Question 1

The most common qualification for a CISO includes the CISSP and CISM certifications.

Accepted Answer

A) True 
 B)False  True

Question 2

InfoSec is a profession with little personnel turnover - most InfoSec professionals stay in their positions for a very long time.

Accepted Answer

A) True 
 B)False  False

Question 3

Which of the following is a responsibility of an InfoSec technician?

Accepted Answer

A)  Developing InfoSec requirements for the organization 
B)  Providing hands-on technical consulting services to teams of technical specialists 
C)  Establishing procedures for the identification of information assets 
D)  Managing the development of InfoSec policies 
A)  Developing InfoSec requirements for the organization 
B)  Providing hands-on technical consulting services to teams of technical specialists 
C)  Establishing procedures for the identification of information assets 
D)  Managing the development of InfoSec policies B

Question 4

computer forensics certification from ISFCE

Accepted Answer

A)  Definers 
B)  Builders 
C)  security manager 
D)  security technician 
E)  systems programmer
F) ethics officer
G) CISSP
H) SSCP
I) SANS
J) CCE 
A)  Definers 
B)  Builders 
C)  security manager 
D)  security technician 
E)  systems programmer
F) ethics officer
G) CISSP
H) SSCP
I) SANS
J) CCE

Question 5

A security manager is accountable for the day-to-day operation of all or part of the InfoSec program.

Accepted Answer

A) True 
 B)False

Question 6

Maintaining a secure environment requires that the information security (InfoSec)department be carefully structured and staffed with appropriately skilled and screened personnel.

Accepted Answer

A) True 
 B)False

Question 7

Which of the following policies requires that two individuals review and approve each other's work before the task is considered complete?

Accepted Answer

A)  Task rotation 
B)  Two-person control 
C)  Separation of duties 
D)  Job rotation 
A)  Task rotation 
B)  Two-person control 
C)  Separation of duties 
D)  Job rotation

Question 8

A technically qualified individual who may configure firewalls and IDPSs, implement security software,diagnose and troubleshoot problems,and coordinate with systems and network administrators to ensure that security technical controls are properly implemented is known as a security architect.

Accepted Answer

A) True 
 B)False

Question 9

According to Schwartz et al.,employees who create and install security solutions fall under which classification of InfoSec positions?

Accepted Answer

A)  Definers 
B)  Administers 
C)  Builders 
D)  Architects 
A)  Definers 
B)  Administers 
C)  Builders 
D)  Architects

Question 10

Describe the position of security manager.

Accepted Answer

A security manager is accountable for th

Question 11

Which of the following is NOT a task that must be performed if an employee is terminated?

Accepted Answer

A)  Former employee must return all media 
B)  Former employee's home computer must be audited 
C)  Former employee's office computer must be secured 
D)  Former employee should be escorted from the premises 
A)  Former employee must return all media 
B)  Former employee's home computer must be audited 
C)  Former employee's office computer must be secured 
D)  Former employee should be escorted from the premises

Question 12

It is the responsibility of a _______________________ to develop appropriate InfoSec policies,standards,guidelines,and procedures.

Accepted Answer

The answer of It is the responsibility of a _______________________...

Question 13

Temporary hires called contract employees - or simply contractors - should not be allowed to do what?

Accepted Answer

A)  Work on the premises 
B)  Wander freely in and out of buildings 
C)  Visit the facility without specific, prior coordination 
D)  Compensated by the organization based on hourly rates 
A)  Work on the premises 
B)  Wander freely in and out of buildings 
C)  Visit the facility without specific, prior coordination 
D)  Compensated by the organization based on hourly rates

Question 14

a member of the general business community having an information security related role

Accepted Answer

A)  Definers 
B)  Builders 
C)  security manager 
D)  security technician 
E)  systems programmer
F) ethics officer
G) CISSP
H) SSCP
I) SANS
J) CCE 
A)  Definers 
B)  Builders 
C)  security manager 
D)  security technician 
E)  systems programmer
F) ethics officer
G) CISSP
H) SSCP
I) SANS
J) CCE

Question 15

create and install security solutions

Accepted Answer

A)  Definers 
B)  Builders 
C)  security manager 
D)  security technician 
E)  systems programmer
F) ethics officer
G) CISSP
H) SSCP
I) SANS
J) CCE 
A)  Definers 
B)  Builders 
C)  security manager 
D)  security technician 
E)  systems programmer
F) ethics officer
G) CISSP
H) SSCP
I) SANS
J) CCE

Question 16

an organization  that developed a series of technical security certifications such as the GIAC

Accepted Answer

A)  Definers 
B)  Builders 
C)  security manager 
D)  security technician 
E)  systems programmer
F) ethics officer
G) CISSP
H) SSCP
I) SANS
J) CCE 
A)  Definers 
B)  Builders 
C)  security manager 
D)  security technician 
E)  systems programmer
F) ethics officer
G) CISSP
H) SSCP
I) SANS
J) CCE

Question 17

Briefly describe the classifications of InfoSec positions as defined by Schwartz et al.

