Questions and Well Verified Answers||Newest
Updated ,Expert Guarantee Pass and 100%
Accurate |Graded A+ ,Reviewed and Rationalized
|Latest Exam and Brand New Version!!!
A document that stipulates restrictions and practices that a user must agree in
order to use organizational computing and network resources.
ANSWER:<< acceptable use policy (AUP)
When an organization decides to accept a risk because the cost of avoiding the
risk outweighs the potential loss of the risk. A decision to accept a risk can be
extremely difficult and controversial when dealing with safety-critical systems
because making that determination involves forming personal judgments about
the value of human life, assessing potential liability in case of an accident,
evaluating the potential impact on the surrounding natural environment, and
estimating the system's costs and benefits.
ANSWER:<< acceptance
A network attack in which an intruder gains access to a network and stays
there—undetected—with the intention of stealing data over a long period of time
(weeks or even months).
ANSWER:<< advanced persistent threat (APT)
A software development methodology in which a system is developed in
iterations lasting from one to four weeks. Unlike the waterfall system
development model, agile development accepts the fact that system
,requirements are evolving and cannot be fully understood or defined at the start
of the project.
ANSWER:<< agile development
An agreement of the World Trade Organization that requires member
governments to ensure that intellectual property rights can be enforced under
their laws and that penalties for infringement are tough enough to deter further
violations.
ANSWER:<< Agreement on Trade-Related Aspects of Intellectual Property
Rights (TRIPS)
A wide-ranging act that authorized $787 billion in spending and tax cuts over a
10-year period and included strong privacy provisions for electronic health
records, such as banning the sale of health information, promoting the use of
audit trails and encryption, and providing rights of access for patients.
ANSWER:<< American Recovery and Reinvestment Act
The estimated loss from a potential risk event over the course of a year. The
following equation is used to calculate the annual loss expectancy: ARO × SLE =
ALE. Where ARO is the annualized rate of occurrence, an estimate of the
probability that this event will occur over the course of a year and SLE is the
single loss expectancy, the estimated loss that would be incurred if the event
happens.
ANSWER:<< annualized loss expectancy (ALE)
An estimate of the probability that a risk event will occur over the course of a
year.
ANSWER:<< annualized rate of occurrence (ARO)
The expression of opinions by people who do not reveal their identity.
ANSWER:<< anonymous expression
,A service that allows anonymity on the Internet by using a computer program
that strips the originating header and/or IP address from the message and then
forwards the message to its intended recipient.
ANSWER:<< anonymous remailer service
Laws designed to reduce frivolous SLAPPs (strategic lawsuit against public
participation (SLAPP), which is a lawsuit filed by corporations, government
officials, and others against citizens and community groups who oppose them
on matters of concern).
ANSWER:<< anti-SLAPP laws
Software that scans for a specific sequence of bytes, known as a virus
signature, that indicates the presence of a specific virus.
ANSWER:<< antivirus software
The people, procedures, hardware, software, data, and knowledge needed to
develop computer systems and machines that can simulate human intelligence
processes, including learning (the acquisition of information and rules for using
the information), reasoning (using rules to reach conclusions), and self-
correction (using the outcome from one scenario to improve its performance on
future scenarios).
ANSWER:<< artificial intelligence systems
A group that provides assistance to the board of directors in fulfilling its
responsibilities with respect to the oversight of the quality and integrity of the
organization's accounting and reporting practices and controls, including
financial statements and reports; the organization's compliance with legal and
regulatory requirements; the qualifications, independence, and performance of
the company's independent auditor; and the performance of the company's
internal audit team.
ANSWER:<< audit committee
, The elimination of a vulnerability that gives rise to a particular risk in order to
avoid the risk altogether. This is the most effective solution but often not
possible due to organizational requirements and factors beyond an
organization's control.
ANSWER:<< avoidance
The moral corruption of people in power, which is often facilitated by a tendency
for people to look the other way when their leaders act inappropriately.
ANSWER:<< Bathsheba syndrome
A method or technique that has consistently shown results superior to those
achieved with other means and that is used as a benchmark within a particular
industry.
ANSWER:<< best practice
The first 10 amendments to the United States Constitution that spell out
additional rights of individuals.
ANSWER:<< Bill of Rights
A type of dynamic testing that involves viewing the software unit as a device that
has expected input and output behaviors but whose internal workings are
unknown (a black box).
ANSWER:<< black-box testing
A sophisticated threat that combines the features of a virus, worm, Trojan horse,
and other malicious code into a single payload.
ANSWER:<< blended threat