Question 1

Which of the following is another term for statutory law?

Accepted Answer

A)  Legislation 
B)  Regulation 
C)  Policy 
D)  Governance 
A)  Legislation 
B)  Regulation 
C)  Policy 
D)  Governance A

Question 2

Which key task in the policy development phase requires the authors to consult with internal and external experts, including legal counsel, human resources, compliance, cybersecurity and technology professionals, auditors, and regulators?

Accepted Answer

A)  Writing 
B)  Authorizing 
C)  Vetting 
D)  Planning 
A)  Writing 
B)  Authorizing 
C)  Vetting 
D)  Planning C

Question 3

Which of the following can be defined as the shared attitudes, goals, and practices that characterize a company, corporation, or institution?

Accepted Answer

A)  Regulations 
B)  Corporate culture 
C)  Cybersecurity policy 
D)  Guiding principles 
A)  Regulations 
B)  Corporate culture 
C)  Cybersecurity policy 
D)  Guiding principles B

Question 4

Which of the following federal legislations, also known as the Financial Modernization Act of 1999, was created to reform and modernize the banking industry by eliminating existing barriers between banking and commerce?

Accepted Answer

A)  HITECH 
B)  HIPAA 
C)  FERPA 
D)  GLBA 
A)  HITECH 
B)  HIPAA 
C)  FERPA 
D)  GLBA

Question 5

Which of the following is a collection of articles and amendments that provide a framework for the American government and define citizens' rights?

Accepted Answer

A)  The Constitution 
B)  The Torah 
C)  Data Protection Act 
D)  Consumer Credit Act 
A)  The Constitution 
B)  The Torah 
C)  Data Protection Act 
D)  Consumer Credit Act

Question 6

Which of the following elements ensures a policy is enforceable?

Accepted Answer

A)  Compliance can be measured. 
B)  Appropriate sanctions are applied when the policy is violated. 
C)  Appropriate administrative, technical, and physical controls are put in place to support the policy. 
D)  All of the above 
A)  Compliance can be measured. 
B)  Appropriate sanctions are applied when the policy is violated. 
C)  Appropriate administrative, technical, and physical controls are put in place to support the policy. 
D)  All of the above

Question 7

Which of the following is not one of the tasks of the policy development phase?

Accepted Answer

A)  Approve 
B)  Write 
C)  Communicate 
D)  Authorize 
A)  Approve 
B)  Write 
C)  Communicate 
D)  Authorize

Question 8

The United States Department of Homeland Security defines how many critical infrastructure sectors?

Accepted Answer

A)  16 
B)  14 
C)  20 
D)  17 
A)  16 
B)  14 
C)  20 
D)  17

Question 9

FERPA protects which of the following?

Accepted Answer

A)  Medical records 
B)  Educational records 
C)  Personally identifiable information 
D)  Financial records 
A)  Medical records 
B)  Educational records 
C)  Personally identifiable information 
D)  Financial records

Question 10

Which layer in the defense-in-depth strategy includes firewalls, IDS/IPS devices, segmentation, and VLANs?

Accepted Answer

A)  Physical security 
B)  Network security 
C)  Perimeter security 
D)  Application security 
A)  Physical security 
B)  Network security 
C)  Perimeter security 
D)  Application security

Question 11

Which of the following is the outcome of policy review?

Accepted Answer

A)  Retirement or renewal 
B)  Retirement or reauthorization 
C)  Renewal or reauthorization 
D)  None of the above 
A)  Retirement or renewal 
B)  Retirement or reauthorization 
C)  Renewal or reauthorization 
D)  None of the above

Question 12

Which of the following is an example of an information asset?

Accepted Answer

A)  Business plans 
B)  Employee records 
C)  Company reputation 
D)  All of the above 
A)  Business plans 
B)  Employee records 
C)  Company reputation 
D)  All of the above

Question 13

Policy implementation and enforcement are part of which of the following phases of the cybersecurity policy life cycle?

Accepted Answer

A)  Develop 
B)  Review 
C)  Adopt 
D)  Publish 
A)  Develop 
B)  Review 
C)  Adopt 
D)  Publish

Question 14

Which major regulation entity within the European Union (EU) was created to maintain a single standard for data protection among all member states in the EU?

Accepted Answer

A)  Directive on Security of Network and Information Systems (the NIS Directive) 
B)  EU General Data Protection Regulation (GDPR) 
C)  European Union Agency for Network and Information Security (ENIS
A)  
D)  The Consumer Credit Regulations 2010 
A)  Directive on Security of Network and Information Systems (the NIS Directive) 
B)  EU General Data Protection Regulation (GDPR) 
C)  European Union Agency for Network and Information Security (ENIS
A)  
D)  The Consumer Credit Regulations 2010

Question 15

Which of the following is the correct order of the policy life cycle?

Accepted Answer

A)  Review, develop, adopt, publish 
B)  Develop, publish, adopt, review 
C)  Publish, develop, review, adopt 
D)  Review, adopt, develop, publish 
A)  Review, develop, adopt, publish 
B)  Develop, publish, adopt, review 
C)  Publish, develop, review, adopt 
D)  Review, adopt, develop, publish

Question 16

Which of the following statements is not true?

Accepted Answer

A)  Policies should require only what is possible. 
B)  Policies that are no longer applicable should be retired. 
C)  All guiding principles and corporate cultures are good. 
D)  Guiding principles set the tone for a corporate culture. 
A)  Policies should require only what is possible. 
B)  Policies that are no longer applicable should be retired. 
C)  All guiding principles and corporate cultures are good. 
D)  Guiding principles set the tone for a corporate culture.

Question 17

Endorsed is one of the seven policy characteristics. Which of the following statements best describes endorsed?

Accepted Answer

A)  The policy is supported by management. 
B)  The policy is accepted by the organization's employees. 
C)  The policy is mandatory; compliance is measured; and appropriate sanctions are applied. 
D)  The policy is regulated by the government. 
A)  The policy is supported by management. 
B)  The policy is accepted by the organization's employees. 
C)  The policy is mandatory; compliance is measured; and appropriate sanctions are applied. 
D)  The policy is regulated by the government.

Question 18

Which key task in the policy adoption phase is the busiest and most challenging task of all?

Accepted Answer

A)  Implementation 
B)  Enforcement 
C)  Monitoring 
D)  Education 
A)  Implementation 
B)  Enforcement 
C)  Monitoring 
D)  Education

Question 19

Which of the following is the seminal tool used to protect both our critical infrastructure and our individual liberties?

Accepted Answer

A)  Information security 
B)  Society 
C)  Physical security 
D)  Policy 
A)  Information security 
B)  Society 
C)  Physical security 
D)  Policy

Question 20

How often should policies be reviewed?

Accepted Answer

A)  Monthly 
B)  Twice a year 
C)  Annually 
D)  Never 
A)  Monthly 
B)  Twice a year 
C)  Annually 
D)  Never

Which of the following is another term for statutory law?

Which key task in the policy development phase requires the authors to consult with internal and external experts, including legal counsel, human resources, compliance, cybersecurity and technology professionals, auditors, and regulators?

Which of the following can be defined as the shared attitudes, goals, and practices that characterize a company, corporation, or institution?

Which of the following federal legislations, also known as the Financial Modernization Act of 1999, was created to reform and modernize the banking industry by eliminating existing barriers between banking and commerce?

Which of the following is a collection of articles and amendments that provide a framework for the American government and define citizens' rights?

Which of the following elements ensures a policy is enforceable?

Which of the following is not one of the tasks of the policy development phase?

The United States Department of Homeland Security defines how many critical infrastructure sectors?

FERPA protects which of the following?

Which layer in the defense-in-depth strategy includes firewalls, IDS/IPS devices, segmentation, and VLANs?

Which of the following is the outcome of policy review?

Which of the following is an example of an information asset?

Policy implementation and enforcement are part of which of the following phases of the cybersecurity policy life cycle?

Which major regulation entity within the European Union (EU) was created to maintain a single standard for data protection among all member states in the EU?

Which of the following is the correct order of the policy life cycle?

Which of the following statements is not true?

Endorsed is one of the seven policy characteristics. Which of the following statements best describes endorsed?

Which key task in the policy adoption phase is the busiest and most challenging task of all?

Which of the following is the seminal tool used to protect both our critical infrastructure and our individual liberties?

How often should policies be reviewed?

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters

Exam 1: Understanding Cybersecurity Policy and Governance

Which of the following is another term for statutory law?

Which key task in the policy development phase requires the authors to consult with internal and external experts, including legal counsel, human resources, compliance, cybersecurity and technology professionals, auditors, and regulators?

Which of the following can be defined as the shared attitudes, goals, and practices that characterize a company, corporation, or institution?

Which of the following federal legislations, also known as the Financial Modernization Act of 1999, was created to reform and modernize the banking industry by eliminating existing barriers between banking and commerce?

Which of the following is a collection of articles and amendments that provide a framework for the American government and define citizens' rights?

Which of the following elements ensures a policy is enforceable?

Which of the following is not one of the tasks of the policy development phase?

The United States Department of Homeland Security defines how many critical infrastructure sectors?

FERPA protects which of the following?

Which layer in the defense-in-depth strategy includes firewalls, IDS/IPS devices, segmentation, and VLANs?

Which of the following is the outcome of policy review?

Which of the following is an example of an information asset?

Policy implementation and enforcement are part of which of the following phases of the cybersecurity policy life cycle?

Which major regulation entity within the European Union (EU) was created to maintain a single standard for data protection among all member states in the EU?

Which of the following is the correct order of the policy life cycle?

Which of the following statements is not true?

Endorsed is one of the seven policy characteristics. Which of the following statements best describes endorsed?

Which key task in the policy adoption phase is the busiest and most challenging task of all?

Which of the following is the seminal tool used to protect both our critical infrastructure and our individual liberties?

How often should policies be reviewed?

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters