Question 1

Copyright law protects the right of authors to control their work. What does trademark protect?

Accepted Answer

A)  Colors
B)  Symbols
C)  Shapes
D)  All of the Above D

Question 2

You have been assigned to deal with the company's risk issues to protect again total risk and residual risk. What approach can you use?

Accepted Answer

A)  Risk Avoidance
B)  Risk Mitigation
C)  Risk Acceptance
D)  All of the above D

Question 3

Jeff is informing Mark that he believes there has been a security breach and wants things checked. Mark checks all security systems within the computer, completes an access audit, and checks exterior security devices, although he knows that his company has installed every security option possible. What is Mark practicing?

Accepted Answer

A)  Due Care
B)  Due Diligence
C)  Both A and B
D)  Neither A nor B C

Question 4

What type of policy presents management's decisions that are more specific to the actual computers, networks, applications, and data?

Accepted Answer

A)  Company Policy
B)  Organizational Security Policy
C)  Issue-specific Policy
D)  System-specific Policy

Question 5

Paul is talking to his employees about threat agents. What item is not a threat agent?

Accepted Answer

A)  Malware
B)  Users
C)  Rain
D)  Contractor

Question 6

The functionality and effectiveness of countermeasures is as important as determining the type of risk by completing quantitative and qualitative analysis. What risk can prove to be the most detrimental to a company long after the original risk event?

Accepted Answer

A)  Cascading Errors
B)  Illogical Processing
C)  Delayed Loss
D)  Immediate Loss

Question 7

Ron is an executive who is being sued by an ex-employee. He is not worried, for he knows he has done everything within the regulation guidelines and has acted ethically. Who wrote the guidelines that Ron has followed?

Accepted Answer

A)  Ethics Board International
B)  The International Internet Associations
C)  The Federal Sentencing Guidelines for Organizations
D)  Corporate Ethics and Internet Organization

Question 8

Lulu took medicine created by XYZ Pharmaceutical that damaged her liver. Now they are being sued. What type of law will this trial be held under?

Accepted Answer

A)  Civil Law
B)  Common Law
C)  Regulatory Law
D)  Criminal Law

Question 9

What order should these steps be completed in when conducting a Business Impact Analysis (BIA)?

Accepted Answer

A)  Assess impact if crisis were to happen; Determine maximum allowable outage and recovery times; Identify critical processes
B)  Identify critical processes; Assess impact if crisis were to happen; Determine maximum allowable outage and recovery times
C)  Identify critical processes; Determine maximum allowable outage and recovery times; Assess impact if crisis were to happen
D)  None of the above

Question 10

What Act requires U.S. federal agencies to identify computer systems that contain sensitive information?

Accepted Answer

A)  The Computer Fraud and Abuse Act
B)  Basel II
C)  Computer Security Act of 1987
D)  Federal Privacy Act of 1974

Question 11

What value tells a company how much should sensibly be spent per year on safeguard measures to protect assets from threats?

Accepted Answer

A)  Control Analysis
B)  Annualized Rate of Occurrence
C)  Failure and Fault Analysis
D)  Crypt Failure Analysis

Question 12

What is the name for the primary U.S. federal antihacking statue?

Accepted Answer

A)  The Computer Fraud and Abuse Act
B)  The Fraud and Abuse Act for Computers
C)  Intellectual Property Act of Internet Access
D)  Computer Piracy Act

Question 13

Paul has just completed identifying and assessing risk, reduced it to an acceptable level, and implemented the right mechanisms to maintain that level. What did Paul just do?

Accepted Answer

A)  Information Basing
B)  Information Risk Management
C)  Equipment Malfunction Checks
D)  Application Checks

Question 14

Mark, the manager, must create a policy that establishes how a security program will be set up, lay out the program's goals, assign responsibility, show the strategic and tactical value of security, and outline how enforcement should be carried out. What policy is Mark creating?

Accepted Answer

A)  Company Policy
B)  Organizational Security Policy
C)  Issue-specific Policy
D)  Standard Policy

Question 15

There are four categories of software licensing. Which item is not one of those categories?

Accepted Answer

A)  Freeware
B)  Loan-ware
C)  Shareware
D)  Academic

Question 16

What type of attack has the goal of uncovering sensitive information without wanting to compromise any type of flaw or weakness?

Accepted Answer

A)  Differential Power Analysis
B)  Electromagnetic Analysis
C)  Side-Channel Attacks
D)  All of the above

Question 17

What causes vulnerability that can lead to threats and exposures?

Accepted Answer

A)  Employees
B)  Competitors
C)  Risks
D)  Threats

Question 18

What does Administrative Law deal with?

Accepted Answer

A)  Regulatory standards that regulate performance and conduct
B)  Regulatory term limits
C)  Regulatory Computer Standards
D)  All of the above

Question 19

What addresses the issues involved with identify theft and credit card fraud?

Accepted Answer

A)  The Computer Fraud and Abuse Act
B)  Basel II
C)  Payment Card Industry Data Security Standard (PCI DSS) 
D)  Federal Privacy Act of 1974

Question 20

Jessica committed a crime a few months ago. She isn't as worried as others may be because she believes she is the first to ever commit this particular crime, but she is wrong and there has been precedent set. What type of law did Jessica break?

Accepted Answer

A)  Tort Law
B)  Common Law
C)  Civil Law
D)  Criminal Law

Exam 6: Management