Chapter 2: Planning and Professionalism Flashcards

1
Q

When you are explaining something technical to a customer, which of the following is the best technique to use to confirm the customer understands your explanation?

A. As you explain, intersperse questions such as, “Does that make sense?”

B. After the explanation, give the customer a quiz.

C. Give the customer a printed explanation to read as you speak.

D. Maintain eye contact

A

A. As you explain, intersperse questions such as, “Does that make sense?” to confirm the customer’s understanding.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

When someone has explained something to you, how can you make sure you heard and understood what she said?

A. Focus.

B. Repeat it back in your own words.

C. Imagine how you sound and appear to the other person.

D. Nod your head frequently

A

B. Repeat it back in your own words. This confirms that you heard and understand.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which of the following is a technique you would use to show respect to a customer? Select all that apply.

A. Be as clear as possible and correct any misunderstandings.

B. Show the customer your company’s security policy.

C. Do not minimize the importance of what someone else tells you.

D. Treat others the way you like to be treated.

A

A, C, and D. These are all correct techniques for showing respect.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

When a customer is explaining a problem, what is the single most important thing you must do?

A. Nod your head to show understanding.

B. Empathize.

C. Allow the customer to explain the problem without interruption.

D. Show respect

A

C. Allowing the customer to interruption is the most important thing you must do when a customer is explaining a problem. explain the problem without

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What behavior shows a positive and professional attitude? Select all that apply.

A. Avoiding confrontation

B. Avoiding judgmental behavior

C. Showing respect

D. Minimizing another’s concerns

A

A, B, and C. These are all correct behaviors that show a positive and professional attitude.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

You believe you have witnessed prohibited behavior, and you have clearly identified it by referring to company policies. What should you do next?

A. Evaluate whether the policy is a good one and should be enforced.

B. Report the incident through proper channels.

C. Minimize the importance of the violation by finding a rationale.

D. Wait until you observe a second violation of the same policy

A

B. Report the incident through proper channels.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which of these is the best way to ensure that all employees are aware of an important security policy?

A. Post a notice in a prominent place telling people to read the policy online.

B. Post the policy in a prominent place.

C. Require employees to sign and date a statement saying they have read the policy.

D. Send the policy to all employees via SMS text message.

A

C. Having employees acknowledge reading the policy is the best way because it creates accountability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

When investigating the finding of prohibited content on an employee’s computer, it is important to:

A. Express your personal opinion about the situation.

B. Delete the prohibited content immediately from the computer.

C. Use your own judgment and be flexible.

D. Follow the company’s policies about what to do.

A

D. Following the company’s policies is essential; you protect both the company and yourself by doing so.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What type of document specifies how many users or devices you can legally install a certain software product on?

A. AUP

B. EULA

C. Source code

D. Public-domain license

A

B. An End User License Agreement (EULA) is the license agreement for software; it specifies the rules for how you can use the product.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which of these is not true of enterprise licensing?

A. It provides one installation disc (CD or DVD) for each user.

B. It is a better value for high-volume purchases than personal licensing.

C. It can be purchased on a per-seat basis.

D. It can be purchased on a per-user basis

A

A. Enterprise licensing typically does not provide installation media for each user; instead, it provides an executable setup file you can make your own copies of.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Product activation is a form of:

A. AUP

B. DRM

C. EULA

D. RCP

A

B. Product activation is a form of digital rights management (DRM).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which of these is an EU regulation that requires anyone collecting personal data to disclose that they are doing so?

A. HIPAA

B. PHI

C. GDPR

D. PII

A

C. The General Data Protection Regulation (GDPR) is the regulation that specifies rules about collecting and disclosing personal information.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which of the following is a document that defines what actions can be taken on data and computing resources in a company?

A. Acceptable-use policy

B. Chain of custody

C. Statement of libel

D. User manual

A

A. An acceptable-use policy defines what can be done with data and computing resources in a company in order to preserve the company’s interests.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which of these does not need to be included in IT documentation?

A. A unique ID

B. The purpose of the document

C. Contact information for a responsible person

D. The names of the managers who approved the document

A

D. Documentation does not need to have the names of everyone who approved the document.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Where should documentation be stored?

A. In a protected location where nobody can access it

B. In a shared location where everyone authorized to access it

can do so

C. On the hard drive of the author of it

D. On the hard drive of the manager responsible for keeping it updated

A

B. Documentation needs to be always accessible by all those who need it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which type of document would you create in order to record information about a security breach?

A. Incident documentation

B. Password policy

C. AUP

D. EULA

A

A. Incident documentation is a written account about a problem and its resolution.

17
Q

Which of these should not be included in an incident report?

A. Contact information for everyone involved in the incident

B. A detailed, objective description of the incident

C. What steps have been taken so far

D. Speculation about who is to blame for the incident

A

D. An incident report should not include speculation—only known, objective facts.

18
Q

Which of these is the best definition of change management?

A. A policy document that specifies the rules for making changes to IT systems

B. A disciplined approach to making system changes as smooth and problem free as possible

C. A way of making changes to a license agreement after

D. A schedule that specifies how often IT systems should be updated

A

B. The term change management describes a process for ensuring the success of IT system changes.

19
Q

Change management can help with which of the following objectives?

A. Enforce penalties when end users do not comply with change-related policies.

B. Raise funds to pay for implementing a change.

C. Reduce the number and severity of problems that occur due to a change.

D. Shut down all IT functions while a change is occurring.

A

C. Making a change happen with as few problems as possible is a primary objective of change management.

20
Q

Which of these is a document that describes a plan to implement an IT system change?

A. EULA proposal

B. PII proposal

C. HIPAA proposal

D. RFC proposal

A

D. A request for change (RFC) proposal presents a well-thought-out plan for making a change successfully; it is used to gain approval for the change from decision-makers within the company.