Question 1

COBIT provides a framework to support information security requirements and assessment needs.

Accepted Answer

A) True 
 B)False  True

Question 2

Match each item with a statement below.
a.Configuration item
f.Build list
b.Version
g.Configuration
c.Major release
h.Revision date
d.Minor release
i.Software library
e.Build
-A list of the versions of components that make up a build.

Accepted Answer

F

Question 3

Describe two places where network connection events may be tracked and explain what events can be tracked.

Accepted Answer

These types of events can be tracked at a system level, but they can also be tracked at the firewalls (or other network egress points) to provide the most visibility on network activity. Administrators can track connections that are allowed and established, connections that are denied and fail, or other network activity that does not fall into the firewall's ruleset.

Question 4

On most current versions of Microsoft Windows-based systems, logging is managed by the ____, which is accessible from the system control panel.

Accepted Answer

A)  view daemon 
B)  Event Viewer 
C)  service command 
D)  DLL 
A)  view daemon 
B)  Event Viewer 
C)  service command 
D)  DLL

Question 5

The primary purpose of ____ is to enable organizations to obtain certification; thus, it serves more as an assessment tool than an implementation framework.

Accepted Answer

A)  ISO/IEC 27001 
B)  ISO/IEC 27002 
C)  COBIT 
D)  ISACA 
A)  ISO/IEC 27001 
B)  ISO/IEC 27002 
C)  COBIT 
D)  ISACA

Question 6

Match each item with a statement below.
a.Configuration item
f.Build list
b.Version
g.Configuration
c.Major release
h.Revision date
d.Minor release
i.Software library
e.Build
-A collection of configuration items that is usually controlled and that developers use to construct revisions and to issue new configuration items.

Accepted Answer

The answer of Match each item with a statement below.
a.Configuration...

Question 7

Which COBIT domain focuses on the functionality of the system for the end user?

Accepted Answer

A)  Plan and Organize 
B)  Acquire and Implement 
C)  Delivery and Support 
D)  Monitor and Evaluate 
A)  Plan and Organize 
B)  Acquire and Implement 
C)  Delivery and Support 
D)  Monitor and Evaluate

Question 8

____ demonstrates that management has identified an acceptable risk level and provided resources to control unacceptable risk levels.

Accepted Answer

A)  Certification 
B)  Accreditation 
C)  Integrity 
D)  Authorization 
A)  Certification 
B)  Accreditation 
C)  Integrity 
D)  Authorization

Question 9

Tracking events in which group membership has changed or rights have been elevated gives security professionals a warning that ____ is occurring.

Accepted Answer

A)  privilege escalation 
B)  directory traversal 
C)  auditing 
D)  data leakage 
A)  privilege escalation 
B)  directory traversal 
C)  auditing 
D)  data leakage

Question 10

Match each item with a statement below.
a.Configuration item
f.Build list
b.Version
g.Configuration
c.Major release
h.Revision date
d.Minor release
i.Software library
e.Build
-A minor revision of the version from its previous state.

Accepted Answer

The answer of Match each item with a statement below.
a.Configuration...

Question 11

To investigate running processes, we would turn to the ____ in Linux.

Accepted Answer

A)  Task Manager 
B)  ps command 
C)  PsLoggedOn tool 
D)  Wevtutil utility 
A)  Task Manager 
B)  ps command 
C)  PsLoggedOn tool 
D)  Wevtutil utility

Question 12

____________________ is the period of time that log files or log file data should be maintained.

Accepted Answer

The answer of ____________________ is the period of time that...

Question 13

After a change has been reviewed and evaluated, what three actions might be taken?

Accepted Answer

After the change has been reviewed and e

Question 14

Match each item with a statement below.
a.Configuration item
f.Build list
b.Version
g.Configuration
c.Major release
h.Revision date
d.Minor release
i.Software library
e.Build
-The recorded state of a particular revision of a software or hardware configuration item.

Accepted Answer

The answer of Match each item with a statement below.
a.Configuration...

Question 15

A(n) ____ is a task being performed by a computing system.

Accepted Answer

A)  handle 
B)  activity 
C)  action 
D)  process 
A)  handle 
B)  activity 
C)  action 
D)  process

Question 16

As part of the initiation and planning audit phase, it is customary for a(n) ____ to be developed, which serves as a service agreement between the auditing team and the requesting entity.

Accepted Answer

A)  contingency plan 
B)  incident report 
C)  engagement letter 
D)  change request 
A)  contingency plan 
B)  incident report 
C)  engagement letter 
D)  change request

Question 17

Match each item with a statement below.
a.Configuration item
f.Build list
b.Version
g.Configuration
c.Major release
h.Revision date
d.Minor release
i.Software library
e.Build
-A significant revision of the version from its previous state.

Accepted Answer

The answer of Match each item with a statement below.
a.Configuration...

Question 18

A(n) ____________________ is a measurement of activity that represents the normal state or routine condition.

Accepted Answer

The answer of A(n) ____________________ is a measurement of activity...

Question 19

What is the purpose of ISO/IEC 27002?

