30 Jan Raised-floor to real-ceiling

SEC440 Information Systems Security Planning and Audit

Week 4 Quiz

Question 1

(TCO 3) Which of the following provide a way and place to process, store, transmit, and communicate information?

Information systems

Information assets

Off-site storage solutions

Outsourced storage solutions

Question 2

(TCO 4) Which section of the ISO 17799 deals with personnel security?

3

4

5

6

Question 3

(TCO 5) In ISO 17799, an area where assets are protected from man-made and natural harm is known as

secure area.

mantrap.

company property.

security perimeter.

Question 4

(TCO 4) Which of the following is NOT a step used by hackers to infiltrate a network?

Footprinting

Data corruption

Scanning

Enumeration

Question 5

(TCO 4) A security clearance investigation does NOT involve research into a person’s

character.

reliability.

family connections.

trustworthiness.

Question 6

(TCO 5) The clear desk and clear screen policy is the way to avoid which of the following kinds of physical attacks?

Shoulder surfing

Reprinting the last document from the fax machine

Looking at papers on desks

All of the above

Question 7

(TCO 3) Information needs to be handled according to

its classification level.

the statement of authority.

the access controls set forth in the asset management policy.

the access controls set forth in the affirmation agreement.

Question 8

(TCO 4) Which of the following is a component of an affirmation agreement?

Statement of authority

Background check

Job description

Credit history

Question 9

(TCO 5) What is the purpose of a working in secure areas policy?

Protect information assets to prevent unauthorized access or damage to secure areas

Protect the organization’s assets from harm or unauthorized access by placing controls on the environment where the equipment is situated

Build a barrier to prevent unauthorized access, damage, or interference to the business facilities

Protect information assets to prevent unauthorized access or damage to secure offices, rooms and facilities

Question 10

(TCO 3) Who is directly responsible for using information assets in accordance with their classification levels?

The users

The ISO

The information owner

The information custodian

Question 11

(TCO 4) Match each of the following with its example.

Security education

Recertification training for the network administrator

Security training

A presentation on creating good passwords

Security awareness

Question 12

(TCO 5) How can management detect unauthorized removal of property?

Account for company assets at all times

Terminate employees for violations

Carry out periodic random spot checks

Maintain equipment logs

Question 13

(TCO 3) When calculating the value of an asset, which of the following is NOT a criterion?

Cost to acquire or develop asset

Cost to maintain and protect the asset

Cost to disclose the asset

Reputation

Question 14

(TCO 5) In order to provide environmental damage protection, how should all protection barriers extend?

Raised-floor to bottom of drop ceiling

Real-floor to real-ceiling

Real-floor to bottom of drop ceiling

Raised-floor to real-ceiling

Question 15

(TCO 3) Criticality ratings are used to

determine the importance of an information asset.

test the strength of the safeguard.

determine the replacement cost.

None of the above