Question 1

The risks for the least important assets should be reduced first.

Accepted Answer

A) True 
 B)False  False

Question 2

____ is the process of tracking the assets.

Accepted Answer

A)  Asset management 
B)  Risk identification 
C)  Threat management 
D)  Vulnerability identification 
A)  Asset management 
B)  Risk identification 
C)  Threat management 
D)  Vulnerability identification A

Question 3

The proper development of a security policy is accomplished through what is called the ____.

Accepted Answer

A)  software life cycle 
B)  data life cycle 
C)  assets policy cycle 
D)  security policy cycle 
A)  software life cycle 
B)  data life cycle 
C)  assets policy cycle 
D)  security policy cycle D

Question 4

A ____ is a document that outlines specific requirements or rules that must be met.

Accepted Answer

A)  policy 
B)  standard 
C)  guideline 
D)  risk 
A)  policy 
B)  standard 
C)  guideline 
D)  risk

Question 5

The ALE is calculated by multiplying the SLE by the ____________________.

Accepted Answer

Annualized Rate of O

Question 6

The ____ is the expected monetary loss every time a risk occurs.

Accepted Answer

A)  Exposure Factor (EF) 
B)  Annualized Loss Expectancy (AL
E)  
C)  Annualized Rate of Occurrence (ARO) 
D)  Single Loss Expectancy (SL
E)  
A)  Exposure Factor (EF) 
B)  Annualized Loss Expectancy (AL
E)  
C)  Annualized Rate of Occurrence (ARO) 
D)  Single Loss Expectancy (SL
E)

Question 7

If policies are too restrictive or too hard to implement and comply with, they will either be ignored or people will find a way to circumvent the controls in the policies.

Accepted Answer

A) True 
 B)False

Question 8

The main purpose of an ethics code is to state the values, principles, and ideals that each member of an organization must agree to.

Accepted Answer

A) True 
 B)False

Question 9

What are the options faced by an organization when confronted with a risk?

Accepted Answer

An organization has three options when c

Question 10

What are some of the principles that are involved for good compliance monitoring and evaluation?

Accepted Answer

There are several principles that are in

Question 11

Why is it critical to have users "buy in" to the policy and willingly follow it?

Accepted Answer

Because wireless policies will include t

Question 12

____ is defined as the obligations that are imposed on owners and operators of assets to exercise reasonable care of the assets and take necessary precautions to protect them.

Accepted Answer

A)  Due care 
B)  Separation of duties 
C)  Need to know 
D)  Risk assessment 
A)  Due care 
B)  Separation of duties 
C)  Need to know 
D)  Risk assessment

Question 13

A(n) ____ involves determining the damage that would result from an attack and the likelihood that a vulnerability is a risk to the organization.

Accepted Answer

A)  threat modeling 
B)  risk assessment 
C)  attack tree 
D)  attack modeling 
A)  threat modeling 
B)  risk assessment 
C)  attack tree 
D)  attack modeling

Question 14

Briefly describe the areas that should be considered when creating an incident response team (IRT).

Accepted Answer

IRTs are composed of individuals from th

Question 15

Many organizations now enforce a(n) ____ policy to address accessing public hotspots.

Accepted Answer

A)  acceptable use 
B)  VPN 
C)  password management 
D)  public access WLAN use 
A)  acceptable use 
B)  VPN 
C)  password management 
D)  public access WLAN use

Question 16

What are the layers of information security?

Accepted Answer

The goal of information security is to p

Question 17

What are the three models of trust?

Accepted Answer

There are three models of trust:
* Trust

Question 18

The SLE is computed by multiplying the value of the asset (Asset Value or AV) by the ____________________.

Accepted Answer

Exposure F

Question 19

Match between columns
                        Premises: never-ending process of identifying what needs to be protected, determining how to protect it, and evaluating the adequacy of the protection.
defines what actions the users of a system may perform while using the wireless network.
probability that a risk will occur in a particular year.
final step in identifying risks.
the lifeblood of an organization.
encourage members of professional groups to adhere to strict ethical behavior within their profession.
document that outlines the specific rules that must be met in order to keep the WLAN secure.
a valuable tool used in threat modeling.
proportion of an asset's value that is likely to be destroyed by a particular risk.

Accepted Answer

The Answer of Exposure Factor (EF) and Attack tree and is...

Question 20

The best approach to creating a security policy is for a member of the IT staff to create the document in a few days with little or no input from other individuals.

Accepted Answer

A) True 
 B)False

The risks for the least important assets should be reduced first.

____ is the process of tracking the assets.

The proper development of a security policy is accomplished through what is called the ____.

A ____ is a document that outlines specific requirements or rules that must be met.

The ALE is calculated by multiplying the SLE by the ____________________.

The ____ is the expected monetary loss every time a risk occurs.

If policies are too restrictive or too hard to implement and comply with, they will either be ignored or people will find a way to circumvent the controls in the policies.

The main purpose of an ethics code is to state the values, principles, and ideals that each member of an organization must agree to.

What are the options faced by an organization when confronted with a risk?

What are some of the principles that are involved for good compliance monitoring and evaluation?

Why is it critical to have users "buy in" to the policy and willingly follow it?

____ is defined as the obligations that are imposed on owners and operators of assets to exercise reasonable care of the assets and take necessary precautions to protect them.

A(n) ____ involves determining the damage that would result from an attack and the likelihood that a vulnerability is a risk to the organization.

Briefly describe the areas that should be considered when creating an incident response team (IRT).

Many organizations now enforce a(n) ____ policy to address accessing public hotspots.

What are the layers of information security?

What are the three models of trust?

The SLE is computed by multiplying the value of the asset (Asset Value or AV) by the ____________________.

The best approach to creating a security policy is for a member of the IT staff to create the document in a few days with little or no input from other individuals.

Foundations of Wireless Security

Wireless LAN Vulnerabilities

Passive Wireless Discovery

Active Wireless Attacks

Wireless Security Models

Enterprise Wireless Hardware Security

Designing a Secure Wireless Network

Secure Wireless Authentication

Secure Wireless Transmissions

Managing the Wireless Network

Operational Support and Wireless Convergence

Filters

Exam 11: Wireless Security Policy

The risks for the least important assets should be reduced first.

____ is the process of tracking the assets.

The proper development of a security policy is accomplished through what is called the ____.

A ____ is a document that outlines specific requirements or rules that must be met.

The ALE is calculated by multiplying the SLE by the ____________________.

The ____ is the expected monetary loss every time a risk occurs.

If policies are too restrictive or too hard to implement and comply with, they will either be ignored or people will find a way to circumvent the controls in the policies.

The main purpose of an ethics code is to state the values, principles, and ideals that each member of an organization must agree to.

What are the options faced by an organization when confronted with a risk?

What are some of the principles that are involved for good compliance monitoring and evaluation?

Why is it critical to have users "buy in" to the policy and willingly follow it?

____ is defined as the obligations that are imposed on owners and operators of assets to exercise reasonable care of the assets and take necessary precautions to protect them.

A(n) ____ involves determining the damage that would result from an attack and the likelihood that a vulnerability is a risk to the organization.

Briefly describe the areas that should be considered when creating an incident response team (IRT).

Many organizations now enforce a(n) ____ policy to address accessing public hotspots.

What are the layers of information security?

What are the three models of trust?

The SLE is computed by multiplying the value of the asset (Asset Value or AV) by the ____________________.

The best approach to creating a security policy is for a member of the IT staff to create the document in a few days with little or no input from other individuals.

Foundations of Wireless Security

Wireless LAN Vulnerabilities

Passive Wireless Discovery

Active Wireless Attacks

Wireless Security Models

Enterprise Wireless Hardware Security

Designing a Secure Wireless Network

Secure Wireless Authentication

Secure Wireless Transmissions

Managing the Wireless Network

Operational Support and Wireless Convergence

Filters