Question 1

Outline types of data ownership and their respective responsibilities.

Accepted Answer

Working directly with data owners, data custodians are responsible for the storage, maintenance, and protection of the information. The duties of a data custodian often include overseeing data storage and backups, implementing the specific procedures and policies laid out in the security policies and plans, and reporting to the data owner.
Data users: End users who work with the information to perform their daily jobs supporting the mission of the organization. Data users are included as individuals with an information security role.

Question 2

Software is often created under the constraints of ____________________ management, placing limits on time, cost, and manpower.

Accepted Answer

project

Question 3

Any event or circumstance that has the potential to adversely affect operations and assets is known as a(n) ​_________.

Accepted Answer

threat​

Question 4

Information has redundancy when it is free from mistakes or errors and it has the value that the end user expects. _________________________

Accepted Answer

A) True 
 B)False

Question 5

A(n) hardwaresystem is the entire set of people, procedures, and technology that enable business to use information. _________________________

Accepted Answer

A) True 
 B)False

Question 6

SecOps focuses on integrating the need for the development team to provide iterative and
rapid improvements to system functionality and the need for the operations team to improve
security and minimize the disruption from software release cycles. _________________________

Accepted Answer

A) True 
 B)False

Question 7

Confidentiality ensures that only those with the rights and privileges to access information are able to do so. _________________________

Accepted Answer

A) True 
 B)False

Question 8

An organizational resource that is being protected is sometimes logical, such as a Web site, software information, or data. Sometimes the resource is physical, such as a person, computer system, hardware, or other tangible object. Either way, the resource is known as a(n) ___________.

Accepted Answer

A)  access method 
B)  asset 
C)  exploit 
D)  risk 
A)  access method 
B)  asset 
C)  exploit 
D)  risk

Question 9

Indirect attacks originate from a compromised system or resource that is malfunctioning or working under the control of a threat. _________________________

Accepted Answer

A) True 
 B)False

Question 10

A(n) project team should consist of a number of individuals who are experienced in one or multiple facets of the technical and nontechnical areas. _________________________

Accepted Answer

A) True 
 B)False

Question 11

____________________ enables authorized users-people or computer systems-to access information without interference or obstruction and to receive it in the required format.

Accepted Answer

The answer of ____________________ enables authorized users-people or computer systems-to...

Question 12

A(n) ____________________ is a group of individuals who are united by similar interests or values within an organization and who share a common goal of helping the organization to meet its objectives.

Accepted Answer

community

Question 13

The senior technology officer is typically the chief ____________________ officer.

Accepted Answer

The answer of The senior technology officer is typically the...

Question 14

Describe the multiple types of security systems present in many organizations.

Accepted Answer

A successful organization should have th

Question 15

Hardware is often the most valuable asset possessed by an organization, and it is the main target of intentional attacks.

Accepted Answer

A) True 
 B)False

Question 16

A data custodian works directly with data owners and is responsible for the storage, maintenance, and protection of the information.

Accepted Answer

A) True 
 B)False

Question 17

__________ is a network project that preceded the Internet.

Accepted Answer

A)  NIST 
B)  ARPANET 
C)  FIPS 
D)  DES 
A)  NIST 
B)  ARPANET 
C)  FIPS 
D)  DES

Question 18

Which of the following is a valid type of role when it comes to data ownership

Accepted Answer

A)  Data owners 
B)  Data custodians 
C)  Data users 
D)  All of the above 
A)  Data owners 
B)  Data custodians 
C)  Data users 
D)  All of the above

Question 19

The famous study entitled "Protection Analysis: Final Report" focused on a project undertaken by ARPA to understand and detect __________ in operating systems security.

Accepted Answer

A)  bugs 
B)  vulnerabilities 
C)  malware 
D)  maintenance hooks 
A)  bugs 
B)  vulnerabilities 
C)  malware 
D)  maintenance hooks

Question 20

The roles of information security professionals are almost always aligned with the goals and mission of the information security community of interest.

Accepted Answer

A) True 
 B)False

Outline types of data ownership and their respective responsibilities.

Software is often created under the constraints of ____________________ management, placing limits on time, cost, and manpower.

Any event or circumstance that has the potential to adversely affect operations and assets is known as a(n) _________.

Information has redundancy when it is free from mistakes or errors and it has the value that the end user expects. _________________________

A(n) hardwaresystem is the entire set of people, procedures, and technology that enable business to use information. _________________________

SecOps focuses on integrating the need for the development team to provide iterative and rapid improvements to system functionality and the need for the operations team to improve security and minimize the disruption from software release cycles. _________________________

Confidentiality ensures that only those with the rights and privileges to access information are able to do so. _________________________

An organizational resource that is being protected is sometimes logical, such as a Web site, software information, or data. Sometimes the resource is physical, such as a person, computer system, hardware, or other tangible object. Either way, the resource is known as a(n) ___________.

Indirect attacks originate from a compromised system or resource that is malfunctioning or working under the control of a threat. _________________________

A(n) project team should consist of a number of individuals who are experienced in one or multiple facets of the technical and nontechnical areas. _________________________

____________________ enables authorized users-people or computer systems-to access information without interference or obstruction and to receive it in the required format.

A(n) ____________________ is a group of individuals who are united by similar interests or values within an organization and who share a common goal of helping the organization to meet its objectives.

The senior technology officer is typically the chief ____________________ officer.

Describe the multiple types of security systems present in many organizations.

Hardware is often the most valuable asset possessed by an organization, and it is the main target of intentional attacks.

A data custodian works directly with data owners and is responsible for the storage, maintenance, and protection of the information.

__________ is a network project that preceded the Internet.

Which of the following is a valid type of role when it comes to data ownership

The famous study entitled "Protection Analysis: Final Report" focused on a project undertaken by ARPA to understand and detect __________ in operating systems security.

The roles of information security professionals are almost always aligned with the goals and mission of the information security community of interest.

The Need for Security

Legal, Ethical, and Professional Issues in Information Security

Planning for Security

Risk Management

Security Technology: Access Controls, Firewalls, and VPNS

Security Technology: Intrusion Detection and Prevention Systems, and Other Security Tools

Cryptography

Physical Security

Implementing Information Security

Security and Personnel

Information Security Maintenance

Filters

Exam 1: Introduction to Information Security

Outline types of data ownership and their respective responsibilities.

Software is often created under the constraints of ____________________ management, placing limits on time, cost, and manpower.

Any event or circumstance that has the potential to adversely affect operations and assets is known as a(n) ​_________.

Information has redundancy when it is free from mistakes or errors and it has the value that the end user expects. _________________________

A(n) hardwaresystem is the entire set of people, procedures, and technology that enable business to use information. _________________________

SecOps focuses on integrating the need for the development team to provide iterative and rapid improvements to system functionality and the need for the operations team to improve security and minimize the disruption from software release cycles. _________________________

Confidentiality ensures that only those with the rights and privileges to access information are able to do so. _________________________

An organizational resource that is being protected is sometimes logical, such as a Web site, software information, or data. Sometimes the resource is physical, such as a person, computer system, hardware, or other tangible object. Either way, the resource is known as a(n) ___________.

Indirect attacks originate from a compromised system or resource that is malfunctioning or working under the control of a threat. _________________________

A(n) project team should consist of a number of individuals who are experienced in one or multiple facets of the technical and nontechnical areas. _________________________

____________________ enables authorized users-people or computer systems-to access information without interference or obstruction and to receive it in the required format.

A(n) ____________________ is a group of individuals who are united by similar interests or values within an organization and who share a common goal of helping the organization to meet its objectives.

The senior technology officer is typically the chief ____________________ officer.

Describe the multiple types of security systems present in many organizations.

Hardware is often the most valuable asset possessed by an organization, and it is the main target of intentional attacks.

A data custodian works directly with data owners and is responsible for the storage, maintenance, and protection of the information.

__________ is a network project that preceded the Internet.

Which of the following is a valid type of role when it comes to data ownership

The famous study entitled "Protection Analysis: Final Report" focused on a project undertaken by ARPA to understand and detect __________ in operating systems security.

The roles of information security professionals are almost always aligned with the goals and mission of the information security community of interest.

The Need for Security

Legal, Ethical, and Professional Issues in Information Security

Planning for Security

Risk Management

Security Technology: Access Controls, Firewalls, and VPNS

Security Technology: Intrusion Detection and Prevention Systems, and Other Security Tools

Cryptography

Physical Security

Implementing Information Security

Security and Personnel

Information Security Maintenance

Filters

Any event or circumstance that has the potential to adversely affect operations and assets is known as a(n) _________.