Question 1

____ assigns a risk rating or score to each information asset.While this number does not mean anything in absolute terms,it is useful in gauging the relative risk to each vulnerable information asset and facilitates the development of comparative ratings later in the risk control process.

Accepted Answer

A) BC 
B) Risk assessment 
C) DR 
D) Avoidance

Question 2

Once intellectual property (IP)has been defined and properly identified,breaches in the controls that have been placed around the IP constitute a threat to the security of this information.

Accepted Answer

A) True 
 B)False

Question 3

What is the difference between a disaster recovery plan and a business continuity plan?

Accepted Answer

The answer of What is the difference between a disaster...

Question 4

Information has the characteristic of ____________________ when disclosure or exposure to unauthorized individuals or systems is prevented.

Accepted Answer

The answer of Information has the characteristic of ____________________ when...

Question 5

A ____ attack seeks to deny legitimate users access to services by either tying up a server's available resources or causing it to shut down.

Accepted Answer

A) Trojan horse 
B) DoS 
C) social engineering 
D) spyware

Question 6

Match each statement with an item below.
-Something that looks like a desirable program or tool,but that is in fact a malicious entity.

Accepted Answer

A) Threat agent 
B) Intellectual property 
C) Hacker 
D) Computer viruses 
E) Trojan
F)Risk management
G)Likelihood
H)Residual risk
I)Standards

Question 7

Match each statement with an item below.
-Includes trade secrets,copyrights,trademarks,and patents.

Accepted Answer

A) Threat agent 
B) Intellectual property 
C) Hacker 
D) Computer viruses 
E) Trojan
F)Risk management
G)Likelihood
H)Residual risk
I)Standards

Question 8

A(n)____ is any clearly identified attack on the organization's information assets that would threaten the assets' confidentiality,integrity,or availability.

Accepted Answer

A) threat 
B) Trojan horse 
C) worm 
D) incident

Question 9

Match each statement with an item below.
-A person who uses and creates computer software to gain access to information illegally.

Accepted Answer

A) Threat agent 
B) Intellectual property 
C) Hacker 
D) Computer viruses 
E) Trojan
F)Risk management
G)Likelihood
H)Residual risk
I)Standards

Question 10

Once the project team for information security development creates a ranked vulnerability worksheet,the team must choose one of four basic strategies to control each of the risks that result from these vulnerabilities.List the four strategies.

Accepted Answer

The answer of Once the project team for information security...

Question 11

IRP focuses more on preparations completed before and actions taken after the incident,whereas DRP focuses on intelligence gathering,information analysis,coordinated decision making,and urgent,concrete actions.

Accepted Answer

A) True 
 B)False

Question 12

____ hack systems to conduct terrorist activities through network or Internet pathways.

Accepted Answer

A) Cyberterrorists 
B) Script kiddies 
C) Programmers 
D) Social engineers

Question 13

____ is the control approach that attempts to reduce the impact caused by the exploitation of vulnerability through planning and preparation.

Accepted Answer

A) Avoidance 
B) Transference 
C) Acceptance 
D) Mitigation

Question 14

A(n)____ is an investigation and assessment of the impact that various attacks can have on the organization.

Accepted Answer

A) BIA 
B) intellectual property 
C) incident 
D) threat

Question 15

Match each statement with an item below.
-Segments of code that perform malicious actions.

Accepted Answer

A) Threat agent 
B) Intellectual property 
C) Hacker 
D) Computer viruses 
E) Trojan
F)Risk management
G)Likelihood
H)Residual risk
I)Standards

Question 16

____________________ is the process of applying controls to reduce the risks to an organization's data and information systems.

Accepted Answer

The answer of ____________________ is the process of applying controls...

Question 17

What are some of the key elements that a security policy should have in order to remain viable?

Accepted Answer

The answer of What are some of the key elements...

Question 18

____ is the control approach that attempts to shift the risk to other assets,other processes,or other organizations.

Accepted Answer

A) Transference 
B) Mitigation 
C) Acceptance 
D) Avoidance

Question 19

____ is the risk control strategy that attempts to prevent the exploitation of the vulnerability.

Accepted Answer

A) Acceptance 
B) Transference 
C) Avoidance 
D) Mitigation

Question 20

An information security policy provides rules for the protection of the information assets of the organization.

Accepted Answer

A) True 
 B)False

Exam 1: Contingency Planning Within Information Security

____ assigns a risk rating or score to each information asset.While this number does not mean anything in absolute terms,it is useful in gauging the relative risk to each vulnerable information asset and facilitates the development of comparative ratings later in the risk control process.

Once intellectual property (IP)has been defined and properly identified,breaches in the controls that have been placed around the IP constitute a threat to the security of this information.

What is the difference between a disaster recovery plan and a business continuity plan?

Information has the characteristic of ____________________ when disclosure or exposure to unauthorized individuals or systems is prevented.

A ____ attack seeks to deny legitimate users access to services by either tying up a server's available resources or causing it to shut down.

Match each statement with an item below. -Something that looks like a desirable program or tool,but that is in fact a malicious entity.

Match each statement with an item below. -Includes trade secrets,copyrights,trademarks,and patents.

A(n) ____ is any clearly identified attack on the organization's information assets that would threaten the assets' confidentiality,integrity,or availability.

Match each statement with an item below. -A person who uses and creates computer software to gain access to information illegally.

Once the project team for information security development creates a ranked vulnerability worksheet,the team must choose one of four basic strategies to control each of the risks that result from these vulnerabilities.List the four strategies.

IRP focuses more on preparations completed before and actions taken after the incident,whereas DRP focuses on intelligence gathering,information analysis,coordinated decision making,and urgent,concrete actions.

____ hack systems to conduct terrorist activities through network or Internet pathways.

____ is the control approach that attempts to reduce the impact caused by the exploitation of vulnerability through planning and preparation.

A(n) ____ is an investigation and assessment of the impact that various attacks can have on the organization.

Match each statement with an item below. -Segments of code that perform malicious actions.

____________________ is the process of applying controls to reduce the risks to an organization's data and information systems.

What are some of the key elements that a security policy should have in order to remain viable?

____ is the control approach that attempts to shift the risk to other assets,other processes,or other organizations.

____ is the risk control strategy that attempts to prevent the exploitation of the vulnerability.

An information security policy provides rules for the protection of the information assets of the organization.