Question 1

Physical access or environmental controls are only relevant to areas
housing the relevant equipment.

Accepted Answer

A) True 
 B)False  True

Question 2

An IT security ________ helps to reduce risks.

Accepted Answer

A) control 
B) safeguard 
C) countermeasure 
D) all of the above 
A) control 
B) safeguard 
C) countermeasure 
D) all of the above D

Question 3

Management should conduct a ________ to identify those controls that are most appropriate and provide the greatest benefit to the organization given the available resources.

Accepted Answer

A) cost analysis 
B) cost-benefit analysis 
C) benefit analysis 
D) none of the above 
A) cost analysis 
B) cost-benefit analysis 
C) benefit analysis 
D) none of the above B

Question 4

Management controls refer to issues that management needs to address.

Accepted Answer

A) True 
 B)False

Question 5

A contingency plan for systems critical to a large organization would be _________ than that for a small business.

Accepted Answer

A) smaller,less detailed 
B) larger,less detailed 
C) larger,more detailed 
D) smaller,more detailed 
A) smaller,less detailed 
B) larger,less detailed 
C) larger,more detailed 
D) smaller,more detailed

Question 6

______ checking is an audit process to review the organization's security processes.

Accepted Answer

The answer of ______ checking is an audit process to...

Question 7

________ controls involve the correct use of hardware and software security capabilities in systems.

Accepted Answer

The answer of ________ controls involve the correct use of...

Question 8

_______ management is concerned with specifically keeping track of the configuration of each system in use and the changes made to each.

Accepted Answer

The answer of _______ management is concerned with specifically keeping...

Question 9

_________ controls focus on preventing security beaches from occurring by inhibiting attempts to violate security policies or exploit a vulnerability.

Accepted Answer

The answer of _________ controls focus on preventing security beaches...

Question 10

To ensure that a suitable level of security is maintained,management
must follow up the implementation with an evaluation of the effectiveness of the security controls.

Accepted Answer

A) True 
 B)False

Question 11

The objective of the ________ control category is to counteract interruptions to business activities and to protect critical business processes from the effects of major failures of information systems or disasters and to ensure their timely resumption.

Accepted Answer

A) asset management 
B) business continuity management 
C) information security incident management 
D) physical and environmental security 
A) asset management 
B) business continuity management 
C) information security incident management 
D) physical and environmental security

Question 12

All controls are applicable to all technologies.

Accepted Answer

A) True 
 B)False

Question 13

_______ controls focus on security policies,planning,guidelines,and standards that influence the selection of operational and technical controls to reduce the risk of loss and to protect the organization's mission.

Accepted Answer

A) Management 
B) Technical 
C) Preventative 
D) Supportive 
A) Management 
B) Technical 
C) Preventative 
D) Supportive

Question 14

It is likely that the organization will not have the resources to
implement all the recommended controls.

Accepted Answer

A) True 
 B)False

Question 15

The three steps for IT security management controls and implementation are: prioritize risks,respond to risks,and __________ .

Accepted Answer

The answer of The three steps for IT security management...

Question 16

Operational controls range from simple to complex measures that work
together to secure critical and sensitive data,information,and IT systems functions.

Accepted Answer

A) True 
 B)False

Question 17

________ is a means of managing risk,including policies,procedures,guidelines,practices,or organizational structures.

Accepted Answer

The answer of ________ is a means of managing risk,including...

Question 18

Maintenance of security controls,security compliance checking,change and configuration management,and incident handling are all included in the follow-up stage of the _________ process.

Accepted Answer

A) management 
B) security awareness and training 
C) maintenance 
D) all of the above 
A) management 
B) security awareness and training 
C) maintenance 
D) all of the above

Question 19

The follow-up stage of the management process includes _________.

Accepted Answer

A) maintenance of security controls 
B) security compliance checking 
C) incident handling 
D) all of the above 
A) maintenance of security controls 
B) security compliance checking 
C) incident handling 
D) all of the above

Question 20

Contingency planning falls into the _________ class of security controls.

Accepted Answer

The answer of Contingency planning falls into the _________ class...

Exam 15: It Security Controls,plans,and Procedures

Physical access or environmental controls are only relevant to areas housing the relevant equipment.

An IT security ________ helps to reduce risks.

Management should conduct a ________ to identify those controls that are most appropriate and provide the greatest benefit to the organization given the available resources.

Management controls refer to issues that management needs to address.

A contingency plan for systems critical to a large organization would be _________ than that for a small business.

______ checking is an audit process to review the organization's security processes.

________ controls involve the correct use of hardware and software security capabilities in systems.

_______ management is concerned with specifically keeping track of the configuration of each system in use and the changes made to each.

_________ controls focus on preventing security beaches from occurring by inhibiting attempts to violate security policies or exploit a vulnerability.

To ensure that a suitable level of security is maintained,management must follow up the implementation with an evaluation of the effectiveness of the security controls.

The objective of the ________ control category is to counteract interruptions to business activities and to protect critical business processes from the effects of major failures of information systems or disasters and to ensure their timely resumption.

All controls are applicable to all technologies.

_______ controls focus on security policies,planning,guidelines,and standards that influence the selection of operational and technical controls to reduce the risk of loss and to protect the organization's mission.

It is likely that the organization will not have the resources to implement all the recommended controls.

The three steps for IT security management controls and implementation are: prioritize risks,respond to risks,and __________ .

Operational controls range from simple to complex measures that work together to secure critical and sensitive data,information,and IT systems functions.

________ is a means of managing risk,including policies,procedures,guidelines,practices,or organizational structures.

Maintenance of security controls,security compliance checking,change and configuration management,and incident handling are all included in the follow-up stage of the _________ process.

The follow-up stage of the management process includes _________.

Contingency planning falls into the _________ class of security controls.

Computer Systems Overview

Cryptographic Tools

User Authentication

Access Control

Database and Cloud Security

Malicious Software

Denial-Of-Service Attacks

Intrusion Detection

Firewalls and Intrusion Prevention Systems

Buffer Overflow

Software Security

Operating System Security

Trusted Computing and Multilevel Security

It Security Management and Risk Assessment

Physical and Infrastructure Security

Human Resources Security

Security Auditing

Legal and Ethical Aspects

Symmetric Encryption and Message Confidentiality

Public-Key Cryptography and Message Authentication

Internet Security Protocols and Standards

Internet Authentication Applications

Wireless Network Security

Filters