Accepted Answer

Definers provide the policies,guidelines

Question 18

Which of the following is NOT a typical task performed by the security technician?

Accepted Answer

A)  Configure firewalls and IDPSs 
B)  Decvelop security policy 
C)  Coordinate with systems and network administrators 
D)  Implement advanced security appliances 
A)  Configure firewalls and IDPSs 
B)  Decvelop security policy 
C)  Coordinate with systems and network administrators 
D)  Implement advanced security appliances

Question 19

a member of the IT community often responsible for complex operating system programs

Accepted Answer

A)  Definers 
B)  Builders 
C)  security manager 
D)  security technician 
E)  systems programmer
F) ethics officer
G) CISSP
H) SSCP
I) SANS
J) CCE 
A)  Definers 
B)  Builders 
C)  security manager 
D)  security technician 
E)  systems programmer
F) ethics officer
G) CISSP
H) SSCP
I) SANS
J) CCE

Question 20

Which of the following InfoSec positions is responsible for the day-to-day operation of the InfoSec program?

Accepted Answer

A)  CISO 
B)  Security manager 
C)  Security officer 
D)  Security technician 
A)  CISO 
B)  Security manager 
C)  Security officer 
D)  Security technician

The most common qualification for a CISO includes the CISSP and CISM certifications.

InfoSec is a profession with little personnel turnover - most InfoSec professionals stay in their positions for a very long time.

Which of the following is a responsibility of an InfoSec technician?

computer forensics certification from ISFCE

A security manager is accountable for the day-to-day operation of all or part of the InfoSec program.

Maintaining a secure environment requires that the information security (InfoSec)department be carefully structured and staffed with appropriately skilled and screened personnel.

Which of the following policies requires that two individuals review and approve each other's work before the task is considered complete?

A technically qualified individual who may configure firewalls and IDPSs, implement security software,diagnose and troubleshoot problems,and coordinate with systems and network administrators to ensure that security technical controls are properly implemented is known as a security architect.

According to Schwartz et al.,employees who create and install security solutions fall under which classification of InfoSec positions?

Describe the position of security manager.

Which of the following is NOT a task that must be performed if an employee is terminated?

It is the responsibility of a _______________________ to develop appropriate InfoSec policies,standards,guidelines,and procedures.

Temporary hires called contract employees - or simply contractors - should not be allowed to do what?

a member of the general business community having an information security related role

create and install security solutions

an organization that developed a series of technical security certifications such as the GIAC

Briefly describe the classifications of InfoSec positions as defined by Schwartz et al.

Which of the following is NOT a typical task performed by the security technician?

a member of the IT community often responsible for complex operating system programs

Which of the following InfoSec positions is responsible for the day-to-day operation of the InfoSec program?

Introduction to the Management of Information Security

Compliance: Law and Ethics

Governance and Strategic Planning for Security

Information Security Policy

Developing the Security Program

Risk Management: Identifying and Assessing Risk

Risk Management: Controlling Risk

Security Management Models

Security Management Practices

Planning for Contingencies

Protection Mechanisms

Filters

Exam 11: Personnel and Security

The most common qualification for a CISO includes the CISSP and CISM certifications.

InfoSec is a profession with little personnel turnover - most InfoSec professionals stay in their positions for a very long time.

Which of the following is a responsibility of an InfoSec technician?

computer forensics certification from ISFCE

A security manager is accountable for the day-to-day operation of all or part of the InfoSec program.

Maintaining a secure environment requires that the information security (InfoSec)department be carefully structured and staffed with appropriately skilled and screened personnel.

Which of the following policies requires that two individuals review and approve each other's work before the task is considered complete?

A technically qualified individual who may configure firewalls and IDPSs, implement security software,diagnose and troubleshoot problems,and coordinate with systems and network administrators to ensure that security technical controls are properly implemented is known as a security architect.

According to Schwartz et al.,employees who create and install security solutions fall under which classification of InfoSec positions?

Describe the position of security manager.

Which of the following is NOT a task that must be performed if an employee is terminated?

It is the responsibility of a _______________________ to develop appropriate InfoSec policies,standards,guidelines,and procedures.

Temporary hires called contract employees - or simply contractors - should not be allowed to do what?

a member of the general business community having an information security related role

create and install security solutions

an organization that developed a series of technical security certifications such as the GIAC

Briefly describe the classifications of InfoSec positions as defined by Schwartz et al.

Which of the following is NOT a typical task performed by the security technician?

a member of the IT community often responsible for complex operating system programs

Which of the following InfoSec positions is responsible for the day-to-day operation of the InfoSec program?

Introduction to the Management of Information Security

Compliance: Law and Ethics

Governance and Strategic Planning for Security

Information Security Policy

Developing the Security Program

Risk Management: Identifying and Assessing Risk

Risk Management: Controlling Risk

Security Management Models

Security Management Practices

Planning for Contingencies

Protection Mechanisms

Filters