saint com590 final exam latest

08 Jun saint com590 final exam latest

Question

<pclass=”msonormal” style=”box-sizing: border-box;”>

Question 1. Question :

Which of the followg is generally not true of contractor workers?

Temporary assignments

Are often fast learners

Must comply with the same security policies as regular employees

Cost much more than regular employees because of more advanced skill sets

(not graded)

Comments:

Question 2. Question :

What is pretextg associated with?

Hirg personnel

Communication between senior management and general employees

Policy dissemation

Social engeerg

Comments:

Question 3. Question :

Which of the followg is a policy that prohibits access or storage of offensive content?

HIPAA

SOX

AUP

GLBA

Comments:

Question 4. Question :

A standard for Web Services from an external provider would be part of which set of policies?

WAN Doma policies

LAN Doma policies

User Doma policies

System/Application Doma policies

Comments:

Question 5. Question :

A policy that addresses virus control would be part of which domas’ policies?

Workstation

LAN

Both A and B

Neither A nor B

Comments:

Question 6. Question :

A control standard that separates the development environment from the production environment would be found which set of policies?

WAN Doma policies

LAN Doma policies

User Doma policies

System/Application Doma policies

(not graded)

Comments:

Question 7. Question :

Before a BCP can be completed, a(n) __________ must first be completed and agreed upon by all the key departments with the organization.

AUP

PAA

DRP

BIA

Comments:

Question 8. Question :

What is a security benefit of routely deletg electronic documents that are no longer required for legal or busess reasons?

Frees up storage space

Reduces search times

Reduces the likelihood of accidental disclosure

Makes the auditg process easier

(not graded)

Comments:

Question 9. Question :

What is considered to be a natural extension of the BIA when conductg a BCP?

RTO

DRP

BCP

RTA

Comments:

Question 10. Question :

What is a basic approach to provg that digital evidence has not been tampered with?

Evidence log

Photographs durg analysis

Matchg hash values

File timestamps

Comments:

Question 11. Question :

Before an cident can be declared, the IRT must develop an cident __________ for cident response.

budget

procedure

control

discovery process

Comments:

Question 12. Question :

When respondg to an cident, when does the IRT timele start?

When an cident is discovered

Once an cident is formally declared

When an cident escalates

Once the cident is contaed

Comments:

Question 13. Question :

Common IRT members may be IT subject matter experts, IT security reps, HR reps, and __________ reps.

legal

shippg

payroll

none of these

Comments:

Question 14. Question :

What is the best way to measure a specific user’s comprehension of security awareness trag?

The user’s satisfaction with centives for completg trag

Attendee terviews after trag

Anonymous surveys after trag

The number of organization-wide security cidents that occur with six month after trag

Comments:

Question 15. Question :

Accountability, lack of budget, lack of priority, and tight schedules are examples of:

cident response challenges.

security challenges.

organizational challenges.

busess challenges.

Comments:

Question 16. Question :

Which of the followg is a common cause of security breaches?

Improved trag and security awareness

creased employee motivation

adequate management and user decisions

Outsourced processg to vendors

Comments:

Question 17. Question :

Which of the followg is the least effective way to dissemate security policies large organizations?

Postg on an tranet

Through face-to-face trag

Via hard copy

E-mailed PDFs

Comments:

Question 18. Question :

Which organizational committee ensures that an external service provider is meetg the service level agreement (SLA) the contract?

Vendor governance committee

Security compliance committee

Operational risk committee

Architecture review committee

Comments:

Question 19. Question :

Which of the followg is least likely to dicate the effectiveness of an organization’s security policies?

Policy compliance reviews

Vulnerability assessments

An cident response plan

Detective controls

Comments:

Question 20. Question :

What is the name of a common control that is used across a significant population of systems, applications, and operations?

Persistent

Pervasive

Enterprise

Perpetual

Comments:

Question 21. Question :

Which employee role is directly accountable to ensure that employees are implementg security policies consistently?

IT support personnel

CISO

Senior management

Front-le manager

Comments:

Question 22. Question :

Which organization created the Security Content Automation Protocol (SCAP) as part of its responsibilities under FISMA?

The MITRE Corporation

US-CERT

NIST

Microsoft

Comments:

Question 23. Question :

Which of the followg provides a standard focused on the mimum security settgs that must be applied?

Basele

Model Process

Framework

Policy

Comments:

Question 24. Question :

A(n) __________ can clude a computer’s full operatg system, applications, and system settgs, cludg security and configuration settgs.

basele

group policy

patch

image

Comments:

Question 25. Question :

What is required to support digital signatures?

A security policy

A public key frastructure (PKI)

The Wdows operatg system

Simple Network Management Protocol (SNMP)

</pclass=”msonormal”>