Multiple choice questions. Consider the following short case in responding to these questions:

Tim was upset with his accounting instructor because of the grade he earned in her class. As an act of revenge, Tim used a computer program he downloaded from the Internet to discover the instructor's password for the university's information system. He used the password to infiltrate the system and introduced a program that would shut it down; he contacted his accounting instructor and threatened to activate the program if she did not change his grade.

1. Which elements of Carter's taxonomy apply?

a. Target and instrumentality b. Target and incidental c. Instrumentality and incidental d. Target, instrumentality, and incidental

2. Which of the following are administrative controls the university should implement to prevent such situations in the future?

a. Backup files, strong passwords b. Backup files, mandatory password rotation c. Strong passwords, mandatory password rotation d. Backup files, strong passwords, mandatory password rotations

3. Because Tim is threatening his instructor, his actions are best described as:

a. Extortion b. Malicious software c. Information theft d. Service interruption

4. Which of the following statements is most true with respect to CoBIT's enablers?

a. Since the university is not a business, the "process" enabler is irrelevant in the case. b. Tim's accounting instructor must be incompetent since she could neither prevent nor detect Tim's action until it was too late. c. If the university had an appropriate organizational structure in place, the problem would have been prevented. d. At the minimum, the university needs to consider two enablers: culture/ethics/behavior, and services/infrastructure/applications.

5. Consider CoBIT's five principles. The relevant stakeholders in this case include:

a. Tim and his accounting instructor only. b. Tim and all instructors (including his accounting instructor) ath the university. c. All students (including Tim) and Tim's accounting inspector only. d. All students (including Tim) and all instructors (including Tim's accounting instructor) at the university.