Question 1

Which of the following best describes ROI?

Accepted Answer

A)  the chance that a threat will result in lost money 
B)  how long before an investment will pay for itself 
C)  the cost of mitigating a threat 
D)  the benefits of setting security priorities

Question 2

The __________________ phase of the system development life cycle can lead you to the needs assessment phase where the cycle begins again.

Accepted Answer

The answer of The __________________ phase of the system development...

Question 3

Which of the following is NOT among the six factors needed to create a risk analysis?

Accepted Answer

A)  threats 
B)  consequences 
C)  personnel profiles 
D)  probabilities

Question 4

VPNs create a _____________ to transport information through public communications media.

Accepted Answer

The answer of VPNs create a _____________ to transport information...

Question 5

Which of the following is a network's ability to detect attacks when they occur and to evaluate the extent of damage and compromise?

Accepted Answer

A)  resistance 
B)  recovery 
C)  recognition 
D)  reliability

Question 6

MATCHING
-network protocols that encapsulate (wrap)one protocol or session inside another

Accepted Answer

A) extranet 
B) network assets 
C) privileged access policy 
D) risk management 
E) role-based authentication
F)search warrant
G)subpoena
H)tunneling protocols
I)two-factor authentication
J)vulnerabilities

Question 7

MATCHING
-routers,cables,bastion hosts,servers,and firewall components that enable employees to communicate with one another

Accepted Answer

A) extranet 
B) network assets 
C) privileged access policy 
D) risk management 
E) role-based authentication
F)search warrant
G)subpoena
H)tunneling protocols
I)two-factor authentication
J)vulnerabilities

Question 8

Which is best defined as the ability of a system to continue operations despite a failure?

Accepted Answer

A)  fault tolerance 
B)  survivability analysis 
C)  reliability audit 
D)  adaptation and evolution

Question 9

MATCHING
-a legal document issued by a court that allows authorities to search a particular place for specific evidence

Accepted Answer

A) extranet 
B) network assets 
C) privileged access policy 
D) risk management 
E) role-based authentication
F)search warrant
G)subpoena
H)tunneling protocols
I)two-factor authentication
J)vulnerabilities

Question 10

Once written,a security policy should not be altered so that you can maintain consistency.

Accepted Answer

A) True 
 B)False

Question 11

By providing _________________ through backup systems,you ensure information remains accessible if primary systems go offline.

Accepted Answer

The answer of By providing _________________ through backup systems,you ensure...

Question 12

What is considered the first step in formulating a security policy?

Accepted Answer

A)  risk analysis 
B)  elimination of threats 
C)  risk reduction 
D)  system monitoring

Question 13

Which of the following shows how devices are connected and includes an IP allocation register?

Accepted Answer

A)  hardware inventory 
B)  topology map 
C)  asset table 
D)  security policy

Question 14

The people that manage security for the organization should not be same people that conduct risk analysis.

Accepted Answer

A) True 
 B)False

Question 15

Which of the following is NOT a step in threat and risk assessment?

Accepted Answer

A)  Asset definition 
B)  Recommendation 
C)  Resolution 
D)  Threat assessment

Question 16

What are three areas in which the use of encryption should be considered to maintain confidentiality?

Accepted Answer

The answer of What are three areas in which the...

Question 17

The portion of a security policy that describes who responds when there has been a security breach is called the ______________ response section.

Accepted Answer

The answer of The portion of a security policy that...

Question 18

What is a server security policy? List at least three areas the policy should address.

Accepted Answer

The answer of What is a server security policy? List...

Question 19

Search warrants and subpoenas were developed in response to the _____________ Amendment which protects U.S.residents against illegal search and seizure.

Accepted Answer

The answer of Search warrants and subpoenas were developed in...

Question 20

Which of the following is NOT a phase in the system development life cycle?

Accepted Answer

A)  needs assessment 
B)  security audit 
C)  system implementation 
D)  performance monitoring

Exam 13: Security Policy Design and Implementation

Which of the following best describes ROI?

The __________________ phase of the system development life cycle can lead you to the needs assessment phase where the cycle begins again.

Which of the following is NOT among the six factors needed to create a risk analysis?

VPNs create a _____________ to transport information through public communications media.

Which of the following is a network's ability to detect attacks when they occur and to evaluate the extent of damage and compromise?

MATCHING -network protocols that encapsulate (wrap) one protocol or session inside another

MATCHING -routers,cables,bastion hosts,servers,and firewall components that enable employees to communicate with one another

Which is best defined as the ability of a system to continue operations despite a failure?

MATCHING -a legal document issued by a court that allows authorities to search a particular place for specific evidence

Once written,a security policy should not be altered so that you can maintain consistency.

By providing _________________ through backup systems,you ensure information remains accessible if primary systems go offline.

What is considered the first step in formulating a security policy?

Which of the following shows how devices are connected and includes an IP allocation register?

The people that manage security for the organization should not be same people that conduct risk analysis.

Which of the following is NOT a step in threat and risk assessment?

What are three areas in which the use of encryption should be considered to maintain confidentiality?

The portion of a security policy that describes who responds when there has been a security breach is called the ______________ response section.

What is a server security policy? List at least three areas the policy should address.

Search warrants and subpoenas were developed in response to the _____________ Amendment which protects U.S.residents against illegal search and seizure.

Which of the following is NOT a phase in the system development life cycle?