Question 1

Which phase in obtaining a U.S. government security clearance includes a comprehensive background check?

Accepted Answer

A)  Application phase 
B)  Adjudication phase 
C)  Investigative phase 
D)  Granting (or denial) of clearance at a specific level 
A)  Application phase 
B)  Adjudication phase 
C)  Investigative phase 
D)  Granting (or denial) of clearance at a specific level C

Question 2

Which of the following statements about security awareness is not true?

Accepted Answer

A)  The purpose of security awareness is to focus attention on security. 
B)  Awareness is training. 
C)  Security awareness programs are designed to remind users of appropriate behaviors. 
D)  A poster reminding users not to write their password down is an example of an awareness program. 
A)  The purpose of security awareness is to focus attention on security. 
B)  Awareness is training. 
C)  Security awareness programs are designed to remind users of appropriate behaviors. 
D)  A poster reminding users not to write their password down is an example of an awareness program. B

Question 3

Which of the following is part of the user provisioning phase of the employee life cycle?

Accepted Answer

A)  The employee is added to the organization's payroll. 
B)  The employee is provided with a username or smart card. 
C)  A background check is conducted for the employee. 
D)  The employee expectations of privacy are determined. 
A)  The employee is added to the organization's payroll. 
B)  The employee is provided with a username or smart card. 
C)  A background check is conducted for the employee. 
D)  The employee expectations of privacy are determined. B

Question 4

Which of the following specifies that schools must have written permission to release any information from a student's education record?

Accepted Answer

A)  FACTA 
B)  FCRA 
C)  FERPA 
D)  DPPA 
A)  FACTA 
B)  FCRA 
C)  FERPA 
D)  DPPA

Question 5

Which of the following best describes the purpose of security awareness?

Accepted Answer

A)  To teach skills that would allow a person to perform a certain function 
B)  To focus attention on security 
C)  To integrate all the security skills and competencies into a common body of knowledge 
D)  To involve management in the process 
A)  To teach skills that would allow a person to perform a certain function 
B)  To focus attention on security 
C)  To integrate all the security skills and competencies into a common body of knowledge 
D)  To involve management in the process

Question 6

Which of the following NIST publications is known as The NIST Handbook?

Accepted Answer

A)  SP 800-12 
B)  SP 800-16 
C)  SP 800-50 
D)  SP 800-100 
A)  SP 800-12 
B)  SP 800-16 
C)  SP 800-50 
D)  SP 800-100

Question 7

Which stage of the employee life cycle includes all the processes leading up to and including the hiring of a new employee?

Accepted Answer

A)  Onboarding 
B)  Career development 
C)  Recruitment 
D)  Orientation 
A)  Onboarding 
B)  Career development 
C)  Recruitment 
D)  Orientation

Question 8

During what stage of the employee life cycle are user accounts disabled?

Accepted Answer

A)  Career development 
B)  Termination 
C)  User provisioning 
D)  Onboarding 
A)  Career development 
B)  Termination 
C)  User provisioning 
D)  Onboarding

Question 9

An employee should learn about which of the following during orientation?

Accepted Answer

A)  The company 
B)  The job 
C)  Their co-workers 
D)  All of the above 
A)  The company 
B)  The job 
C)  Their co-workers 
D)  All of the above

Question 10

A confidentiality agreement for employees, contractors, and outsourcers is also known as which of the following?

Accepted Answer

A)  Non-disclosure agreement 
B)  Acceptable use agreement 
C)  Handling standards 
D)  Internet access security 
A)  Non-disclosure agreement 
B)  Acceptable use agreement 
C)  Handling standards 
D)  Internet access security

Question 11

SETA is short for which of the following?

Accepted Answer

A)  Security Education, Training, and Awareness 
B)  Social Education, Training, and Application 
C)  Security Education, Training, and Application 
D)  Social Education, Training, and Awareness 
A)  Security Education, Training, and Awareness 
B)  Social Education, Training, and Application 
C)  Security Education, Training, and Application 
D)  Social Education, Training, and Awareness

Question 12

Which stage of the employee life cycle includes the process for transitioning employees out of an organization?

Accepted Answer

A)  Termination 
B)  Off-boarding 
C)  User provisioning 
D)  Onboarding 
A)  Termination 
B)  Off-boarding 
C)  User provisioning 
D)  Onboarding

Question 13

Which type of employee background check includes verification of all relevant licenses, certifications, or credentials?

Accepted Answer

A)  Educational 
B)  License/certification 
C)  Employment 
D)  Criminal history 
A)  Educational 
B)  License/certification 
C)  Employment 
D)  Criminal history

Question 14

Why shouldn't information about specific systems be included in a job description?

Accepted Answer

A)  To make sure candidates know all systems 
B)  To protect against social engineering and other attacks 
C)  To get as many candidates as possible 
D)  To get more knowledgeable candidates 
A)  To make sure candidates know all systems 
B)  To protect against social engineering and other attacks 
C)  To get as many candidates as possible 
D)  To get more knowledgeable candidates

Question 15

Which component of an acceptable use agreement defines (and includes examples of) the classification schema adopted by the organization?

Accepted Answer

A)  Introduction 
B)  Data classifications 
C)  Applicable policy statements 
D)  Handling standards 
A)  Introduction 
B)  Data classifications 
C)  Applicable policy statements 
D)  Handling standards

Question 16

Which of the following best describes the purpose of security training?

Accepted Answer

A)  To teach skills that would allow a person to perform a certain function 
B)  To focus attention on security 
C)  To integrate all the security skills and competencies into a common body of knowledge 
D)  To involve management in the process 
A)  To teach skills that would allow a person to perform a certain function 
B)  To focus attention on security 
C)  To integrate all the security skills and competencies into a common body of knowledge 
D)  To involve management in the process

Question 17

Which of the following steps of the employee life cycle is considered the most dangerous?

Accepted Answer

A)  Termination 
B)  Onboarding 
C)  Recruitment 
D)  User provisioning 
A)  Termination 
B)  Onboarding 
C)  Recruitment 
D)  User provisioning

Question 18

In which stage of the employee life cycle does the employee settle into the job, integrate with the corporate culture, and establish his or her role within the organization?

Accepted Answer

A)  Onboarding 
B)  Career development 
C)  User provisioning 
D)  Orientation 
A)  Onboarding 
B)  Career development 
C)  User provisioning 
D)  Orientation

Question 19

Which of the following sections of the Acceptable Use Agreement dictates how information must be stored, transmitted, and communicated?

Accepted Answer

A)  Introduction 
B)  Data classification 
C)  Applicable policy statements 
D)  Handling standards 
A)  Introduction 
B)  Data classification 
C)  Applicable policy statements 
D)  Handling standards

Question 20

During what step of the employee life cycle are employees added to the organization's benefit system?

Accepted Answer

A)  Recruitment 
B)  Onboarding 
C)  User provisioning 
D)  Orientation 
A)  Recruitment 
B)  Onboarding 
C)  User provisioning 
D)  Orientation

Which phase in obtaining a U.S. government security clearance includes a comprehensive background check?

Which of the following statements about security awareness is not true?

Which of the following is part of the user provisioning phase of the employee life cycle?

Which of the following specifies that schools must have written permission to release any information from a student's education record?

Which of the following best describes the purpose of security awareness?

Which of the following NIST publications is known as The NIST Handbook?

Which stage of the employee life cycle includes all the processes leading up to and including the hiring of a new employee?

During what stage of the employee life cycle are user accounts disabled?

An employee should learn about which of the following during orientation?

A confidentiality agreement for employees, contractors, and outsourcers is also known as which of the following?

SETA is short for which of the following?

Which stage of the employee life cycle includes the process for transitioning employees out of an organization?

Which type of employee background check includes verification of all relevant licenses, certifications, or credentials?

Why shouldn't information about specific systems be included in a job description?

Which component of an acceptable use agreement defines (and includes examples of) the classification schema adopted by the organization?

Which of the following best describes the purpose of security training?

Which of the following steps of the employee life cycle is considered the most dangerous?

In which stage of the employee life cycle does the employee settle into the job, integrate with the corporate culture, and establish his or her role within the organization?

Which of the following sections of the Acceptable Use Agreement dictates how information must be stored, transmitted, and communicated?

During what step of the employee life cycle are employees added to the organization's benefit system?

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters

Exam 6: Human Resources Security

Which phase in obtaining a U.S. government security clearance includes a comprehensive background check?

Which of the following statements about security awareness is not true?

Which of the following is part of the user provisioning phase of the employee life cycle?

Which of the following specifies that schools must have written permission to release any information from a student's education record?

Which of the following best describes the purpose of security awareness?

Which of the following NIST publications is known as The NIST Handbook?

Which stage of the employee life cycle includes all the processes leading up to and including the hiring of a new employee?

During what stage of the employee life cycle are user accounts disabled?

An employee should learn about which of the following during orientation?

A confidentiality agreement for employees, contractors, and outsourcers is also known as which of the following?

SETA is short for which of the following?

Which stage of the employee life cycle includes the process for transitioning employees out of an organization?

Which type of employee background check includes verification of all relevant licenses, certifications, or credentials?

Why shouldn't information about specific systems be included in a job description?

Which component of an acceptable use agreement defines (and includes examples of) the classification schema adopted by the organization?

Which of the following best describes the purpose of security training?

Which of the following steps of the employee life cycle is considered the most dangerous?

In which stage of the employee life cycle does the employee settle into the job, integrate with the corporate culture, and establish his or her role within the organization?

Which of the following sections of the Acceptable Use Agreement dictates how information must be stored, transmitted, and communicated?

During what step of the employee life cycle are employees added to the organization's benefit system?

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters