Deck 10: Security Policies

Question 1

Security policies toward programmers and web developers are developmental policies.

Answer 1

True

Question 2

A security policy is a document that defines how an organization deals with some aspect of security.

Answer 2

True

Question 3

Principal of least privilege means that no one person can perform critical tasks.

Answer 3

False

Question 4

Use for business communications only and the disallowing of the transmission of confidential business information are recommended guidelines for _______

A)Desktop configuration
B)Instant messaging
C)USB drives
D)None of the above

Question 5

New employees should receive a copy of the company's __________ policies.

A)Business continuation
B)Disaster recovery
C)Security/acceptable use
D)None of the above

Question 6

You cannot disable some USB devices from end-user computers and allow others.

Question 7

Passwords are an area of user policies.

Question 8

On an employee's last day of work,his workstation hard drive should be searched.

Question 9

One reason allowing a user to change the desktop configuration poses a security problem is that to change a desktop the user must also be given rights to change other system settings.

Question 10

Procedures for adding users,removing users,and dealing with security issues are examples of ___________ policies.

A)User
B)Computer
C)System administration
D)Password

Question 11

An organization should not permit end users to install anything on their computer.

Question 12

The plan to return a business to full normal operations is ____________

A)BCP
B)DRP
C)BIA
D)ALE

Question 13

__________ is the most obvious reason for organizations to provide their users with Internet access.

A)Email
B)Job searching
C)Emergency communications
D)None of the above

Question 14

Which of the following is an activity that falls into a gray area and might be acceptable Internet use in some organizations but not others?

A)Email
B)Online training
C)Web meetings
D)Online shopping during a break time

Question 15

Which of the following should NOT be a part of an organization's policy regarding email attachments?

A)It was an expected attachment.
B)It came from a known source,and the source is confirmed.
C)It appears to be a legitimate business document.
D)None of the above

Question 16

A document that defines how an organization deals with some aspect of security is a(n)__________.

A)Security policy
B)Business plan
C)Security update
D)None of the above

Question 17

The background,screensaver,font size,and resolution are elements of _______.

A)Desktop configuration
B)File extensions
C)Passwords
D)None of the above

Question 18

Standards are specific instructions on how to handle a specific issue.

Question 19

A good password should have at least eight characters and use all lowercase letters.

Question 20

Passwords,Internet use,email attachments,software installation,instant messaging,and desktop configuration are areas of ______.

A)Computer policies
B)User policies
C)Documentation
D)Network policies

Question 21

When an employee leaves,all _______ should be terminated.

A)Web histories
B)Logins
C)Desktops
D)Passwords

Question 22

The conflict between the users' goal for unfettered access to data and the security administrator's goal to protect that data is an issue of ______________.

A)System administration
B)Access control
C)Password protection
D)Social engineering

Question 23

If you experience a denial-of-service attack,you can use firewall logs to determine the _______ from which the attack originated.

A)Computer operating system
B)Computer manufacturer
C)IP address
D)None of the above

Question 24

The principal that users have access to only network resources when an administrator explicitly grants them is called ___________.

A)Implicit deny
B)Least privilege
C)Separation of duty
D)Job rotation

Question 25

If you determine a virus has struck a system,the first step is to _________.

A)Scan and clean infected systems
B)Log the incident
C)Unplug the machines from the network
D)Notify appropriate organization leaders