Question 1

Matching
-​A network that does not have servers, so each device simultaneously functions as both a client and a server to all other devices connected to the network.

Accepted Answer

A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management

Question 2

What kind of policy outlines how organizations use personal information it collects?

Accepted Answer

A) VPN 
B) network 
C) encryption 
D) privacy

Question 3

What are values that are attributed to a system of beliefs that help the individual distinguish right from wrong called?

Accepted Answer

A) Morals 
B) Ethics 
C) Standards 
D) Morays

Question 4

The objective of incident management is to restore normal operations as quickly as possible with the least possible impact on either the business or the users.

Accepted Answer

A) True 
 B)False

Question 5

List one reason why social networking sites are popular with attackers.

Accepted Answer

The answer of List one reason why social networking sites...

Question 6

List two characteristics of a policy.

Accepted Answer

The answer of List two characteristics of a policy....

Question 7

A person's fundamental beliefs and principals, which are used to define what is good, and how to distinguish right from wrong, are collectively called a person's:

Accepted Answer

A) Morals 
B) Values 
C) Ethics 
D) Standards

Question 8

A(n) ____________________ is a methodical examination and review that produces a detailed report of its findings.

Accepted Answer

The answer of A(n) ____________________ is a methodical examination and...

Question 9

When designing a security policy, many organizations follow a standard set of ____________________.

Accepted Answer

The answer of When designing a security policy, many organizations...

Question 10

Matching
-A security policy that outlines how the organization uses personal information it collects.​

Accepted Answer

A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management

Question 11

Most people are taught using a(n) ____________________ approach.
​Matching

Accepted Answer

The answer of Most people are taught using a(n) ____________________...

Question 12

What can be defined as the study of what a group of people understand to be good and right behavior and how people make those judgments?

Accepted Answer

A) Values 
B) Morals 
C) Ethics 
D) Standards

Question 13

A(n) ____________________ is a collection of requirements specific to the system or procedure that must be met by everyone.

Accepted Answer

The answer of A(n) ____________________ is a collection of requirements...

Question 14

Matching
-​An event that does not appear to be a risk but actually turns out to be one.

Accepted Answer

A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management

Question 15

What are the duties of the CMT?

Accepted Answer

The answer of What are the duties of the CMT?...

Question 16

A due process policy is a policy that defines the actions users may perform while accessing systems and networking equipment.

Accepted Answer

A) True 
 B)False

Question 17

List and describe two of the seven risk categories.

Accepted Answer

The answer of List and describe two of the seven...

Question 18

Matching
-​The expected monetary loss every time a risk occurs.

Accepted Answer

A) Acceptable use policy (AUP) 
B) Change management 
C) False negative 
D) False positive 
E) Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SL
E) 
J)Incident management

Question 19

The first phase of the security policy cycle involves a vulnerability assessment.

Accepted Answer

A) True 
 B)False

Question 20

Websites that group individuals and organizations into clusters or groups based on some sort of affiliation are considered to be what type of websites?

Accepted Answer

A) social networking 
B) social engineering 
C) social management 
D) social control

Exam 14: Risk Mitigation

Matching -A network that does not have servers, so each device simultaneously functions as both a client and a server to all other devices connected to the network.

What kind of policy outlines how organizations use personal information it collects?

What are values that are attributed to a system of beliefs that help the individual distinguish right from wrong called?

The objective of incident management is to restore normal operations as quickly as possible with the least possible impact on either the business or the users.

List one reason why social networking sites are popular with attackers.

List two characteristics of a policy.

A person's fundamental beliefs and principals, which are used to define what is good, and how to distinguish right from wrong, are collectively called a person's:

A(n) ____________________ is a methodical examination and review that produces a detailed report of its findings.

When designing a security policy, many organizations follow a standard set of ____________________.

Matching -A security policy that outlines how the organization uses personal information it collects.

Most people are taught using a(n) ____________________ approach. Matching

What can be defined as the study of what a group of people understand to be good and right behavior and how people make those judgments?

A(n) ____________________ is a collection of requirements specific to the system or procedure that must be met by everyone.

Matching -An event that does not appear to be a risk but actually turns out to be one.

What are the duties of the CMT?

A due process policy is a policy that defines the actions users may perform while accessing systems and networking equipment.

List and describe two of the seven risk categories.

Matching -The expected monetary loss every time a risk occurs.

The first phase of the security policy cycle involves a vulnerability assessment.

Websites that group individuals and organizations into clusters or groups based on some sort of affiliation are considered to be what type of websites?

Exam 14: Risk Mitigation

Matching -​A network that does not have servers, so each device simultaneously functions as both a client and a server to all other devices connected to the network.

What kind of policy outlines how organizations use personal information it collects?

What are values that are attributed to a system of beliefs that help the individual distinguish right from wrong called?

The objective of incident management is to restore normal operations as quickly as possible with the least possible impact on either the business or the users.

List one reason why social networking sites are popular with attackers.

List two characteristics of a policy.

A person's fundamental beliefs and principals, which are used to define what is good, and how to distinguish right from wrong, are collectively called a person's:

A(n) ____________________ is a methodical examination and review that produces a detailed report of its findings.

When designing a security policy, many organizations follow a standard set of ____________________.

Matching -A security policy that outlines how the organization uses personal information it collects.​

Most people are taught using a(n) ____________________ approach. ​Matching

What can be defined as the study of what a group of people understand to be good and right behavior and how people make those judgments?

A(n) ____________________ is a collection of requirements specific to the system or procedure that must be met by everyone.

Matching -​An event that does not appear to be a risk but actually turns out to be one.

What are the duties of the CMT?

A due process policy is a policy that defines the actions users may perform while accessing systems and networking equipment.

List and describe two of the seven risk categories.

Matching -​The expected monetary loss every time a risk occurs.

The first phase of the security policy cycle involves a vulnerability assessment.

Websites that group individuals and organizations into clusters or groups based on some sort of affiliation are considered to be what type of websites?

Matching -A network that does not have servers, so each device simultaneously functions as both a client and a server to all other devices connected to the network.

Matching -A security policy that outlines how the organization uses personal information it collects.

Most people are taught using a(n) ____________________ approach. Matching

Matching -An event that does not appear to be a risk but actually turns out to be one.

Matching -The expected monetary loss every time a risk occurs.