CBO Technology & Information Systems 2 — Questions and Answers
Question 1: What is two-factor authentication (2FA)?
- A system requiring two employees to authorize all financial transactions
- A security process requiring users to provide two different verification factors to access an account (Correct answer)
- Software that enforces two separate passwords for different system permission levels
- A backup protocol that duplicates data simultaneously in two separate locations
Correct answer: A security process requiring users to provide two different verification factors to access an account
Two-factor authentication requires users to verify their identity using two distinct factors—typically something they know (password) and something they have (phone or token)—before granting access.
Question 2: What is the key difference between data backup and disaster recovery?
- They are the same process referred to by different names in different industries
- Backup preserves copies of data, while disaster recovery encompasses the full process to restore operations after a failure (Correct answer)
- Backup applies to financial data only, while disaster recovery covers all organizational data
- Backup is performed manually by IT staff, while disaster recovery is fully automated
Correct answer: Backup preserves copies of data, while disaster recovery encompasses the full process to restore operations after a failure
Data backup is the process of copying and archiving data, while disaster recovery is the broader strategy and set of procedures for restoring systems and operations following a disruptive event.
Question 3: What does SaaS stand for in the context of business software?
- Software as a Service (Correct answer)
- System and Application Security
- Standardized Accounting and Software
- Server and Application Suite
Correct answer: Software as a Service
SaaS (Software as a Service) is a cloud-based software delivery model where applications are hosted by a vendor and accessed by users over the internet, typically via a subscription.
Question 4: Which of the following is an example of social engineering in a cybersecurity context?
- Installing malware on a company server through a remote exploit
- Using automated tools to systematically crack employee passwords
- Manipulating an employee through deception into revealing confidential login credentials (Correct answer)
- Exploiting unpatched software vulnerabilities through code injection attacks
Correct answer: Manipulating an employee through deception into revealing confidential login credentials
Social engineering attacks exploit human psychology rather than technical vulnerabilities, tricking individuals into divulging confidential information or performing actions that compromise security.
Question 5: What is data encryption?
- Compressing data files to reduce required storage space
- Converting data into a coded format readable only with the correct decryption key (Correct answer)
- Organizing data into a structured relational database for efficient retrieval
- Creating multiple redundant copies of data to ensure availability
Correct answer: Converting data into a coded format readable only with the correct decryption key
Encryption transforms readable data (plaintext) into an unreadable format (ciphertext) using an algorithm and key, ensuring only authorized parties with the decryption key can access the original information.
Question 6: What is a primary advantage of cloud-based software for a small business operator?
- The business owns the physical servers running the software outright
- Lower upfront costs with the ability to scale resources based on actual business needs (Correct answer)
- Complete control over software update timing and internal maintenance schedules
- Consistently higher processing speeds compared to locally installed software
Correct answer: Lower upfront costs with the ability to scale resources based on actual business needs
Cloud-based software eliminates large upfront infrastructure investments and allows businesses to scale usage up or down based on need, converting capital expenses into predictable operating expenses.
Question 7: Which of the following best defines a data breach?
- A scheduled maintenance window that temporarily interrupts authorized data access
- An unauthorized access to or disclosure of sensitive, protected, or confidential information (Correct answer)
- A system malfunction that causes corruption of stored business data
- A planned migration of data from one storage system to another
Correct answer: An unauthorized access to or disclosure of sensitive, protected, or confidential information
A data breach is a security incident in which unauthorized individuals gain access to confidential or protected information, potentially exposing customer data, financial records, or trade secrets.
CBO Technology & Information Systems 2
What is two-factor authentication (2FA)?