Question 1

GGG security is commonly used to describe which aspect of security?

Accepted Answer

A)  technical 
B)  software 
C)  physical 
D)  theoretical 
A)  technical 
B)  software 
C)  physical 
D)  theoretical C

Question 2

Legal assessment for the implementation of the information security program is almost always done by the information security or IT departments.

Accepted Answer

A) True 
 B)False  False

Question 3

Which of the following is NOT among the functions typically performed within the InfoSec department as a compliance enforcement obligation?

Accepted Answer

A)  policy 
B)  centralized authentication 
C)  compliance/audit 
D)  risk management 
A)  policy 
B)  centralized authentication 
C)  compliance/audit 
D)  risk management B

Question 4

Typically considered the top information security officer in an organization.

Accepted Answer

A)  InfoSec program 
B)  SETA 
C)  scope creep 
D)  security watchstander 
E)  security manager
F) CISO
G) projectitis
H) critical path method
I) security technicians
J) security awareness program 
A)  InfoSec program 
B)  SETA 
C)  scope creep 
D)  security watchstander 
E)  security manager
F) CISO
G) projectitis
H) critical path method
I) security technicians
J) security awareness program

Question 5

On-the-job training can result in substandard work performance while the trainee gets up to speed.

Accepted Answer

A) True 
 B)False

Question 6

What are the components of the security program element described as preparing for contingencies and disasters?

Accepted Answer

Business plan,identi

Question 7

List the steps of the seven-step methodology for implementing training.

Accepted Answer

The seven-step methodology for implement

Question 8

An organization carries out a risk ____________________ function to evaluate risks present in IT initiatives and/or systems.

Accepted Answer

The answer of An organization carries out a risk ____________________...

Question 9

A(n)____________________ is a specific point in the project plan when a task that has a noticeable impact on plan's the progress is complete.

Accepted Answer

The answer of A(n)____________________ is a specific point in the...

Question 10

Threats from insiders are more likely in a small organization than in a large one.

Accepted Answer

A) True 
 B)False

Question 11

The goal of a security ____________________ program is to keep information security at the forefront of users' minds on a daily basis.

Accepted Answer

The answer of The goal of a security ____________________ program...

Question 12

Which of the following is an advantage of the formal class method of training?

Accepted Answer

A)  Personal 
B)  Self-paced, can go as fast or as slow as the trainee needs 
C)  Can be scheduled to fit the needs of the trainee 
D)  Interaction with trainer is possible 
A)  Personal 
B)  Self-paced, can go as fast or as slow as the trainee needs 
C)  Can be scheduled to fit the needs of the trainee 
D)  Interaction with trainer is possible

Question 13

Each organization has to determine its own project management methodology for IT and information security projects.

Accepted Answer

A) True 
 B)False

Question 14

Which of the following is true about a company's InfoSec awareness Web site?

Accepted Answer

A)  it should contain large images to maintain interest 
B)  appearance doesn't matter if the information is there 
C)  it should be placed on the Internet for public use 
D)  it should be tested with multiple browsers 
A)  it should contain large images to maintain interest 
B)  appearance doesn't matter if the information is there 
C)  it should be placed on the Internet for public use 
D)  it should be tested with multiple browsers

Question 15

The ____________________ program is designed to reduce the occurrence of accidental security breaches by members of the organization.

Accepted Answer

security e

Question 16

​

Accepted Answer

A)  InfoSec program 
B)  SETA 
C)  scope creep 
D)  security watchstander 
E)  security manager
F) CISO
G) projectitis
H) critical path method
I) security technicians
J) security awareness program 
A)  InfoSec program 
B)  SETA 
C)  scope creep 
D)  security watchstander 
E)  security manager
F) CISO
G) projectitis
H) critical path method
I) security technicians
J) security awareness program

Question 17

Occurs when a project manager spends more time working in the project management software than accomplishing meaningful project work.

Accepted Answer

A)  InfoSec program 
B)  SETA 
C)  scope creep 
D)  security watchstander 
E)  security manager
F) CISO
G) projectitis
H) critical path method
I) security technicians
J) security awareness program 
A)  InfoSec program 
B)  SETA 
C)  scope creep 
D)  security watchstander 
E)  security manager
F) CISO
G) projectitis
H) critical path method
I) security technicians
J) security awareness program

Question 18

The security education,training,and awareness (SETA)program is designed to reduce the occurence of external security attacks.

