Information Systems Flashcards

Which of the following best describes a 'phishing' attack?

Answer: Deceiving users into revealing credentials through fraudulent communications

Phishing uses deceptive emails or websites that impersonate legitimate entities to trick users into disclosing sensitive information.

In an ERP system, a 'three-way match' refers to matching:

Answer: Invoice, purchase order, and receiving report

A three-way match compares the vendor invoice, purchase order, and receiving report to ensure agreement before payment is authorized.

Which network security device inspects incoming and outgoing traffic based on predefined rules to block unauthorized access?

Answer: Firewall

A firewall monitors and filters network traffic based on security rules, blocking unauthorized connections while permitting legitimate traffic.

Recovery Time Objective (RTO) is defined as:

Answer: The target duration within which a system must be restored after a disruption

RTO specifies the maximum tolerable downtime before a system must be operational again to avoid unacceptable business impact.

Which of the following is an example of a preventive IT control?

Answer: Requiring dual authorization for wire transfers over $50,000

Requiring dual authorization prevents unauthorized transactions from occurring in the first place, making it a preventive control.

What is the primary function of a public key infrastructure (PKI)?

Answer: Managing digital certificates and cryptographic keys to enable secure communication

PKI issues, manages, and revokes digital certificates that authenticate identities and enable encrypted communications.

A company's IT policy requires that terminated employees' access be revoked within one hour. Which process supports this requirement?

Answer: Identity and access management (IAM)

IAM processes govern the provisioning and deprovisioning of user access, ensuring timely removal of rights for terminated employees.