Question 1

Which of the following statements describes reclassification?

Accepted Answer

A)  The process of changing the classification level to a lower level 
B)  The process of removing a classification 
C)  The process of assigning a classification 
D)  The process of upgrading a classification 
A)  The process of changing the classification level to a lower level 
B)  The process of removing a classification 
C)  The process of assigning a classification 
D)  The process of upgrading a classification D

Question 2

Which of the following refers to visible and tangible pieces of equipment and media, such as computer equipment and storage media?

Accepted Answer

A)  Operating system software 
B)  Software assets 
C)  Productivity software 
D)  Hardware assets 
A)  Operating system software 
B)  Software assets 
C)  Productivity software 
D)  Hardware assets D

Question 3

Which of the following is a hardware identification number that uniquely identifies a device?

Accepted Answer

A)  IP domain name 
B)  MAC address 
C)  IPv4 address 
D)  IPv6 address 
A)  IP domain name 
B)  MAC address 
C)  IPv4 address 
D)  IPv6 address B

Question 4

A MAC address uses which of the following formats?

Accepted Answer

A)  Hexadecimal 
B)  Binary 
C)  Decimal 
D)  Unicode 
A)  Hexadecimal 
B)  Binary 
C)  Decimal 
D)  Unicode

Question 5

Which of the following would most likely be classified as confidential information under the private sector classification system?

Accepted Answer

A)  Laboratory research 
B)  Social Security number 
C)  List of upcoming trade shows 
D)  Nonsensitive client or vendor information 
A)  Laboratory research 
B)  Social Security number 
C)  List of upcoming trade shows 
D)  Nonsensitive client or vendor information

Question 6

Which of the following is not one of the classification levels for private sector information?

Accepted Answer

A)  Protected 
B)  Secret 
C)  Internal use 
D)  Public 
A)  Protected 
B)  Secret 
C)  Internal use 
D)  Public

Question 7

Which of the following is not one of the classification levels for national security information?

Accepted Answer

A)  Secret 
B)  Protected 
C)  Confidential 
D)  Unclassified 
A)  Secret 
B)  Protected 
C)  Confidential 
D)  Unclassified

Question 8

A Social Security number would be classified in which of the following levels under the private sector classification system?

Accepted Answer

A)  Internal use 
B)  Protected 
C)  Confidential 
D)  Public 
A)  Internal use 
B)  Protected 
C)  Confidential 
D)  Public

Question 9

Which of the following refers to the unauthorized or unintentional modification or destruction of information?

Accepted Answer

A)  Loss of availability 
B)  Loss of confidentiality 
C)  Loss of control 
D)  Loss of integrity 
A)  Loss of availability 
B)  Loss of confidentiality 
C)  Loss of control 
D)  Loss of integrity

Question 10

Which of the following is not one of the responsibilities of a data owner?

Accepted Answer

A)  Assigning the economic or business value to the asset 
B)  Implementing security controls for the asset 
C)  Defining the level of protection required for the asset 
D)  Deciding who should have access to the asset 
A)  Assigning the economic or business value to the asset 
B)  Implementing security controls for the asset 
C)  Defining the level of protection required for the asset 
D)  Deciding who should have access to the asset

Question 11

Which data type protected by DLP includes patent applications, product design documents, the source code of software, research information, and customer data?

Accepted Answer

A)  Personally Identifiable Information (PII) 
B)  Intellectual Property (IP) 
C)  Nonpublic Information (NPI) 
D)  None of the above 
A)  Personally Identifiable Information (PII) 
B)  Intellectual Property (IP) 
C)  Nonpublic Information (NPI) 
D)  None of the above

Question 12

Which of the following is designed to implement the business rules of the organization and is often custom-developed?

Accepted Answer

A)  Productivity software 
B)  Operating system software 
C)  Application software 
D)  Software assets 
A)  Productivity software 
B)  Operating system software 
C)  Application software 
D)  Software assets

Question 13

Which of the following refers to programs or code that provide the interface between the hardware, the users, and the data?

Accepted Answer

A)  Software assets 
B)  Hardware assets 
C)  Infrastructure equipment 
D)  Printers 
A)  Software assets 
B)  Hardware assets 
C)  Infrastructure equipment 
D)  Printers

Question 14

Which of the following best described the Bell-Lapadula security model?

