Question 1

Which of the following version numbers is an example of a major policy revision?

Accepted Answer

A)  3.5 
B)  4.0 
C)  4.1 
D)  5.1 
A)  3.5 
B)  4.0 
C)  4.1 
D)  5.1 B

Question 2

Which of the following identifies a policy by name and provides the reader with an overview of the policy topic or category?

Accepted Answer

A)  Policy heading 
B)  Policy goal 
C)  Policy objective 
D)  Policy statement 
A)  Policy heading 
B)  Policy goal 
C)  Policy objective 
D)  Policy statement A

Question 3

Which of the following is one of the ten plain language techniques for policy writing?

Accepted Answer

A)  Use passive voice. 
B)  Include redundant pairs or modifiers. 
C)  Use long sentences. 
D)  Limit a paragraph to one subject. 
A)  Use passive voice. 
B)  Include redundant pairs or modifiers. 
C)  Use long sentences. 
D)  Limit a paragraph to one subject. D

Question 4

Which of the following is not an example of a standard?

Accepted Answer

A)  Passwords must include at least one special character. 
B)  Passwords must not include repeating characters. 
C)  Pass phrases make good passwords. 
D)  Passwords must not include the user's name. 
A)  Passwords must include at least one special character. 
B)  Passwords must not include repeating characters. 
C)  Pass phrases make good passwords. 
D)  Passwords must not include the user's name.

Question 5

Which of the following is not one of the plain language techniques for policy writing?

Accepted Answer

A)  Use active voice. 
B)  Write short sentences. 
C)  Use "shall" instead of "must." 
D)  Avoid double negatives. 
A)  Use active voice. 
B)  Write short sentences. 
C)  Use "shall" instead of "must." 
D)  Avoid double negatives.

Question 6

Where is the policy introduction located in a consolidated policy document?

Accepted Answer

A)  In a separate document 
B)  Before the version control table 
C)  At the beginning of the document 
D)  After the version control table 
A)  In a separate document 
B)  Before the version control table 
C)  At the beginning of the document 
D)  After the version control table

Question 7

Which of the following refers to the relationship between a policy and its supporting documents?

Accepted Answer

A)  Policy format 
B)  Policy hierarchy 
C)  Policy audience 
D)  Policy objectives 
A)  Policy format 
B)  Policy hierarchy 
C)  Policy audience 
D)  Policy objectives

Question 8

Which of the following is best thought of as a high-level directive or strategic roadmap?

Accepted Answer

A)  Policy objective 
B)  Policy heading 
C)  Policy statement 
D)  Policy goal 
A)  Policy objective 
B)  Policy heading 
C)  Policy statement 
D)  Policy goal

Question 9

What is the purpose of the administrative notations section of a policy?

Accepted Answer

A)  To refer the reader to additional information 
B)  To explain terms, abbreviations, and acronyms used in the policy 
C)  To provide the policy version number 
D)  To provide information about policy exceptions 
A)  To refer the reader to additional information 
B)  To explain terms, abbreviations, and acronyms used in the policy 
C)  To provide the policy version number 
D)  To provide information about policy exceptions

Question 10

Which of the following statements about policies and standards is true?

Accepted Answer

A)  Policies are mandatory, whereas standards are not. 
B)  Standards are mandatory, whereas policies are not. 
C)  Both policies and standards are mandatory. 
D)  Neither policies nor standards are mandatory. 
A)  Policies are mandatory, whereas standards are not. 
B)  Standards are mandatory, whereas policies are not. 
C)  Both policies and standards are mandatory. 
D)  Neither policies nor standards are mandatory.

Question 11

Which of the following version numbers would indicate a minor revision?

Accepted Answer

A)  IV 
B)  2.0 
C)  2.1 
D)  3.0 
A)  IV 
B)  2.0 
C)  2.1 
D)  3.0

Question 12

Which of the following procedure formats is best suited when there is a decision-making process associated with a task?

Accepted Answer

A)  Simple Step 
B)  Flowchart 
C)  Hierarchical 
D)  Graphic 
A)  Simple Step 
B)  Flowchart 
C)  Hierarchical 
D)  Graphic

Question 13

A(n) __________ or waiver process is required for exceptions identified after a policy has been authorized.

Accepted Answer

A)  administrative notation 
B)  policy statement 
C)  policy definition 
D)  exemption 
A)  administrative notation 
B)  policy statement 
C)  policy definition 
D)  exemption

Question 14

Where are the policy definitions located in a consolidated policy document?

Accepted Answer

A)  At the beginning of the document 
B)  At the end of the document 
C)  Just after the policy heading 
D)  In a separate document 
A)  At the beginning of the document 
B)  At the end of the document 
C)  Just after the policy heading 
D)  In a separate document

Question 15

Which of the following best describes a procedure?

