Question 1

What is the name for a framework and corresponding functions required to enable incident response and incident handling within an organization?

Accepted Answer

A) Incident reporting 
B) Incident management 
C) Incident handling 
D) Incident planning 
A) Incident reporting 
B) Incident management 
C) Incident handling 
D) Incident planning B

Question 2

A collection of suggestions that should be implemented are referred to as a:

Accepted Answer

A) security policy 
B) baseline 
C) guideline 
D) security procedure 
A) security policy 
B) baseline 
C) guideline 
D) security procedure C

Question 3

Contrast the difference between a pedagogical approach versus an andragogical approach to subject matter.

Accepted Answer

In a pedagogical approach, the subject matter is defined by what the teacher wants to give. In an andragogical approach, learning is organized around situations in life or at work.

Question 4

Audits serve to verify that the security protections enacted by an organization are being followed and that corrective actions can be swiftly implemented before an attacker exploits a vulnerability.

Accepted Answer

A) True 
 B)False

Question 5

A written document that states how an organization plans to protect the company's information technology assets is a:

Accepted Answer

A) security policy 
B) guideline 
C) security procedure 
D) standard 
A) security policy 
B) guideline 
C) security procedure 
D) standard

Question 6

What kind of learners learn from taking notes, being at the front of the class, and watching presentations?

Accepted Answer

A) Kinesthetic 
B) Auditory 
C) Spatial 
D) Visual 
A) Kinesthetic 
B) Auditory 
C) Spatial 
D) Visual

Question 7

Matching
-Risk control type that covers the operational procedures to limit risk​

Accepted Answer

A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management 
A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management

Question 8

Matching
-The "framework" and functions required to enable incident response and incident handling within an organization.​

Accepted Answer

A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management 
A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management

Question 9

Policies that include statements regarding how an employee's information technology resources will be addressed are part of a:

Accepted Answer

A) VPN policy 
B) acceptable use policy 
C) security-related human resource policy 
D) technical policy 
A) VPN policy 
B) acceptable use policy 
C) security-related human resource policy 
D) technical policy

Question 10

Which roles should be represented on the security policy development team?

Accepted Answer

Senior level administrator
Mem

Question 11

Generally considered to be the most important information security policies, what item below defines the actions a user may perform while accessing systems and networking equipment?

Accepted Answer

A) Acceptable use policies 
B) Encryption policies 
C) Data loss policies 
D) VPN policies 
A) Acceptable use policies 
B) Encryption policies 
C) Data loss policies 
D) VPN policies

Question 12

Which type of network below uses a direct connection between users, and involves each device simultaneously acting as a client and a server?

Accepted Answer

A) Peer 
B) Client-server 
C) P2P 
D) Share 
A) Peer 
B) Client-server 
C) P2P 
D) Share

Question 13

What concept below is at the very heart of information security?

Accepted Answer

A) threat 
B) mitigation 
C) risk 
D) management 
A) threat 
B) mitigation 
C) risk 
D) management

Question 14

Matching
-​A policy that defines the actions users may perform while access systems and networking equipment

Accepted Answer

A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management 
A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management

Question 15

List four attributes that should be compiled for new equipment in the change management documentation.

Accepted Answer

IP and MAC addresses
Equipment

Question 16

Matching
-A methodology for making modifications to a system and keeping track of those changes.​

Accepted Answer

A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management 
A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management

Question 17

Identify two opportunities for security education and training.

Accepted Answer

When a new employee is hired
After a com

Question 18

____________________ seeks to approach changes systematically and provide the necessary documentation of the changes.

Accepted Answer

The answer of ____________________ seeks to approach changes systematically and...

Question 19

What is a general security tip for using a social networking site?

Accepted Answer

Consider carefully who is accepted as a

Question 20

Matching
-​An event that in the beginning is considered to be a risk yet turns out to not be one.

Accepted Answer

A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management 
A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management

What is the name for a framework and corresponding functions required to enable incident response and incident handling within an organization?