Accepted Answer

A) True 
 B)False

Question 19

Project ____________________ is a description of a project's features,capabilities,functions,and quality level,used as the basis of a project plan.

Accepted Answer

The answer of Project ____________________ is a description of a project's features,capabilities,functions,and...

Question 20

Which of the following is a disadvantage of the one-on-one training method?

Accepted Answer

A)  Inflexible 
B)  May not be responsive to the needs of all the trainees 
C)  Content may not be customized to the needs of the organization 
D)  Resource intensive, to the point of being inefficient 
A)  Inflexible 
B)  May not be responsive to the needs of all the trainees 
C)  Content may not be customized to the needs of the organization 
D)  Resource intensive, to the point of being inefficient

GGG security is commonly used to describe which aspect of security?

Legal assessment for the implementation of the information security program is almost always done by the information security or IT departments.

Which of the following is NOT among the functions typically performed within the InfoSec department as a compliance enforcement obligation?

Typically considered the top information security officer in an organization.

On-the-job training can result in substandard work performance while the trainee gets up to speed.

What are the components of the security program element described as preparing for contingencies and disasters?

List the steps of the seven-step methodology for implementing training.

An organization carries out a risk ____________________ function to evaluate risks present in IT initiatives and/or systems.

A(n)____________________ is a specific point in the project plan when a task that has a noticeable impact on plan's the progress is complete.

Threats from insiders are more likely in a small organization than in a large one.

The goal of a security ____________________ program is to keep information security at the forefront of users' minds on a daily basis.

Which of the following is an advantage of the formal class method of training?

Each organization has to determine its own project management methodology for IT and information security projects.

Which of the following is true about a company's InfoSec awareness Web site?

The ____________________ program is designed to reduce the occurrence of accidental security breaches by members of the organization.

Occurs when a project manager spends more time working in the project management software than accomplishing meaningful project work.

The security education,training,and awareness (SETA)program is designed to reduce the occurence of external security attacks.

Project ____________________ is a description of a project's features,capabilities,functions,and quality level,used as the basis of a project plan.

Which of the following is a disadvantage of the one-on-one training method?

Introduction to the Management of Information Security

Compliance: Law and Ethics

Governance and Strategic Planning for Security

Information Security Policy

Risk Management: Identifying and Assessing Risk

Risk Management: Controlling Risk

Security Management Models

Security Management Practices

Planning for Contingencies

Personnel and Security

Protection Mechanisms

Filters

Exam 5: Developing the Security Program

GGG security is commonly used to describe which aspect of security?

Legal assessment for the implementation of the information security program is almost always done by the information security or IT departments.

Which of the following is NOT among the functions typically performed within the InfoSec department as a compliance enforcement obligation?

Typically considered the top information security officer in an organization.

On-the-job training can result in substandard work performance while the trainee gets up to speed.

What are the components of the security program element described as preparing for contingencies and disasters?

List the steps of the seven-step methodology for implementing training.

An organization carries out a risk ____________________ function to evaluate risks present in IT initiatives and/or systems.

A(n)____________________ is a specific point in the project plan when a task that has a noticeable impact on plan's the progress is complete.

Threats from insiders are more likely in a small organization than in a large one.

The goal of a security ____________________ program is to keep information security at the forefront of users' minds on a daily basis.

Which of the following is an advantage of the formal class method of training?

Each organization has to determine its own project management methodology for IT and information security projects.

Which of the following is true about a company's InfoSec awareness Web site?

The ____________________ program is designed to reduce the occurrence of accidental security breaches by members of the organization.

​

Occurs when a project manager spends more time working in the project management software than accomplishing meaningful project work.

The security education,training,and awareness (SETA)program is designed to reduce the occurence of external security attacks.

Project ____________________ is a description of a project's features,capabilities,functions,and quality level,used as the basis of a project plan.

Which of the following is a disadvantage of the one-on-one training method?

Introduction to the Management of Information Security

Compliance: Law and Ethics

Governance and Strategic Planning for Security

Information Security Policy

Risk Management: Identifying and Assessing Risk

Risk Management: Controlling Risk

Security Management Models

Security Management Practices

Planning for Contingencies

Personnel and Security

Protection Mechanisms

Filters