Accepted Answer

A)  No read up, no write up 
B)  No write up, no write down 
C)  No read up, no write down 
D)  No read down, no write up 
A)  No read up, no write up 
B)  No write up, no write down 
C)  No read up, no write down 
D)  No read down, no write up

Question 15

Which if the following statements best describes declassification?

Accepted Answer

A)  The process of upgrading a classification 
B)  The process of assigning a new classification 
C)  The process of downgrading sensitivity levels 
D)  The process of removing a classification 
A)  The process of upgrading a classification 
B)  The process of assigning a new classification 
C)  The process of downgrading sensitivity levels 
D)  The process of removing a classification

Question 16

Which of the following informs custodians and users how to treat the information they use and the systems they interact with?

Accepted Answer

A)  Processing standards 
B)  Handling standards 
C)  Organizational standards 
D)  Classification standards 
A)  Processing standards 
B)  Handling standards 
C)  Organizational standards 
D)  Classification standards

Question 17

Which of the following statements best describes the Biba security model?

Accepted Answer

A)  No read up, no write up 
B)  No write up, no write down 
C)  No read up, no write down 
D)  No read down, no write up 
A)  No read up, no write up 
B)  No write up, no write down 
C)  No read up, no write down 
D)  No read down, no write up

Question 18

Which of the following means the loss of CIA could be expected to have a limited adverse effect on organizational operations, organizational assets, or individuals?

Accepted Answer

A)  High potential impact 
B)  Moderate potential impact 
C)  Low potential impact 
D)  No potential impact 
A)  High potential impact 
B)  Moderate potential impact 
C)  Low potential impact 
D)  No potential impact

Question 19

The objective of an __________ is to differentiate data types to enable organizations to safeguard CIA based on content.

Accepted Answer

A)  asset classification policy 
B)  information ownership policy statement 
C)  information classification system 
D)  inventory information systems 
A)  asset classification policy 
B)  information ownership policy statement 
C)  information classification system 
D)  inventory information systems

Which of the following statements describes reclassification?

Which of the following refers to visible and tangible pieces of equipment and media, such as computer equipment and storage media?

Which of the following is a hardware identification number that uniquely identifies a device?

A MAC address uses which of the following formats?

Which of the following would most likely be classified as confidential information under the private sector classification system?

Which of the following is not one of the classification levels for private sector information?

Which of the following is not one of the classification levels for national security information?

A Social Security number would be classified in which of the following levels under the private sector classification system?

Which of the following refers to the unauthorized or unintentional modification or destruction of information?

Which of the following is not one of the responsibilities of a data owner?

Which data type protected by DLP includes patent applications, product design documents, the source code of software, research information, and customer data?

Which of the following is designed to implement the business rules of the organization and is often custom-developed?

Which of the following refers to programs or code that provide the interface between the hardware, the users, and the data?

Which of the following best described the Bell-Lapadula security model?

Which if the following statements best describes declassification?

Which of the following informs custodians and users how to treat the information they use and the systems they interact with?

Which of the following statements best describes the Biba security model?

Which of the following means the loss of CIA could be expected to have a limited adverse effect on organizational operations, organizational assets, or individuals?

The objective of an __________ is to differentiate data types to enable organizations to safeguard CIA based on content.

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters

Exam 5: Asset Management and Data Loss Prevention

Which of the following statements describes reclassification?

Which of the following refers to visible and tangible pieces of equipment and media, such as computer equipment and storage media?

Which of the following is a hardware identification number that uniquely identifies a device?

A MAC address uses which of the following formats?

Which of the following would most likely be classified as confidential information under the private sector classification system?

Which of the following is not one of the classification levels for private sector information?

Which of the following is not one of the classification levels for national security information?

A Social Security number would be classified in which of the following levels under the private sector classification system?

Which of the following refers to the unauthorized or unintentional modification or destruction of information?

Which of the following is not one of the responsibilities of a data owner?

Which data type protected by DLP includes patent applications, product design documents, the source code of software, research information, and customer data?

Which of the following is designed to implement the business rules of the organization and is often custom-developed?

Which of the following refers to programs or code that provide the interface between the hardware, the users, and the data?

Which of the following best described the Bell-Lapadula security model?

Which if the following statements best describes declassification?

Which of the following informs custodians and users how to treat the information they use and the systems they interact with?

Which of the following statements best describes the Biba security model?

Which of the following means the loss of CIA could be expected to have a limited adverse effect on organizational operations, organizational assets, or individuals?

The objective of an __________ is to differentiate data types to enable organizations to safeguard CIA based on content.

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters