Question 1

________ specifically addresses data protection requirements at financial institutions.

Accepted Answer

A)  GLBA 
B)  HIPAA 
C)  The Revised SEC Act 
D)  Sarbanes-Oxley 
A)  GLBA 
B)  HIPAA 
C)  The Revised SEC Act 
D)  Sarbanes-Oxley

Question 2

When risk analysis deals with costs and benefits that vary by year, the computations should use ________.

Accepted Answer

A)  NPV 
B)  IRR 
C)  Either A or B 
D)  Neither A nor B 
A)  NPV 
B)  IRR 
C)  Either A or B 
D)  Neither A nor B

Question 3

A technical security architecture includes ________.

Accepted Answer

A)  all of a firm's countermeasures 
B)  how countermeasures are organized 
C)  Both A and B 
D)  Neither A nor B 
A)  all of a firm's countermeasures 
B)  how countermeasures are organized 
C)  Both A and B 
D)  Neither A nor B

Question 4

________ examines financial processes for efficiency, effectiveness, and adequate controls.

Accepted Answer

A)  Internal auditing 
B)  Financial auditing 
C)  IT auditing 
D)  None of the above 
A)  Internal auditing 
B)  Financial auditing 
C)  IT auditing 
D)  None of the above

Question 5

Vulnerability testing typically is not outsourced.

Accepted Answer

A) True 
 B)False

Question 6

________ means implementing no countermeasures and absorbing any damages that occur.

Accepted Answer

A)  Risk reduction 
B)  Risk acceptance 
C)  Risk avoidance 
D)  None of the above 
A)  Risk reduction 
B)  Risk acceptance 
C)  Risk avoidance 
D)  None of the above

Question 7

Security tends to impede functionality.

Accepted Answer

A) True 
 B)False

Question 8

________ are descriptions of what the best firms in the industry are doing about security.

Accepted Answer

A)  Best practices 
B)  Recommended practices 
C)  Both A and B 
D)  Neither A nor B 
A)  Best practices 
B)  Recommended practices 
C)  Both A and B 
D)  Neither A nor B

Question 9

What type of organization is subject to FISMA?

Accepted Answer

A)  E-commerce firms 
B)  Medical firms 
C)  Government organizations 
D)  Companies that accept credit card payments 
A)  E-commerce firms 
B)  Medical firms 
C)  Government organizations 
D)  Companies that accept credit card payments

Question 10

________ are monetary gifts to induce an employee to favor a supplier or other party.

Accepted Answer

A)  Bribes 
B)  Kickbacks 
C)  Both A and B 
D)  Neither A nor B 
A)  Bribes 
B)  Kickbacks 
C)  Both A and B 
D)  Neither A nor B

Question 11

What security functions typically are outsourced?

Accepted Answer

A)  Intrusion detection 
B)  Vulnerability testing 
C)  Both A and B 
D)  Neither A nor B 
A)  Intrusion detection 
B)  Vulnerability testing 
C)  Both A and B 
D)  Neither A nor B

Question 12

Audits place special attention on ________.

Accepted Answer

A)  compliance avoidance 
B)  noncompliance 
C)  memo log files 
D)  absences from duty 
A)  compliance avoidance 
B)  noncompliance 
C)  memo log files 
D)  absences from duty

Question 13

Policies should specify implementation in detail.

Accepted Answer

A) True 
 B)False

Question 14

The key to security being an enabler is ________.

Accepted Answer

A)  getting it involved early within the project 
B)  having strong corporate policies 
C)  extensive training 
D)  adequate spending on security 
A)  getting it involved early within the project 
B)  having strong corporate policies 
C)  extensive training 
D)  adequate spending on security

Question 15

To outsource some security functions, a firm can use an MISP.

Accepted Answer

A) True 
 B)False

Question 16

________ requires multiple countermeasures to be defeated for an attack to succeed.

Accepted Answer

A)  Defense in depth 
B)  Weakest link analysis 
C)  Both A and B 
D)  Neither A nor B 
A)  Defense in depth 
B)  Weakest link analysis 
C)  Both A and B 
D)  Neither A nor B

Question 17

It is acceptable for an employee to reveal ________.

Accepted Answer

A)  confidential information 
B)  private information 
C)  trade secrets 
D)  None of the above 
A)  confidential information 
B)  private information 
C)  trade secrets 
D)  None of the above

Question 18

A benefit of using MSSPs is that they provide ________.

Accepted Answer

A)  cost savings 
B)  independence 
C)  Both A and B 
D)  Neither A nor B 
A)  cost savings 
B)  independence 
C)  Both A and B 
D)  Neither A nor B

Question 19

________ means responding to risk by taking out insurance.

Accepted Answer

A)  Risk reduction 
B)  Risk acceptance 
C)  Risk avoidance 
D)  Risk transference 
A)  Risk reduction 
B)  Risk acceptance 
C)  Risk avoidance 
D)  Risk transference

Question 20

________ examines organizational units for efficiency, effectiveness, and adequate controls.

Accepted Answer

A)  Internal auditing 
B)  Financial auditing 
C)  IT auditing 
D)  None of the above 
A)  Internal auditing 
B)  Financial auditing 
C)  IT auditing 
D)  None of the above

________ specifically addresses data protection requirements at financial institutions.

When risk analysis deals with costs and benefits that vary by year, the computations should use ________.

A technical security architecture includes ________.

________ examines financial processes for efficiency, effectiveness, and adequate controls.

Vulnerability testing typically is not outsourced.

________ means implementing no countermeasures and absorbing any damages that occur.

Security tends to impede functionality.

________ are descriptions of what the best firms in the industry are doing about security.

What type of organization is subject to FISMA?

________ are monetary gifts to induce an employee to favor a supplier or other party.

What security functions typically are outsourced?

Audits place special attention on ________.

Policies should specify implementation in detail.

The key to security being an enabler is ________.

To outsource some security functions, a firm can use an MISP.

________ requires multiple countermeasures to be defeated for an attack to succeed.

It is acceptable for an employee to reveal ________.

A benefit of using MSSPs is that they provide ________.

________ means responding to risk by taking out insurance.

________ examines organizational units for efficiency, effectiveness, and adequate controls.

The Threat Environment

Cryptography

Secure Networks

Access Control

Firewalls

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters

Exam 2: Planning and Policy

________ specifically addresses data protection requirements at financial institutions.

When risk analysis deals with costs and benefits that vary by year, the computations should use ________.

A technical security architecture includes ________.

________ examines financial processes for efficiency, effectiveness, and adequate controls.

Vulnerability testing typically is not outsourced.

________ means implementing no countermeasures and absorbing any damages that occur.

Security tends to impede functionality.

________ are descriptions of what the best firms in the industry are doing about security.

What type of organization is subject to FISMA?

________ are monetary gifts to induce an employee to favor a supplier or other party.

What security functions typically are outsourced?

Audits place special attention on ________.

Policies should specify implementation in detail.

The key to security being an enabler is ________.

To outsource some security functions, a firm can use an MISP.

________ requires multiple countermeasures to be defeated for an attack to succeed.

It is acceptable for an employee to reveal ________.

A benefit of using MSSPs is that they provide ________.

________ means responding to risk by taking out insurance.

________ examines organizational units for efficiency, effectiveness, and adequate controls.

The Threat Environment

Cryptography

Secure Networks

Access Control

Firewalls

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters