Managing Risk

Question 1

Security Policy

Answer 1

A written document that defines how an organization will protect its IT infrastructure.

Question 2

AUP

Answer 2

Acceptable Use Policy; defines what is and what is not acceptable to do on an organization’s computers.

• Ownership
• Network Access
• Privacy/consent to Monitoring
• Illegal Use

Question 3

Network Access Policy

Answer 3

defines who may access the network, how they may access the network, and what they can access.

• Pricileged user agreement policy
• Passwork Policy
• Data Loss PreventionPolicy
• Remote Access Policy

Question 4

Change Management

Answer 4

The process of creating change in your infrastructure in an organized, controlled, and safe way.

Question 5

Patch Management

Answer 5

The process of regularly updating operating systems and application to avoid security threats.

Question 6

VRRP & HSRP

Answer 6

Virtual Router Redundancy Protocol (open standard) & Hot Standby Router Protocol (cisco)

Both protocols take multiple routers and gang them together into a single virteal router with a single virteal IP address that clients use as a default gateway

Question 7

Standard Business Documents

Answer 7

• Service Level Agreement
• Memorandum of Understanding
• Multi-Source Agreement
• Statement of Work
• Nondisclosure Agreement

Question 8

Service Level Agreement

Answer 8

A document between a customenr and a service provider that defines the scope. puality. and terms of the service to be proided.

A typical SLA from and ISP contains the following:

• Definition fo the service provided
• Equipment
• Technical Support

Question 9

Memorandum of Understanding

Answer 9

A document that defines an agreement between two parties in sitiation swhere a legal contract wouldn’t be appropriate

Question 10

Multi-Source Agreement

Answer 10

A document that details the interoperability of network hardware from a variety of manufacturers

Question 11

Statment of Work

Answer 11

A contract that defines the services, porducts, and time frames for the vendor to achieve.

Question 12

MTBF

Answer 12

Mean Time Between Failures:

A factor typically applied to a hardware component that represent the manufacturer’s best guess regarding how much time will pass between major failures of that component

Question 13

MTTR

Answer 13

Mean Time To Recovery:

The estimated amount of time it takes to recover from a hardware component failure

Question 14

Computer Forensics

Answer 14

• Secure the area
• Document the scene
• Dollect evidence
• Interface with authorities