Question 1

What method can be used for determining functions, identifying functional failures, assessing the causes of failure and their failure effects through a structured process?

Accepted Answer

A) Failure Modes Effect Analysis 
B) Qualitative Risk Analysis 
C) Handling Analysis 
D) None of the Above 
A) Failure Modes Effect Analysis 
B) Qualitative Risk Analysis 
C) Handling Analysis 
D) None of the Above A

Question 2

For all the efforts a company can take to protect their assets and sensitive information, it may prove to be useless unless their systems are checked to ensure all areas of security are working properly and providing full protection. What would these checks be called?

Accepted Answer

A) Testing Drills 
B) Security Testing 
C) Physical Access Auditing 
D) Patrol Drills 
A) Testing Drills 
B) Security Testing 
C) Physical Access Auditing 
D) Patrol Drills C

Question 3

Mike is not sure the software he developed is any good. Steve suggests he should run the software through several tests to check. Which item is not a testing method?

Accepted Answer

A) Unit Testing 
B) Digression Testing 
C) Regression Testing 
D) Acceptance Testing 
A) Unit Testing 
B) Digression Testing 
C) Regression Testing 
D) Acceptance Testing B

Question 4

Who provides a method for independently ensuring that management and shareholders of an organization can rely upon the appropriateness of security objectives?

Accepted Answer

A) Data Custodian 
B) Data Owner 
C) Auditor 
D) Security Administrator 
A) Data Custodian 
B) Data Owner 
C) Auditor 
D) Security Administrator

Question 5

What type of testing is the process of simulating attacks on a network and its systems at the request of the owner or senior management?

Accepted Answer

A) Toolbox Testing 
B) Penetration Testing 
C) Computer-aided Testing 
D) Extreme Testing 
A) Toolbox Testing 
B) Penetration Testing 
C) Computer-aided Testing 
D) Extreme Testing

Question 6

What analytical technique prevents individuals in a group from feeling pressured to go along with others in the group?

Accepted Answer

A) Scenario Technique 
B) Qualitative Technique 
C) Delphi Technique 
D) Protection Mechanisms 
A) Scenario Technique 
B) Qualitative Technique 
C) Delphi Technique 
D) Protection Mechanisms

Question 7

Whose function is it to provide a method for ensuring independently that management and shareholders of an organization can rely on security objectives?

Accepted Answer

A) CEO 
B) Independent Contractor 
C) Auditor 
D) Investigator 
A) CEO 
B) Independent Contractor 
C) Auditor 
D) Investigator

What method can be used for determining functions, identifying functional failures, assessing the causes of failure and their failure effects through a structured process?

For all the efforts a company can take to protect their assets and sensitive information, it may prove to be useless unless their systems are checked to ensure all areas of security are working properly and providing full protection. What would these checks be called?

Mike is not sure the software he developed is any good. Steve suggests he should run the software through several tests to check. Which item is not a testing method?

Who provides a method for independently ensuring that management and shareholders of an organization can rely upon the appropriateness of security objectives?

What type of testing is the process of simulating attacks on a network and its systems at the request of the owner or senior management?

What analytical technique prevents individuals in a group from feeling pressured to go along with others in the group?

Whose function is it to provide a method for ensuring independently that management and shareholders of an organization can rely on security objectives?

Assets

Communication

Engineering

ID and Access

Management

Operations

Software

Filters

Exam 1: Assessment

What method can be used for determining functions, identifying functional failures, assessing the causes of failure and their failure effects through a structured process?

For all the efforts a company can take to protect their assets and sensitive information, it may prove to be useless unless their systems are checked to ensure all areas of security are working properly and providing full protection. What would these checks be called?

Mike is not sure the software he developed is any good. Steve suggests he should run the software through several tests to check. Which item is not a testing method?

Who provides a method for independently ensuring that management and shareholders of an organization can rely upon the appropriateness of security objectives?

What type of testing is the process of simulating attacks on a network and its systems at the request of the owner or senior management?

What analytical technique prevents individuals in a group from feeling pressured to go along with others in the group?

Whose function is it to provide a method for ensuring independently that management and shareholders of an organization can rely on security objectives?

Assets

Communication

Engineering

ID and Access

Management

Operations

Software

Filters