Exam 8: Controls for Information Security

A separate network located outside the organization's internal information system that permits controlled access from the Internet to selected resources is known as a(n)

Which of the following is not one of the three fundamental information security concepts?

Describe the three types of detective controls that enable organizations timely detection of intrusions and problems.

Which of the following is commonly true of the default settings for most commercially available wireless access points?

Describe the five principles of the Trust Services Framework.Select one of the principles and discuss the why it is important to an organization.

The ________ disseminates information about fraud,errors,breaches and other improper system uses and their consequences.

In the time-based model of information security,R represents

Timely detection of problems is not enough to protect organizations' information resources.

Which of the following preventive controls are necessary to provide adequate security for social engineering threats?

Explain social engineering.

Describe the concept of Internet of Things (IoT)and its security implications.

Identify a party below who was involved with developing the Trust Services Framework.

The process that screens individual IP packets based solely on the contents of the source and/or destination fields in the packet header is known as

Why does COBIT5 DSS-05.06 stress the importance of restricting physical access to network printers?

New employees of Baker Technologies are assigned user names and appropriate permissions.Their credentials are then entered into the company's information system's access control matrix.This is an example of a(n)

Which of the following is an example of a corrective control?

In the time-based model of information security,P represents

Compatibility tests utilize a(n)________,which is a list of authorized users,programs,and data files the users are authorized to access or manipulate.

Explain the value of penetration testing.

Restricting access of users to specific portions of the system as well as specific tasks,is an example of