Information Security Management Flashcards

What is ransomware?

Answer: Malware that encrypts victim data and demands payment for decryption

Ransomware is malicious software that encrypts a victim's files and demands a ransom payment in exchange for the decryption key.

Which framework provides best practices for Information Security Management Systems (ISMS)?

Answer: ISO 27001

ISO 27001 is the international standard that provides a framework for establishing, implementing, and maintaining an Information Security Management System (ISMS).

What is a DMZ (Demilitarized Zone) in network security?

Answer: A network segment that separates the internal network from the public internet

A DMZ is a physical or logical network segment that isolates an organization's internal network from untrusted external networks while hosting public-facing services.

What is the purpose of a vulnerability assessment?

Answer: To identify weaknesses in systems that could be exploited by attackers

A vulnerability assessment systematically scans and identifies security weaknesses in systems, networks, or applications before attackers can exploit them.

Which authentication method uses biological characteristics for identity verification?

Answer: Biometric authentication

Biometric authentication uses unique physical or behavioral characteristics such as fingerprints, facial recognition, or iris scans to verify identity.

What does the Sarbanes-Oxley (SOX) Act require of US public companies regarding IT systems?

Answer: Maintain internal controls and audit trails for financial reporting systems

SOX requires US public companies to maintain adequate internal controls and audit trails in their financial reporting IT systems to prevent fraud.