Accepted Answer

The stated purpose of ISO/IEC 27002 is t

Question 20

Match each item with a statement below.
a.Configuration item
f.Build list
b.Version
g.Configuration
c.Major release
h.Revision date
d.Minor release
i.Software library
e.Build
-The date associated with a particular version or build.

Accepted Answer

The answer of Match each item with a statement below.
a.Configuration...

COBIT provides a framework to support information security requirements and assessment needs.

Match each item with a statement below. a.Configuration item f.Build list b.Version g.Configuration c.Major release h.Revision date d.Minor release i.Software library e.Build -A list of the versions of components that make up a build.

Describe two places where network connection events may be tracked and explain what events can be tracked.

On most current versions of Microsoft Windows-based systems, logging is managed by the ____, which is accessible from the system control panel.

The primary purpose of ____ is to enable organizations to obtain certification; thus, it serves more as an assessment tool than an implementation framework.

Which COBIT domain focuses on the functionality of the system for the end user?

____ demonstrates that management has identified an acceptable risk level and provided resources to control unacceptable risk levels.

Tracking events in which group membership has changed or rights have been elevated gives security professionals a warning that ____ is occurring.

Match each item with a statement below. a.Configuration item f.Build list b.Version g.Configuration c.Major release h.Revision date d.Minor release i.Software library e.Build -A minor revision of the version from its previous state.

To investigate running processes, we would turn to the ____ in Linux.

____________________ is the period of time that log files or log file data should be maintained.

After a change has been reviewed and evaluated, what three actions might be taken?

Match each item with a statement below. a.Configuration item f.Build list b.Version g.Configuration c.Major release h.Revision date d.Minor release i.Software library e.Build -The recorded state of a particular revision of a software or hardware configuration item.

A(n) ____ is a task being performed by a computing system.

As part of the initiation and planning audit phase, it is customary for a(n) ____ to be developed, which serves as a service agreement between the auditing team and the requesting entity.

Match each item with a statement below. a.Configuration item f.Build list b.Version g.Configuration c.Major release h.Revision date d.Minor release i.Software library e.Build -A significant revision of the version from its previous state.

A(n) ____________________ is a measurement of activity that represents the normal state or routine condition.

What is the purpose of ISO/IEC 27002?

Match each item with a statement below. a.Configuration item f.Build list b.Version g.Configuration c.Major release h.Revision date d.Minor release i.Software library e.Build -The date associated with a particular version or build.

Introduction to Information Security

Introduction to Networking

Cryptography

Firewall Technologies and Administration

Network Authentication and Remote Access Using Vpn

Network Monitoring and Intrusion Detection and Prevention Systems

Wireless Network Security

Security of Web Applications

Network Vulnerability Assessment

Contingency Planning and Networking Incident Response

Digital Forensics

Filters

Exam 10: Auditing, Monitoring, and Logging

COBIT provides a framework to support information security requirements and assessment needs.

Match each item with a statement below. a.Configuration item f.Build list b.Version g.Configuration c.Major release h.Revision date d.Minor release i.Software library e.Build -A list of the versions of components that make up a build.

Describe two places where network connection events may be tracked and explain what events can be tracked.

On most current versions of Microsoft Windows-based systems, logging is managed by the ____, which is accessible from the system control panel.

The primary purpose of ____ is to enable organizations to obtain certification; thus, it serves more as an assessment tool than an implementation framework.

Which COBIT domain focuses on the functionality of the system for the end user?

____ demonstrates that management has identified an acceptable risk level and provided resources to control unacceptable risk levels.

Tracking events in which group membership has changed or rights have been elevated gives security professionals a warning that ____ is occurring.

Match each item with a statement below. a.Configuration item f.Build list b.Version g.Configuration c.Major release h.Revision date d.Minor release i.Software library e.Build -A minor revision of the version from its previous state.

To investigate running processes, we would turn to the ____ in Linux.

____________________ is the period of time that log files or log file data should be maintained.

After a change has been reviewed and evaluated, what three actions might be taken?

Match each item with a statement below. a.Configuration item f.Build list b.Version g.Configuration c.Major release h.Revision date d.Minor release i.Software library e.Build -The recorded state of a particular revision of a software or hardware configuration item.

A(n) ____ is a task being performed by a computing system.

As part of the initiation and planning audit phase, it is customary for a(n) ____ to be developed, which serves as a service agreement between the auditing team and the requesting entity.

Match each item with a statement below. a.Configuration item f.Build list b.Version g.Configuration c.Major release h.Revision date d.Minor release i.Software library e.Build -A significant revision of the version from its previous state.

A(n) ____________________ is a measurement of activity that represents the normal state or routine condition.

What is the purpose of ISO/IEC 27002?

Match each item with a statement below. a.Configuration item f.Build list b.Version g.Configuration c.Major release h.Revision date d.Minor release i.Software library e.Build -The date associated with a particular version or build.

Introduction to Information Security

Introduction to Networking

Cryptography

Firewall Technologies and Administration

Network Authentication and Remote Access Using Vpn

Network Monitoring and Intrusion Detection and Prevention Systems

Wireless Network Security

Security of Web Applications

Network Vulnerability Assessment

Contingency Planning and Networking Incident Response

Digital Forensics

Filters