Quiz 15

Question 1

Which of the following is a basic measure of reliability for systems that cannot be repaired?
mean time to failure
mean time to operate
failure in time
mean time to recovery

Answer 1

mean time to failure

Question 2

Which threat category impacts the daily business of the organization?
compliance
managerial
operational
strategic

Answer 2

operational

Question 3

What type of learner tends to sit in the middle of the class and learns best through lectures and discussions?
kinesthetic
visual
spatial
auditory

Answer 3

auditory

Question 4

The classification designation of government documents is typically Top Secret, Secret, Unusual, Confidential, and Unclassified.
True
False

Answer 4

False

Question 5

What specific type of mechanism should be utilized by all types of training to provide input from participants on the training’s effectiveness so that any needed modifications can be made for future training?
participant feedback mechanism
training mechanism
feedback mechanism
survey feedback mechanism

Answer 5

feedback mechanism

Question 6

What type of risk calculation uses an “educated guess” based on observation?
qualitative risk calculation
environmental risk calculation
quantitative risk calculation
observational risk calculation

Answer 6

qualitative risk calculation

Question 7

Risk avoidance involves identifying the risk and making the decision to engage in the activity.
True
False

Answer 7

False

Question 8

Select the specific type of interview that is usually conducted when an employee leaves the company.
last interview
exit interview
post interview
initial interview

Answer 8

exit interview

Question 9

Which term below describes the art of helping an adult learn?
metagogical
deontological
andragogical
pedagogical

Answer 9

andragogical

Question 10

The FIT calculation is another way of reporting MTTF.
True
False

Answer 10

False

Question 11

What term can be described as a function of threats, consequences of those threats, and the resulting vulnerabilities?
management
risk
threat
mitigation

Answer 11

risk

Question 12

What type of control is designed to provide an alternative to normal controls that for some reason cannot be used?
detective control
deterrent control
compensating control
preventive control

Answer 12

compensating control

Question 13

Distributive allocation refers to “eliminating” the risk.
True
False

Answer 13

False

Question 14

What kind of policy defines the actions users may perform while accessing systems and networking equipment?
privacy use policy
VPN access policy
acceptable use policy
network use policy

Answer 14

acceptable use policy

Question 15

A physical control attempts to discourage security violations before they occur.
True
False

Answer 15

False

Question 16

A subject’s privilege over an object should follow the principle of least privilege.
True
False

Answer 16

True

Question 17

Which of the following refers to the start-up relationship between partners?
partner beginning
starting partner agreement
partner on-boarding
partner trust

Answer 17

partner on-boarding

Question 18

Generally considered to be the most important information security policies, what item below defines the actions a user may perform while accessing systems and networking equipment?
encryption policies
acceptable use policies
data loss policies
VPN policies

Answer 18

acceptable use policies

Question 19

What describes an agreement between two or more parties and demonstrates a “convergence of will” between the parties so that they can work together?
ISA
MOU
BPA
NDA

Answer 19

MOU

Question 20

Vendor-specific guides are useful for configuring web servers, operating systems, applications servers, and network infrastructure devices.
True
False

Answer 20

True

Question 21

Select the option that best describes an asset:
any item that has a positive economic value
any item that is owned by an enterprise
any item that is used by management
any item that is used by all employees

Answer 21

any item that has a positive economic value

Question 22

What can be defined as the planning, coordination, and communications functions that are needed to resolve an incident in an efficient manner?
incident reporting
incident planning
incident handling
incident management

Answer 22

incident handling

Question 23

What control is designed to identify any threat that has reached the system?
deterrent control
preventive control
compensating control
detective control

Answer 23

detective control

Question 24

What type of learner learns best through hands-on approaches?
auditory
kinesthetic
spatial
visual

Answer 24

kinesthetic

Question 25

Websites that group individuals and organizations into clusters or groups based on some sort are considered to be what type of networks? social engineering network social control network social management network social media network

Answer 25

social media network

Question 26

What is the name for a framework and corresponding functions required to enable incident response and incident handling within an organization? incident reporting incident planning incident handling incident management

Answer 26

incident management

Question 27

Assessing risk should include testing of technology assets to identify any vulnerabilities. True False

Answer 27

True

Question 28

Which threat category affects the long-term goals of the organization? compliance managerial strategic operational

Answer 28

strategic

Question 29

Which of the following is considered to be a common security issue? (Choose all that apply.) authentication issues certificate issues encrypted credentials management issues

Answer 29

authentication issues certificate issues

Question 30

Many cloud providers allow customers to perform penetration tests and vulnerability scans without permission and whenever is necessary. True False

Answer 30

False

Question 31

What type of threat is a threat related to the natural surroundings of an enterprise? environmental threat external threat biological threat internal threat

Answer 31

environmental threat

Question 32

What term best describes the ability to continue to function as the size or volume of the enterprise data center expands to meet the growing demands? adaptability flexibility scalability automation

Answer 32

scalability

Question 33

Which of the following is an agreement that is intended to minimize security risks for data transmitted across a network? BPA MOU SLA ISA

Answer 33

ISA

Question 34

A security control is any device or process that is used to reduce risk. True False

Answer 34

True

Question 35

What is a service contract between a vendor and a client that specifies what services will be provided, the responsibilities of each party, and any guarantees of service? ISA MOU BPA SLA

Answer 35

SLA

Question 36

Due to the potential impact of changes that can affect all users in an organization, and considering that security vulnerabilities can arise from uncoordinated changes, what should an organization create to oversee changes? compliance team security control team incident response team change management team

Answer 36

change management team

Question 37

A collection of suggestions that should be implemented is referred to as a: security procedure baseline guideline security policy

Answer 37

guideline

Question 38

A written document that states how an organization plans to protect the company's information technology assets is a: guideline standard security procedure security policy

Answer 38

security policy

Question 39

Select the option that best describes a policy: A collection of suggestions that should be implemented A list of all items that have a positive economic value A document that outlines specific requirements or rules that must be met A collection of requirements specific to the system or procedure that must be met by everyone

Answer 39

A document that outlines specific requirements or rules that must be met

Question 40

Which of the following is a network that moves a product from the supplier to the customer and is comprised of vendors that supply raw material, manufacturers who convert the material into products, warehouses that store products, distribution centers that deliver them to the retailers, and retailers who bring the product to the consumer?

Answer 40

supply chain