Chapter 8 Securing Information Systems

25)
Authentication refers to the ability to know that a person is who he or she
claims to be.

26)
An MIS audit examines the firm’s overall security environment as well as
controls governing individual information systems.

27)
A firewall is a combination of hardware and software that controls the flow of
incoming and outgoing network traffic.

28)
Computers using cable modems to connect to the Internet are more open to
penetration than those connecting via dial-up.

29)
Wireless networks are vulnerable to penetration because radio frequency bands
are easy to scan.

30)
The range of Wi-Fi networks can be extended up to two miles by using external
antennae.

31)
The WEP specification calls for an access point and its users to share the same
40-bit encrypted password.

32)
Viruses can be spread through e-mail.

33)
Computer worms spread much more rapidly than computer viruses.

34)
One form of spoofing involves forging the return address on an e-mail so that
the e-mail message appears to come from someone other than the sender.

35)
Sniffers enable hackers to steal proprietary information from anywhere on a
network, including e-mail messages, company files, and confidential reports.

36)
DoS attacks are used to destroy information and access restricted areas of a
company’s information system.