SOLVED

61) Which of the following types of plans describes how a business resumes operation after a disaster? A) business continuity plan B) internal operations plan C) collocation facilities plan D) emergency operation plan E) virtual private network plan 62) Recovery point objectives of a recovery plan specify ________. A) the maximum time allowed to recover from a catastrophic event B) data structures and patterns of the data C) the minimum time allowed to recover from a catastrophic event D) how current the backup data should be E) the capacity of a backup server in storing the necessary data 63) Controls that are used to assess whether anything went wrong, such as unauthorized access attempts are called ________ controls. A) detective B) preventive C) corrective D) adaptive E) protective 64) Organizations periodically have an external entity review the controls so as to uncover any potential problems in the controls. This process is called ________. A) an information systems audit B) risk analysis C) information modification D) a recovery point objective analysis E) a recovery time objective analysis 65) Which of the following laws makes it mandatory for organizations to demonstrate that there are controls in place to prevent misuse or fraud, controls to detect any potential problems, and effective measures to correct any problems? A) Sarbanes-Oxley Act B) Trade Expansions Act of 1962 C) Electronic Communications Privacy Act of 1986 D) Central Intelligence Agency Act E) USA Patriot Act 66) Which of the following types of control is used to define the aims and objectives of an organization? A) standards B) procedures C) schemes D) policies E) systems 67) Which of the following is an example of organization and management control? A) policies about incident reporting B) collocation facilities at an organization C) general policies about rights of access D) generation of activity logs of employees E) general policies about disaster planning 68) Computer crime is defined as the act of using a computer to commit an illegal act. 69) Computer criminals who attempt to break into systems or deface Web sites to promote political or ideological goals, such as antiwar campaigns, are called ethical hackers. 70) Employees steal time on company computers to do personal business. This is a form of unauthorized access.