Question 1

Which of the following functions needed to implement the information security program identifies the sources of risk and may offer advice on controls that can reduce the risk?

Accepted Answer

A)  Risk management 
B)  Legal assessment 
C)  Incident response 
D)  Risk assessment

Question 2

Which of the following methods of training results in the lowest cost for the organization?

Accepted Answer

A)  Distance learning/Web seminars 
B)  Formal class 
C)  One-on-one training 
D)  Self-study (noncomputerized)

Question 3

In general,security programs are overstaffed for the tasks that they have been assigned.

Accepted Answer

A) True 
 B)False

Question 4

Security spending per user and per machine ____ as organizations grow,leaving most handcuffed when it comes to implementing effective security procedures.

Accepted Answer

A)  declines algebraically 
B)  increases logarithmically 
C)  declines exponentially 
D)  increases arithmetically

Question 5

Which of the following is an advantage of the one-on-one method of training?

Accepted Answer

A)  Trainees can learn from each other 
B)  Very cost-effective 
C)  Personal 
D)  Maximizes use of company resources

Question 6

Very large organizations spend an average of ____ of the IT budget on security.

Accepted Answer

A)  5% 
B)  6% 
C)  7% 
D)  11%

Question 7

Which of the following is the first step in the process of implementing training?

Accepted Answer

A)  Identify training staff 
B)  Identify target audiences 
C)  Identify program scope, goals, and objectives 
D)  Motivate management and employees

Question 8

List the steps of the seven-step methodology for implementing training.

Accepted Answer

The answer of List the steps of the seven-step methodology...

Question 9

____ are accountable for the day-to-day operation of the information security program.

Accepted Answer

A)  Security administrators 
B)  Security managers 
C)  Security technicians 
D)  Security analysts

Question 10

The term information security program describes the structure and organization of the effort to contain the risks to the information assets of an organization._________________________

Accepted Answer

A) True 
 B)False

Question 11

The planning function needed to implement the information security program often takes a project management approach to planning.

Accepted Answer

A) True 
 B)False

Question 12

The information security budgets of very large organizations grow faster than their IT budgets.

Accepted Answer

A) True 
 B)False

Question 13

A study of information security positions found that positions can be classified into one of three types: ____________________ are the real technical types,who create and install security solutions.

Accepted Answer

The answer of A study of information security positions found...

Question 14

Large organizations tend to spend ____ on security as smaller organizations.

Accepted Answer

A)  substantially less 
B)  twice as much 
C)  substantially more 
D)  about the same

Question 15

Which of the following would be responsible for configuring firewalls and IDSs,implementing security software,and diagnosing and troubleshooting problems?

Accepted Answer

A)  A security technician 
B)  A security analyst 
C)  A security consultant 
D)  The security manager

Question 16

When it comes to the personnel budget,in general,security programs are ____________________ for the tasks they have been assigned.

Accepted Answer

The answer of When it comes to the personnel budget,in...

Question 17

Which of the following is an advantage of the formal class method of training?

Accepted Answer

A)  Personal 
B)  Self-paced, can go as fast or as slow as the trainee needs 
C)  Can be scheduled to fit the needs of the trainee 
D)  Interaction with trainer is possible

Question 18

Training is most effective when it is designed for a specific category of users.

Accepted Answer

A) True 
 B)False

Question 19

An advantage of ____ training is that it can be live,or can be archived and viewed at the trainee's convenience.

Accepted Answer

A)  one-on-one 
B)  distance learning/Web seminars 
C)  formal class 
D)  user support group

Question 20

Effective training and awareness programs make employees accountable for their actions.

Accepted Answer

A) True 
 B)False

Exam 5: Developing the Security Program

Which of the following functions needed to implement the information security program identifies the sources of risk and may offer advice on controls that can reduce the risk?

Which of the following methods of training results in the lowest cost for the organization?

In general,security programs are overstaffed for the tasks that they have been assigned.

Security spending per user and per machine ____ as organizations grow,leaving most handcuffed when it comes to implementing effective security procedures.

Which of the following is an advantage of the one-on-one method of training?

Very large organizations spend an average of ____ of the IT budget on security.

Which of the following is the first step in the process of implementing training?

List the steps of the seven-step methodology for implementing training.

____ are accountable for the day-to-day operation of the information security program.

The term information security program describes the structure and organization of the effort to contain the risks to the information assets of an organization._________________________

The planning function needed to implement the information security program often takes a project management approach to planning.

The information security budgets of very large organizations grow faster than their IT budgets.

A study of information security positions found that positions can be classified into one of three types: ____________________ are the real technical types,who create and install security solutions.

Large organizations tend to spend ____ on security as smaller organizations.

Which of the following would be responsible for configuring firewalls and IDSs,implementing security software,and diagnosing and troubleshooting problems?

When it comes to the personnel budget,in general,security programs are ____________________ for the tasks they have been assigned.

Which of the following is an advantage of the formal class method of training?

Training is most effective when it is designed for a specific category of users.

An advantage of ____ training is that it can be live,or can be archived and viewed at the trainee's convenience.

Effective training and awareness programs make employees accountable for their actions.