Accepted Answer

A)  Application of a standard to a specific category or grouping 
B)  Instructions on how a policy is carried out 
C)  Teaching tools that help people conform to a policy 
D)  Specifications for implementation of a policy 
A)  Application of a standard to a specific category or grouping 
B)  Instructions on how a policy is carried out 
C)  Teaching tools that help people conform to a policy 
D)  Specifications for implementation of a policy

Question 16

Which of the following is the topmost object in the policy hierarchy?

Accepted Answer

A)  Standards 
B)  Baselines 
C)  Procedures 
D)  Guiding Principles 
A)  Standards 
B)  Baselines 
C)  Procedures 
D)  Guiding Principles

Question 17

Which of the following statements about standards and guidelines is true?

Accepted Answer

A)  Standards are mandatory, whereas guidelines are not. 
B)  Guidelines are mandatory, whereas standards are not. 
C)  Both standards and guidelines are mandatory. 
D)  Neither standards nor guidelines are mandatory. 
A)  Standards are mandatory, whereas guidelines are not. 
B)  Guidelines are mandatory, whereas standards are not. 
C)  Both standards and guidelines are mandatory. 
D)  Neither standards nor guidelines are mandatory.

Question 18

What is the purpose of the policy exceptions section of a policy document?

Accepted Answer

A)  To acknowledge exclusions 
B)  To track changes 
C)  To convey intent 
D)  To identify the topic 
A)  To acknowledge exclusions 
B)  To track changes 
C)  To convey intent 
D)  To identify the topic

Question 19

Which of the following best describes a baseline?

Accepted Answer

A)  Specifications for implementation of a policy 
B)  Instructions on how a policy is carried out 
C)  Application of a standard to a specific category or grouping 
D)  Teaching tools that help people conform to a policy 
A)  Specifications for implementation of a policy 
B)  Instructions on how a policy is carried out 
C)  Application of a standard to a specific category or grouping 
D)  Teaching tools that help people conform to a policy

Question 20

What is the purpose of the policy definition section?

Accepted Answer

A)  To provide information about policy exceptions 
B)  To refer the reader to additional information 
C)  To explain terms, abbreviations, and acronyms used in the policy 
D)  To provide the policy version number 
A)  To provide information about policy exceptions 
B)  To refer the reader to additional information 
C)  To explain terms, abbreviations, and acronyms used in the policy 
D)  To provide the policy version number

Which of the following version numbers is an example of a major policy revision?

Which of the following identifies a policy by name and provides the reader with an overview of the policy topic or category?

Which of the following is one of the ten plain language techniques for policy writing?

Which of the following is not an example of a standard?

Which of the following is not one of the plain language techniques for policy writing?

Where is the policy introduction located in a consolidated policy document?

Which of the following refers to the relationship between a policy and its supporting documents?

Which of the following is best thought of as a high-level directive or strategic roadmap?

What is the purpose of the administrative notations section of a policy?

Which of the following statements about policies and standards is true?

Which of the following version numbers would indicate a minor revision?

Which of the following procedure formats is best suited when there is a decision-making process associated with a task?

A(n) __________ or waiver process is required for exceptions identified after a policy has been authorized.

Where are the policy definitions located in a consolidated policy document?

Which of the following best describes a procedure?

Which of the following is the topmost object in the policy hierarchy?

Which of the following statements about standards and guidelines is true?

What is the purpose of the policy exceptions section of a policy document?

Which of the following best describes a baseline?

What is the purpose of the policy definition section?

Understanding Cybersecurity Policy and Governance

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters

Exam 2: Cybersecurity Policy Organization, Format, and Styles

Which of the following version numbers is an example of a major policy revision?

Which of the following identifies a policy by name and provides the reader with an overview of the policy topic or category?

Which of the following is one of the ten plain language techniques for policy writing?

Which of the following is not an example of a standard?

Which of the following is not one of the plain language techniques for policy writing?

Where is the policy introduction located in a consolidated policy document?

Which of the following refers to the relationship between a policy and its supporting documents?

Which of the following is best thought of as a high-level directive or strategic roadmap?

What is the purpose of the administrative notations section of a policy?

Which of the following statements about policies and standards is true?

Which of the following version numbers would indicate a minor revision?

Which of the following procedure formats is best suited when there is a decision-making process associated with a task?

A(n) __________ or waiver process is required for exceptions identified after a policy has been authorized.

Where are the policy definitions located in a consolidated policy document?

Which of the following best describes a procedure?

Which of the following is the topmost object in the policy hierarchy?

Which of the following statements about standards and guidelines is true?

What is the purpose of the policy exceptions section of a policy document?

Which of the following best describes a baseline?

What is the purpose of the policy definition section?

Understanding Cybersecurity Policy and Governance

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters