Computers that fraudulently access a website or network using the IP address and identification of an authorized computer Signup and view all the answers

What does pharming involve in the context of information systems vulnerability?

Setting up fake websites to ask users for confidential information Signup and view all the answers

Which method involves using e-mails to threaten or harass individuals in the context of information systems vulnerability?

Cyberwarfare Signup and view all the answers

Which of the following best describes application controls?

Can be classified as input controls, processing controls, and output controls Signup and view all the answers

Which of the following statements accurately describes application controls?

They apply to all computerized applications and consist of a combination of hardware, software, and manual procedures that create an overall control environment Signup and view all the answers

What do application controls primarily focus on?

Ensuring the security and control of computer programs and data files throughout the organization Signup and view all the answers

What is the main purpose of application controls?

Ensuring the security and integrity of data during input, processing, and output stages Signup and view all the answers