- (Exam Topic 2)
Which of the following is an example of a phishing attack?

1. A. An employee receives an email that appears to be from the organization's bank, though it is no
2. B. The employee replies to the email and sends the requested confidential information.
3. C. An organization's website has been hacke
4. D. The hacker added political content that is not consistent with the organization's views.
5. E. An organization's systems have been compromised by malicious softwar
6. F. The software locks the organization's operating system until d ransom is paid.
7. G. An organization's communication systems have been intercepte
8. H. A communication session is controlled by an unauthorized third party.

Correct Answer: A

- (Exam Topic 1)
Which of the following is always true regarding the use of encryption algorithms based on public key infrastructure (PKI)?

1. A. PKI uses an independent administrator to manage the public key.
2. B. The public key is authenticated against reliable third-party identification.
3. C. PKI's public accessibility allows it to be used readily for e-commerce.
4. D. The private key uniquely authenticates each party to a transaction.

Correct Answer: D

- (Exam Topic 1)
Which of the following borrowing options is an unsecured loan?

1. A. Second-mortgage financing from a bank.
2. B. An issue of commercial paper.
3. C. Pledged accounts receivable.
4. D. Asset-based financing.

Correct Answer: B

- (Exam Topic 1)
The decision to implement enhanced failure detection and back-up systems to improve data integrity is an example of which risk response?

1. A. Risk acceptance.
2. B. Risk sharing.
3. C. Risk avoidance.
4. D. Risk reduction.

Correct Answer: D

- (Exam Topic 2)
An organization's network administrator received an email that appeared to come from the organization's external IT service provider requesting his credentials to perform an update of a server operating system If the IT service provider did not send the email, which of the following best describes the likely purpose of the email?

1. A. An attempt at phishing.
2. B. An attempt at penetration testing
3. C. An attempt to patch the server
4. D. An attempt to launch malware

Correct Answer: A