Question 1

Strategic planning has a more short-term focus than tactical planning.

Accepted Answer

A) True 
 B)False  False

Question 2

Which of the following is NOT a significant benefit of information security governance?

Accepted Answer

A)  Optimization of the allocation of limited security resources 
B)  A level of assurance that critical decisions are not based on faulty information 
C)  Increased predictability and reduced uncertainty of business operations by lowering information security-related risks to definable and acceptable levels 
D)  All of these are benefits of information security governance 
A)  Optimization of the allocation of limited security resources 
B)  A level of assurance that critical decisions are not based on faulty information 
C)  Increased predictability and reduced uncertainty of business operations by lowering information security-related risks to definable and acceptable levels 
D)  All of these are benefits of information security governance D

Question 3

A ____ attack involves sending a large number of connection or information requests to a target.

Accepted Answer

A)  man-in-the-middle 
B)  denial-of-service (DoS) 
C)  brute force 
D)  dictionary 
A)  man-in-the-middle 
B)  denial-of-service (DoS) 
C)  brute force 
D)  dictionary B

Question 4

Which of the following is true about mission statements?

Accepted Answer

A)  They should be ambitious 
B)  They express what the organization is 
C)  They express the aspirations of the organization 
D)  They are not meant to be probable 
A)  They should be ambitious 
B)  They express what the organization is 
C)  They express the aspirations of the organization 
D)  They are not meant to be probable

Question 5

An act or event that exploits a vulnerability is known as a(n)____________________.

Accepted Answer

The answer of An act or event that exploits a...

Question 6

The first phase of the security systems development life cycle (SecSDLC)is the ____ phase.

Accepted Answer

A)  analysis 
B)  investigation 
C)  logical design 
D)  physical design 
A)  analysis 
B)  investigation 
C)  logical design 
D)  physical design

Question 7

Boards of directors should supervise strategic information security objectives by verifying that management's investment in information security is properly aligned with organizational strategies and the organization's$\text {\underline{competitive } }$

environment._________________________

Accepted Answer

A) True 
 B)False

Question 8

Top-down information security initiatives must have a(n)____________________ - ideally,an executive with sufficient influence to move the project forward,ensure that it is properly managed,and push for its acceptance throughout the organization.

Accepted Answer

The answer of Top-down information security initiatives must have a(n)____________________...

Question 9

____ plans are used to organize the ongoing,day-to-day performance of tasks.

Accepted Answer

A)  Strategic 
B)  Tactical 
C)  Organizational 
D)  Operational 
A)  Strategic 
B)  Tactical 
C)  Organizational 
D)  Operational

Question 10

Tactical planning usually has a focus of ____.

Accepted Answer

A)  one to five days 
B)  one to three months 
C)  one to three years 
D)  five or more years 
A)  one to five days 
B)  one to three months 
C)  one to three years 
D)  five or more years

Question 11

The primary goal of internal monitoring is to maintain an informed awareness of the state of all of the organization's networks,information systems,and information security defenses.

Accepted Answer

A) True 
 B)False

Question 12

The ____________________ statement contains a formal set of organizational principles,standards,and qualities.

Accepted Answer

The answer of The ____________________ statement contains a formal set...

Question 13

The application of computing and network resources to try every possible combination of characters to crack a password is known as a ____ attack.

Accepted Answer

A)  man-in-the-middle attack 
B)  denial-of-service (DoS) 
C)  dictionary attack 
D)  brute force 
A)  man-in-the-middle attack 
B)  denial-of-service (DoS) 
C)  dictionary attack 
D)  brute force

Question 14

$\text {\underline{ Strategic} }$

plans are used to create tactical plans._________________________

Accepted Answer

A) True 
 B)False

Question 15

According to the Corporate Governance Task Force (CGTF),during which phase in the IDEAL model and framework does the organization plan the specifics of who it will reach its destination?

Accepted Answer

A)  Initiating 
B)  Establishing 
C)  Acting 
D)  Learning 
A)  Initiating 
B)  Establishing 
C)  Acting 
D)  Learning

Question 16

____ controls deal with managerial functions and lower-level planning such as disaster recovery and incident response planning.

Accepted Answer

A)  Managerial 
B)  Operational 
C)  Technical 
D)  Tactical 
A)  Managerial 
B)  Operational 
C)  Technical 
D)  Tactical

Question 17

CISOs use the operational plan to organize,prioritize,and acquire resources for major projects.

Accepted Answer

A) True 
 B)False

Question 18

A technique or mechanism that is used to compromise a system is called a(n)____________________.

Accepted Answer

The answer of A technique or mechanism that is used...

Question 19

Because it sets out general business intentions,a mission statement does not need to be concise.

Accepted Answer

A) True 
 B)False

Question 20

Boards of directors should supervise strategic information security objectives by demanding ____________________ from the various layers of management on the information security program's effectiveness and adequacy

Accepted Answer

The answer of Boards of directors should supervise strategic information...

Strategic planning has a more short-term focus than tactical planning.

Which of the following is NOT a significant benefit of information security governance?

A ____ attack involves sending a large number of connection or information requests to a target.

Which of the following is true about mission statements?

An act or event that exploits a vulnerability is known as a(n)____________________.

The first phase of the security systems development life cycle (SecSDLC)is the ____ phase.

Boards of directors should supervise strategic information security objectives by verifying that management's investment in information security is properly aligned with organizational strategies and the organization's $\text {\underline{competitive } }$ environment._________________________

Top-down information security initiatives must have a(n)____________________ - ideally,an executive with sufficient influence to move the project forward,ensure that it is properly managed,and push for its acceptance throughout the organization.

____ plans are used to organize the ongoing,day-to-day performance of tasks.

Tactical planning usually has a focus of ____.

The primary goal of internal monitoring is to maintain an informed awareness of the state of all of the organization's networks,information systems,and information security defenses.

The ____________________ statement contains a formal set of organizational principles,standards,and qualities.

The application of computing and network resources to try every possible combination of characters to crack a password is known as a ____ attack.

$\text {\underline{ Strategic} }$ plans are used to create tactical plans._________________________

According to the Corporate Governance Task Force (CGTF),during which phase in the IDEAL model and framework does the organization plan the specifics of who it will reach its destination?

____ controls deal with managerial functions and lower-level planning such as disaster recovery and incident response planning.

CISOs use the operational plan to organize,prioritize,and acquire resources for major projects.

A technique or mechanism that is used to compromise a system is called a(n)____________________.

Because it sets out general business intentions,a mission statement does not need to be concise.

Boards of directors should supervise strategic information security objectives by demanding ____________________ from the various layers of management on the information security program's effectiveness and adequacy

Introduction to the Management of Information Security

Planning for Contingencies

Information Security Policy

Developing the Security Program

Security Management Models

Security Management Practices

Risk Management: Identifying and Assessing Risk

Risk Management: Controlling Risk

Protection Mechanisms

Personnel and Security

Law and Ethics

Filters

Exam 2: Planning for Security

Strategic planning has a more short-term focus than tactical planning.

Which of the following is NOT a significant benefit of information security governance?

A ____ attack involves sending a large number of connection or information requests to a target.

Which of the following is true about mission statements?

An act or event that exploits a vulnerability is known as a(n)____________________.

The first phase of the security systems development life cycle (SecSDLC)is the ____ phase.

Top-down information security initiatives must have a(n)____________________ - ideally,an executive with sufficient influence to move the project forward,ensure that it is properly managed,and push for its acceptance throughout the organization.

____ plans are used to organize the ongoing,day-to-day performance of tasks.

Tactical planning usually has a focus of ____.

The primary goal of internal monitoring is to maintain an informed awareness of the state of all of the organization's networks,information systems,and information security defenses.

The ____________________ statement contains a formal set of organizational principles,standards,and qualities.

The application of computing and network resources to try every possible combination of characters to crack a password is known as a ____ attack.

Strategic‾ \text {\underline{ Strategic} } Strategic​ plans are used to create tactical plans._________________________

According to the Corporate Governance Task Force (CGTF),during which phase in the IDEAL model and framework does the organization plan the specifics of who it will reach its destination?

____ controls deal with managerial functions and lower-level planning such as disaster recovery and incident response planning.

CISOs use the operational plan to organize,prioritize,and acquire resources for major projects.

A technique or mechanism that is used to compromise a system is called a(n)____________________.

Because it sets out general business intentions,a mission statement does not need to be concise.

Boards of directors should supervise strategic information security objectives by demanding ____________________ from the various layers of management on the information security program's effectiveness and adequacy

Introduction to the Management of Information Security

Planning for Contingencies

Information Security Policy

Developing the Security Program

Security Management Models

Security Management Practices

Risk Management: Identifying and Assessing Risk

Risk Management: Controlling Risk

Protection Mechanisms

Personnel and Security

Law and Ethics

Filters

$\text {\underline{ Strategic} }$ plans are used to create tactical plans._________________________