Question 1

Security training provides detailed information and hands-on instruction to employees to prepare them to perform their duties securely.

Accepted Answer

A) True 
 B)False

Question 2

A(n) strategic ​information security policy is also known as a general security policy, and sets the strategic
direction, scope, and tone for all security efforts. _________________________

Accepted Answer

A) True 
 B)False

Question 3

_________ is the rapid determination of the scope of the breach in the confidentiality, integrity, and availability of information and information assets during or just following an incident.

Accepted Answer

A)  Damage assessment
B)  Containment development
C)  Incident response
D)  Disaster assessmentE) A) and B)
F) All of the above

Question 4

To remain viable, security policies must have a responsible manager, a schedule of reviews, a
method for making recommendations for reviews, and a policy issuance and revision date. _________________________

Accepted Answer

A) True 
 B)False

Question 5

Failure to develop an information security system based on the organization's mission, vision, and culture guarantees the failure of the information security program.

Accepted Answer

A) True 
 B)False

Question 6

The policy administrator is responsible for the creation, revision, distribution, and storage of the policy.

Accepted Answer

A) True 
 B)False

Question 7

​The goals of information security governance include all but which of the following?

Accepted Answer

A)  Regulatory compliance by using information security knowledge and infrastructure to support minimum standards of due care
B)  ​Strategic alignment of information security with business strategy to support organizational objectives
C)  ​Risk management by executing appropriate measures to manage and mitigate threats to information resources
D)  ​Performance measurement by measuring, monitoring, and reporting information security governance metrics to ensure that organizational objectives are achievedE) A) and D)
F) C) and D)

Question 8

Good security programs begin and end with policy.

Accepted Answer

A) True 
 B)False

Question 9

The SETA program is a control measure designed to reduce the instances of __________ security breaches by employees.

Accepted Answer

A)  intentional
B)  external
C)  accidental
D)  physicalE) B) and D)
F) A) and B)

Question 10

Within security perimeters the organization can establish security redundancies, each with differing levels of security, between which traffic must be screened. _________________________

Accepted Answer

A) True 
 B)False

Exam 4: Planning for Security

The policy administrator is responsible for the creation, revision, distribution, and storage of the policy.

Correct Answer
verified

A(n) strategic information security policy is also known as a general security policy, and sets the strategic direction, scope, and tone for all security efforts. _________________________

Correct Answer
verified

Within security perimeters the organization can establish security redundancies, each with differing levels of security, between which traffic must be screened. _________________________

Correct Answer
verified

Security training provides detailed information and hands-on instruction to employees to prepare them to perform their duties securely.

Correct Answer
verified

The goals of information security governance include all but which of the following?

Correct Answer
verified

Failure to develop an information security system based on the organization's mission, vision, and culture guarantees the failure of the information security program.

Correct Answer
verified

The SETA program is a control measure designed to reduce the instances of __________ security breaches by employees.

Correct Answer
verified

_________ is the rapid determination of the scope of the breach in the confidentiality, integrity, and availability of information and information assets during or just following an incident.

Correct Answer
verified

Good security programs begin and end with policy.

Correct Answer
verified

To remain viable, security policies must have a responsible manager, a schedule of reviews, a method for making recommendations for reviews, and a policy issuance and revision date. _________________________

Correct Answer
verified

Exam 4: Planning for Security

The policy administrator is responsible for the creation, revision, distribution, and storage of the policy.

Correct AnswerverifiedShow Answer

A(n) strategic ​information security policy is also known as a general security policy, and sets the strategic direction, scope, and tone for all security efforts. _________________________

Correct AnswerverifiedShow Answer

Within security perimeters the organization can establish security redundancies, each with differing levels of security, between which traffic must be screened. _________________________

Correct AnswerverifiedShow Answer

Security training provides detailed information and hands-on instruction to employees to prepare them to perform their duties securely.

Correct AnswerverifiedShow Answer

​The goals of information security governance include all but which of the following?

Correct AnswerverifiedShow Answer

Failure to develop an information security system based on the organization's mission, vision, and culture guarantees the failure of the information security program.

Correct AnswerverifiedShow Answer

The SETA program is a control measure designed to reduce the instances of __________ security breaches by employees.

Correct AnswerverifiedShow Answer

_________ is the rapid determination of the scope of the breach in the confidentiality, integrity, and availability of information and information assets during or just following an incident.

Correct AnswerverifiedShow Answer

Good security programs begin and end with policy.

Correct AnswerverifiedShow Answer

To remain viable, security policies must have a responsible manager, a schedule of reviews, a method for making recommendations for reviews, and a policy issuance and revision date. _________________________

Correct AnswerverifiedShow Answer

Correct Answer
verified

A(n) strategic information security policy is also known as a general security policy, and sets the strategic direction, scope, and tone for all security efforts. _________________________

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

The goals of information security governance include all but which of the following?

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified