Deck 3: Operational-Organizational Security

Question 1

(p.D)Recommendations as it relates to a policy is a function of

A)Standards
B)Guidelines
C)Laws and regulations
D)CIRT emails

Answer 1

B

Question 2

A fire suppression system that is safe for humans,but will destroy equipment is

A)Halon
B)Sprinkler-based systems
C)Argon
D)Carbon dioxide

Answer 2

B

Question 3

Your boss needs instructions explaining the steps of how to send encrypted email properly for all employees.You will need to create the _________.

A)policy
B)procedure
C)standard
D)guideline

Answer 3

B

Question 4

802.11 wireless networks in relation to wired networks are

A)Difficult to set up and less secure
B)Easy to set up and easy to secure
C)Difficult to set up but more secure
D)Easy to set up but less secure

Question 5

Which of the following is NOT one of the three basic ways to protect electromagnetic emanations?

A)Put the equipment beyond the point that the emanations can be picked up.
B)Provide shielding for the equipment itself.
C)Create a reverse magnetic field around the equipment to cancel out waves emanating from or going to the equipment.
D)Provide a shielded enclosure (such as a room)to put the equipment in.

Question 6

Locks,sign-in logs,and security guards are examples of

A)Access controls.
B)Intrusion detection mechanisms.
C)Authentication methods.
D)Auditing devices.

Question 7

Bluetooth is a wireless technology that is used for

A)Underwater communications
B)Long-range communications
C)Short-range communications
D)Space communications

Question 8

Procedures are high-level,broad statements of what the organization wants to accomplish.

Question 9

The company CIO wants you and your team to check the security of the network by simulating an attack by malicious individuals.He is asking you to

A)Do something illegal
B)Conduct a vulnerability assessment
C)Conduct a penetration test
D)Analyze the risk the network faces

Question 10

A critical piece of equipment that provides power to systems even during a black out is called a(n)_______________.

A)power strip
B)surge protector
C)uninterruptible power supply
D)password generator

Question 11

What is the problem described by the van Eck phenomenon and studied under TEMPEST?

A)Electromagnetic pulses destroying sensitive computer equipment
B)Magnetic fields that interfere with signals crossing Local Area Network (LAN)cables
C)Electromagnetic eavesdropping
D)Piggybacking on electromagnetic communications

Question 12

Statements made by management that lays out the organization's position on an issue are called ________.

A)policies
B)procedures
C)standards
D)guidelines

Question 13

IEEE 802.11 is a set of standards suited for

A)Wide area networks
B)Local area networks
C)Personal area networks
D)Cellular networks.

Question 14

The outermost layer of physical security should

A)Be where the most specific controls are
B)Have the strongest authentication controls
C)Contain the most private activities
D)Contain the most publicly visible activities

Question 15

What fire-suppression system is the best for areas with expensive computer equipment?

A)Water (sprinklers)
B)Handheld fire extinguishers
C)Halon-based
D)Sand buckets

Question 16

The greatest danger to networks comes from

A)Foreign hackers
B)Attacks coming across the public switched telephone network
C)Natural disasters
D)Insiders

Question 17

The three types of authentication used for access control are

A)Passwords,tokens,and key cards
B)Something you have,something you know,something you are
C)Encryption,deception,retention
D)Encryption,hashes,signatures.

Question 18

A fire suppression system that is safe for equipment,but dangerous for humans is

A)Halon
B)Sprinkler-based systems
C)Class A fire extinguisher
D)Water-based systems.

Question 19

The most sensitive equipment should be located

A)At the outer perimeter of the building
B)In a publicly accessible area
C)Deep inside the organization
D)Wherever it is easiest for employees to access it

Question 20

The location where wireless access points are placed can

A)Interfere with other wired network communications
B)Make it easier or harder for and attacker to access the network
C)Cause electromagnetic interference
D)Cause illness from prolonged exposure

Question 21

Open spaces can serve as a barrier to protect a facility.
It is difficult to cross open spaces without being detected.

Question 22

_______________ are the step-by-step instructions on how to implement policies in the organization.

Question 23

Explain what is meant by the statement "Consider access from all six sides."

Question 24

_______________ are high-level,broad statements of what the organization wants to accomplish.

Question 25

_______________ are recommendations relating to a policy.

Question 26

Plan,implement,monitor,and evaluate are the four steps of the _____________

Question 27

Access controls that utilize "something you are," such as finger prints,irises,or hand geometry,is called _______________.

Question 28

The biggest danger to any organization comes from external attacks according to most experts.

Question 29

Standards are recommendations relating to a policy.

Question 30

_______________ are devices that have batteries that are used to keep equipment running in the event of a power outage.

Question 31

UPS is short for keeping UP Services.

Question 32

_______________ are systems used to maintain the comfort level of an office environment.

Question 33

_______________ consists of a small space that is large enough for only one person at a time,with two locking doors.

Question 34

_______________ are mandatory elements regarding the implementation of a policy.

Question 35

TEMPEST is a program developed by the US department of defense to protect equipment from the ill effects of weather and other natural disasters.

Question 36

Bluetooth is an wireless networking technology that is good for ranges up to 1000 meters.

Question 37

Voice recognition,iris scans,and facial geometry can be used for biometric access controls.

Question 38

HVAC keeps equipment temperatures within reasonable ranges.

Question 39

_______________ is designed as a short-range (approximately ten meters)personal area network (PAN).

Question 40

Halon is effective at putting out fires and safe for humans but can damage equipment.

Question 41

What are physical access controls? Give examples.

Question 42

Choosing the location of equipment can have an impact on your security.Explain the security issues you would consider when placing various types of equipment.

Question 43

What are the types of fire suppression equipment and what are the important characteristics of each?