Exam 2: General Security Concepts

A security procedure is a high-level statement produced by senior management that outlines both what security means to the organization and the organization's goals for security.

(True/False)

4.8/5

(31)

Question 61

The concept of separation of duties applies to networks,but is inappropriate for physical environments.

(True/False)

4.7/5

(34)

Question 62

The A in CIA refers to the term auditability.

(True/False)

4.8/5

(36)

Question 63

During a job interview you are asked to explain in what ways you would secure the company's information if you were hired.Using any three principles of security from the chapter,describe how you would secure their information.

(Essay)

4.8/5

(30)

Question 64

The incident response team reviewed the security logs and discovered that the network had been breached,due to a misconfigured firewall.This is a failure of which element of the operational model of computer security?

(Multiple Choice)

4.8/5

(29)

Question 65

Showing 61 - 65 of 65

A security procedure is a high-level statement produced by senior management that outlines both what security means to the organization and the organization's goals for security.

The concept of separation of duties applies to networks,but is inappropriate for physical environments.

The A in CIA refers to the term auditability.

During a job interview you are asked to explain in what ways you would secure the company's information if you were hired.Using any three principles of security from the chapter,describe how you would secure their information.

The incident response team reviewed the security logs and discovered that the network had been breached,due to a misconfigured firewall.This is a failure of which element of the operational model of computer security?

Introduction and Security Trends

Operational-Organizational Security

The Role of People in Security

Cryptography

Public Key Infrastructure

Standards and Protocols

Physical Security

Network Fundamentals

Infrastructure Security

Authentication and Remote Access

Wireless

Intrusion Detection Systems and Network Security

Baselines

Types of Attacks and Malicious Software

E-Mail and Instant Messaging

Web Components

Secure Software Development

Disaster Recovery, Business Continuity, and Organizational Policies

Risk Management

Change Management

Privilege Management

Computer Forensics

Legal Issues and Ethics

Privacy

Filters