A collection of suggestions that should be implemented are referred to as a:

Contrast the difference between a pedagogical approach versus an andragogical approach to subject matter.

Audits serve to verify that the security protections enacted by an organization are being followed and that corrective actions can be swiftly implemented before an attacker exploits a vulnerability.

A written document that states how an organization plans to protect the company's information technology assets is a:

What kind of learners learn from taking notes, being at the front of the class, and watching presentations?

Matching -Risk control type that covers the operational procedures to limit risk

Matching -The "framework" and functions required to enable incident response and incident handling within an organization.

Policies that include statements regarding how an employee's information technology resources will be addressed are part of a:

Which roles should be represented on the security policy development team?

Generally considered to be the most important information security policies, what item below defines the actions a user may perform while accessing systems and networking equipment?

Which type of network below uses a direct connection between users, and involves each device simultaneously acting as a client and a server?

What concept below is at the very heart of information security?

Matching -A policy that defines the actions users may perform while access systems and networking equipment

List four attributes that should be compiled for new equipment in the change management documentation.

Matching -A methodology for making modifications to a system and keeping track of those changes.

Identify two opportunities for security education and training.

____________________ seeks to approach changes systematically and provide the necessary documentation of the changes.

What is a general security tip for using a social networking site?

Matching -An event that in the beginning is considered to be a risk yet turns out to not be one.

Introduction to Security

Malware and Social Engineering Attacks

Application and Networking-Based Attacks

Host, Application, and Data Security

Basic Cryptography

Advanced Cryptography

Network Security

Administering a Secure Network

Wireless Network Security

Mobile Device Security

Access Control Fundamentals

Authentication and Account Management

Business Continuity

Vulnerability Assessment and Third Party Integration

Filters

Exam 14: Risk Mitigation

What is the name for a framework and corresponding functions required to enable incident response and incident handling within an organization?

A collection of suggestions that should be implemented are referred to as a:

Contrast the difference between a pedagogical approach versus an andragogical approach to subject matter.

Audits serve to verify that the security protections enacted by an organization are being followed and that corrective actions can be swiftly implemented before an attacker exploits a vulnerability.

A written document that states how an organization plans to protect the company's information technology assets is a:

What kind of learners learn from taking notes, being at the front of the class, and watching presentations?

Matching -Risk control type that covers the operational procedures to limit risk​

Matching -The "framework" and functions required to enable incident response and incident handling within an organization.​

Policies that include statements regarding how an employee's information technology resources will be addressed are part of a:

Which roles should be represented on the security policy development team?

Generally considered to be the most important information security policies, what item below defines the actions a user may perform while accessing systems and networking equipment?

Which type of network below uses a direct connection between users, and involves each device simultaneously acting as a client and a server?

What concept below is at the very heart of information security?

Matching -​A policy that defines the actions users may perform while access systems and networking equipment

List four attributes that should be compiled for new equipment in the change management documentation.

Matching -A methodology for making modifications to a system and keeping track of those changes.​

Identify two opportunities for security education and training.

____________________ seeks to approach changes systematically and provide the necessary documentation of the changes.

What is a general security tip for using a social networking site?

Matching -​An event that in the beginning is considered to be a risk yet turns out to not be one.

Introduction to Security

Malware and Social Engineering Attacks

Application and Networking-Based Attacks

Host, Application, and Data Security

Basic Cryptography

Advanced Cryptography

Network Security

Administering a Secure Network

Wireless Network Security

Mobile Device Security

Access Control Fundamentals

Authentication and Account Management

Business Continuity

Vulnerability Assessment and Third Party Integration

Filters

Matching -Risk control type that covers the operational procedures to limit risk

Matching -The "framework" and functions required to enable incident response and incident handling within an organization.

Matching -A policy that defines the actions users may perform while access systems and networking equipment

Matching -A methodology for making modifications to a system and keeping track of those changes.

Matching -An event that in the beginning is considered to be a risk yet turns out to not be one.