Question 1

____________________ is a phenomenon in which the project manager spends more time documenting project tasks,collecting performance measurements,recording project task information,and updating project completion forecasts than in accomplishing meaningful project work.

Accepted Answer

The answer of ____________________ is a phenomenon in which the...

Question 2

The information security ____________________ is usually brought in when the organization makes the decision to outsource one or more aspects of its security program.

Accepted Answer

The answer of The information security ____________________ is usually brought...

Question 3

What is the security education,training,and awareness program? Describe how the program aims to enhance security.

Accepted Answer

The answer of What is the security education,training,and awareness program?...

Question 4

What is the Chief Information Security Office primarily responsible for?

Accepted Answer

The answer of What is the Chief Information Security Office...

Question 5

An organization's information security program refers to the entire set of activities,resources,personnel,and technologies used by an organization to manage the risks to the information  _______ of the organization.

Accepted Answer

The answer of An organization's information security program refers to...

Question 6

What is the purpose of a security awareness program?  What advantage does an awareness program have for the InfoSec program?

Accepted Answer

The answer of What is the purpose of a security...

Question 7

A SETA program consists of three elements: security education,security training,and which of the following?.

Accepted Answer

A)  security accountability 
B)  security authentication 
C)  security awareness 
D)  security authorization

Question 8

The work breakdown structure (WBS)can only be prepared with a complex specialized desktop PC application.

Accepted Answer

A) True 
 B)False

Question 9

The purpose of SETA is to enhance security in all but which of the following ways?

Accepted Answer

A)  by building in-depth knowledge 
B)  by adding barriers 
C)  by developing skills 
D)  by improving awareness

Question 10

What minimum attributes for project tasks does the WBS document?

Accepted Answer

The answer of What minimum attributes for project tasks does...

Question 11

Which of the following variables is the most influential in determining how to structure an information security program?

Accepted Answer

A)  Security capital budget 
B)  Organizational size 
C)  Security personnel budget 
D)  Organizational culture

Question 12

Advanced technical training can be selected or developed based on which of the following?

Accepted Answer

A)  level of previous education 
B)  level of previous training 
C)  technology product 
D)  number of employees

Question 13

What is the role of help desk personnel in the InfoSec team?

Accepted Answer

The answer of What is the role of help desk...

Question 14

Which security functions are normally performed by IT groups outside the InfoSec area of management control?

Accepted Answer

The answer of Which security functions are normally performed by...

Question 15

Explain the conflict between the goals and objectives of the CIO and the CISO.

Accepted Answer

The answer of Explain the conflict between the goals and...

Question 16

__________ is a simple project management planning tool.

Accepted Answer

A)  RFP 
B)  WBS 
C)  ISO 17799 
D)  SDLC

Question 17

Which of the following is the most cost-effective method for disseminating security information and news to employees?

Accepted Answer

A)  distance learning seminars 
B)  security-themed Web site 
C)  conference calls 
D)  security newsletter

Question 18

In larger organizations,responsible for some aspect of information security; in smaller organizations,this title may be assigned to the only or senior security administrator.

Accepted Answer

A)  InfoSec program 
B)  SETA 
C)  scope creep 
D)  security watchstander 
E)  security manager
F) CISO
G) projectitis
H) critical path method
I) security technicians
J) security awareness program

Question 19

Which of the following functions includes identifying the sources of risk and may include offering advice on controls that can reduce risk?

Accepted Answer

A)  Risk management 
B)  Risk assessment 
C)  Systems testing 
D)  Vulnerability assessment

Question 20

Which of the following would be responsible for configuring firewalls and IDPSs,implementing security software,and diagnosing and troubleshooting problems?

Accepted Answer

A)  A security technician 
B)  A security analyst 
C)  A security consultant 
D)  The security manager

Exam 5: Developing the Security Program