Exam 12: Managing Systems Support and Security

George's firm contracts to provide risk management services for a wide range of smaller companies that cannot provide the service for themselves. One of George's responsibilities at the end of each month is to review the threats encountered by the companies and put them into the appropriate categories. -Another of George's clients has software that is outdated and has become increasingly vulnerable to attack. How does George categorize this threat?

Matching ​Identify the letters of the choices that best match the phrases or definitions. -A risk control strategy that shifts risks to another asset or party

In IT security terms, a _____ is the impact of an attack multiplied by the likelihood of a vulnerability being exploited.

_____ protects information from unauthorized disclosure and safeguards privacy.​

List at least eight different tasks a service desk staff member might have to perform during a typical day.

Using a release methodology reduces the documentation burden.

Matching ​Identify the letters of the choices that best match the phrases or definitions. -Uses analytical techniques to identify potential quality and performance improvements in an information system

When network traffic is encrypted, it is invisible and its content and purpose are masked.

The _____ is the configuration of a system documented at the beginning of the project and consists of all necessary system requirements and design constraints.​

_____ include changing programs, procedures, or documentation to ensure correct system performance; adapting the system to changing requirements; and making the system operate more efficiently.​

Bandwidth requirements are expressed in bytes per minute.

A(n) _____ is a centralized resource staffed by IT professionals who provide users with the support they need to do their jobs.​

_____ is the process of tracking system releases.​

Both adaptive and perfective maintenance activities decrease in a dynamic business environment.

The _____ documents a system at the end of the design phase, identifies any changes since the beginning of the project, and includes testing and verification of all system requirements and features.​

The hardening process that makes a system more secure is fully automatic.

George's firm contracts to provide risk management services for a wide range of smaller companies that cannot provide the service for themselves. One of George's responsibilities at the end of each month is to review the threats encountered by the companies and put them into the appropriate categories. -One of his firm's clients details an incident in which a hacker - a former employee - thieved trade secrets from the client and threatened to release them to the competition if he was not paid. In which of the following categories should George place this incident?​

In a typical system, the initial version of the system is 1.0, and the release that includes the first set of maintenance changes is version _____.​

A _____ is an internal or external entity that could endanger an asset.

Matching ​Identify the letters of the choices that best match the phrases or definitions. -Protects the system and keeps it safe, free from danger, and reliable