Chapter 7 (Security) Flashcards

1
Q

Several areas of Security include ________, ________, ________, and __________.

A

Physical
Digital
Operational
Data
Corporate IT Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

A document that outlines the minimum standards required to secure the organization’s technology-relatied systems, assets, and data. It also outlines the rules and procedures for accessing the organization’s systems and data.

A

Security Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

A Purpose, Scope, Definitions Section, and an Appendix is included in most _________.

A

Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What section of a policy states what the policy is protecting and why?

A

Purpose

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What section of a policy defines the people impacted by the policy, such as employees and contractors, and a description of the systems the policy is covering?

A

Scope

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What section of a policy outlines the rules and procedures regarding accessing the organization’s systems and data?

A

Scope

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What document outlines the HOW we are going to accomlish a task?

A

Procedure Document

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What section of a policy includes descriptions of equipment, data, services, etc..?

A

Defenitions Section

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What section of a policy will outline who performs the inventory and disposal and the employees role on allowing access for these activities?

A

Roles and Responsibilities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

A type of security for those who create products, intellectual property, or unique services

A

Branding Restrictions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What involves a trademark, copyright, registered trademark, or patent?

A

Branding

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is generally used to identify a company, brand names, logos, and such?

A

Trademark

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What identifies the intellectual property of a company and is registered with teh U.S. Patent and Trademark Office?

A

Registered Trademark

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is used for intellectual property such as books, music, recordings, and so on?

A

Copyright

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Intellectual property that is awaiting acceptance by the Patent and Trademark Office is designated as ________.

A

Patent Pending

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What type of security involves securing assets such as mobile devices, removable media devices, access to facilities, and more?

A

Physical Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What type of security includes policies for performing background checks and security clearance?

A

Operational Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What three levels of Security Clearance are there for the U.S. Department of State?

A

Confidental
Secret
Top Secret

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What type of security policies are related to access and permissions to digital assets? This may include systems, data, communication equipment, etc..

A

Digital Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

MFA

A

Multifactor Authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

A process whereby the user must use two or more methods to verify their identity during the sign-in process.

A

Multifactor Authentication (MFA)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

A way for users who are not physically located at the organization’s site to access information.

A

Remote Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What type of security policies define access by roles and responsibilities and/or by data classification?

A

Data Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

A way to describe data ccording to it’s sensitivity, type, and value to the organization.

A

Data classification

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

PII
PHI

A

Personal Identifiable Information
Personal Health Information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

When information should only be shared with those who have a need-to-know to perform a task or fulfuill their job function.

A

Need-To-Know Basis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Who has the rprimary role of estimating the costs to complete the work of the project, determining the project budget, and estimating the total cost of the project?

A

Project Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Two areas where you want to be as accurate as possible when presenting estimates.

A

Cost Baseline
Schedule Baseline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Four techniques to determine cost estimates

A

Analogous
Parametric
Bottom-up
Three-Point

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Analogous Estimating is also know as _________.

A

Top-Down Estimating

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Determines the cost of the project at a high level by using a similar past project as a basis for the estimate. Usually uued when there is not alot of detail on the project.

A

Analogous (Top-Down) Estimate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Determines the cost of a project by using a mathematical model to compute costs and often uses the quality of work multiplied by the rate.

A

Parametric Estimating

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Which is the most precise cost-estimating technique?

A

Bottom-Up Estimating

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

The total time it will take for a person to complete the task if they do nothing else from the time they start until the task is complete.

A

Work Effort

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Determines the cost of the project by assigning a cost estimate to each work package on the project.

A

Bottom-Up Estimate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Determines the cost of the project by being an average of the Most Likely Estimate, the Optimistic Estimate, and the Pessimistic estimate.

A

Three-Point Estimate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Which estimate assumes the costs will come in as expected?

A

Most Likely Estimate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Which estimate is an estimate that is better than expected?

A

Optimistic Estimate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Which estimate assumes the goods or services will cost more than expected?

A

Pessimistic Estimate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Let’s say your most likely estimate for contracting work is $302 per hour. The optimistic estimate is $250 per hour, and the pessimistic estimate is $400 per hour. Using the three-point estimate, create an equation and write the answer.

A

($302+$250+400) / 3 = $317.33

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is a Loaded Rate?

A

A percentage of the emplyee’s salary to cover benifits such as medical, disibility, or pension plans.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What do you do next once the cost estimate is completed?

A

Prepare the Budget

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

The process of aggregating all the cost estimates and establishing a cost baseline for the project.

A

Budgeting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

The total expected cost for the project

A

Cost Baseline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

PMO

A

Program Management Office

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Program Management Offices’ tasks are to

A

Over see project budgets, approve expenses, and track all the project budgets

47
Q

Which department defines the cost categories Project Budgets are broken down into?

A

Accounting Department

48
Q

Name a few examples of Cost Categories

A

Salary
Hardware
Software
Travel
Training
Materials
Supplies

49
Q

CapEx

A

Capital Expenses

50
Q

OpEx

A

Operational Expenses

51
Q

Which type of expense applies to assets that are expected to provide benefits to the organization for an extended time into the future? (software purchases, equipment purchases, building purchases, etc..)

A

Capital Expenses

52
Q

Which type of expense applies to whats needed to run the day-to-day activities of the business? (Training, Salaries, Rent, etc..)

A

Operational Expenses

53
Q

Which type of expense is a certain amount of money set aside to cover costs resulting from possible adverse events or unexpected issues on the project?

A

Contigency Reserve

54
Q

Which type of expense is an amount set aside by upper management to cover future sitauations that can’t be predicted?

A

Management Reserve

55
Q

The total approved exptected cost for the project.

A

Cost Baseline

56
Q

What type of graph is this?

A

Cost Baseline

57
Q

Measuring the project spending to date, determining the how fast you’re going through the money (burn rate), and tracking expenditures to the cost baseline so that stakeholders can see what was planned versus what was actually spent on the project.

A

Expenditure Tracking

58
Q

The mechinism you’ll use to report on the current state of the project budget.

A

Expenditure Reporting

59
Q

What shows the remaining time and work effort for the itteration?

A

Agile Burndown Chart

60
Q

What shows the Burn Rate (the rate at which you are spending funds over time) for the budget over the scheduled timeline?

A

Budget Burnout Chart

61
Q

The rate at which you are spending funds over time

A

Burn rate

62
Q

What is this chart an example of?

A

Budget Burndown Chart

63
Q

EVM

A

Earned Value Measurement

64
Q

A performance measurement technique that compares what your project has produced to what you’ve spent by monitoring the planned value, earned value, and actual costs expended to produce the work of the project.

A

Earned Value Measurement (EVM)

65
Q

The primary functions of _______________ is to determine and document the cause of the varience, to determine the impact of the varience, and to determine whether a corrective action should be implemented as a result.

A

Earned Value Measurement (EVM)

66
Q

___________________ allows you to forcast where the project is headed.

A

Earned Value Measurement (EVM)

67
Q

To perform the Earned Value Measruement calculations, you need to first gather these three measurements:

A

Planned Value
Actual Cost
Earned Value

68
Q

The cost of work that has been authorized and budgeted for a specific activity.

A

Planned Value

69
Q

PV

A

Planned Value

70
Q

Money that’s actually been spent during a given time period for completing work

A

Actual Cost

71
Q

AC

A

Actual Cost

72
Q

The value of the work completed to date as it compares to the budgeted amount.

A

Earned Value

73
Q

EV

A

Earned Value

74
Q

What tells you whether your costs are higher than budgeted or lower than budgeted?

A

Cost Variance

75
Q

CV

A

Cost Variance

76
Q

What is the formula for Cost Variance (CV)?

A

CV = EV - AC

77
Q

Compares an activitiy’s actual progress to date to the estimated progress and is represented in terms of cost.

A

Schedule Variance

78
Q

What is the Schedule Variance formula?

A

SV = EV - PV

79
Q

CPI

A

Cost Performance Index

80
Q

Measures the value of the work completed at the measurement date against the actual cost.

A

Cost Performance Index (CPI)

81
Q

What is the Cost Performance Index (CPI) formula?

A

CPI = EV / AC

82
Q

SPI

A

Schedule Performance Index

83
Q

Measures the progress to date against the progress that was planned.

A

Schedule Performance Index

84
Q

What is the scheduel Performance Index forumla?

A

SPI = EV / PV

85
Q

The rate you are spending money over time.

A

Burn Rate

86
Q

ETC

A

Estimate to Complete

87
Q

The cost estimate for the remaining project work

A

Estimate to Complete (ETC)

88
Q

What is the Estimate to Complete (ETC) forumla?

A

ETC = Budget - Spend to Date

89
Q

A potential future event that can have either negative or positive impacts on the project.

A

Risk

90
Q

Deals with how you manage the areas of uncertainty in you project

A

Risk Planning

91
Q

What are the three components to risk planning?

A

Risk Identification
Risk Analysis
Preparing Risk Response

92
Q

The process of determining and documenting the potential risk that could occur on you project

A

Risk Identification

93
Q

A list of risks that includes an identification number, risk name, risk description risk owner, and risk plan.

A

Risk Register

94
Q

The person responsible for monitoring the project to determine whether the potential for the risk event is high and for implementing the risk reponse plan should it occur.

A

Risk Owner

95
Q

Risks that are catastrophic in nature and are outside of the control of the organization.

A

Force Majeure

96
Q

SWOT

A

Stengths, Weaknesses, Opportunities, and Threats

97
Q

Involves analyzing the project from each of these perspective: Strength, Weakness, Opportunities, and Threats

A

SWOT

98
Q

Examines what you organization does well

A

Strengths

99
Q

Areas the organization could improve upon

A

Weaknessess

100
Q

Identifies risks that have the greatest possibility of occurring and the greatest impact to the project if they do occur.

A

Risk Analysis

101
Q

A way to prioratize and quantify risks so they are easy to understand

A

Impact Analysys

102
Q

The likelighood that a risk event will occur

A

Probability

103
Q

The consequence the risk poses to the project if it occurs

A

Impact

104
Q

Probability with wieght by which measurements?

A

0.0 - 1.0

105
Q

Impacts are weighed by which measurements?

A

0 - 10

106
Q

The process of determining the probability and impact of the risks and ranking them in order of priority to determine which ones need response plans.

A

Qualitative Analysis

107
Q

The process of assigning numeric probabilities to risks and their impacts on project objectives

A

Quantitative Analysis

108
Q

Looks at risks from the perspective of various situations or scenarios that may occur as the project progresses.

A

Situational/Scenario Analysis

109
Q

An analysis that uses cost or schedule variables that are input into the model and then replicated several times to estimate potential outcomes for each of the variables used.

A

Monte Carlo Analysis

110
Q

The process of reviewing the risk analysis and determining what action should be taken to reduce negative impacts.

A

Preparing Risk Responses

111
Q

Reducing the impact or the probability of the risk

A

Mitigate

112
Q

A sign or a precursor signaling that a risk event is about to occur.

A

Risk triggers

113
Q

Who is reponsible for monitoring the risk assigned to them and watching for risk triggers?

A

Risk Owner

114
Q

Describes who should be alerted once a risk event occurs

A

Points of Escalation