Question 1

What type of threat is a threat related to the natural surroundings of an enterprise?

Accepted Answer

A) external threat 
B) environmental threat 
C) internal threat 
D) biological threat 
A) external threat 
B) environmental threat 
C) internal threat 
D) biological threat

Question 2

Assessing risk should include testing of technology assets to identify any vulnerabilities.

Accepted Answer

A) True 
 B)False

Question 3

What can be defined as the planning,coordination,and communications functions that are needed to resolve an incident in an efficient manner?

Accepted Answer

A) incident reporting 
B) incident management 
C) incident handling 
D) incident planning 
A) incident reporting 
B) incident management 
C) incident handling 
D) incident planning

Question 4

Which of the following is a network that moves a product from the supplier to the customer and is comprised of vendors that supply raw material,manufacturers who convert the material into products,warehouses that store products,distribution centers that deliver them to the retailers,and retailers who bring the product to the consumer?

Accepted Answer

A) supply chain 
B) supply chain assessment 
C) supply sphere 
D) supply network 
A) supply chain 
B) supply chain assessment 
C) supply sphere 
D) supply network

Question 5

Vendor-specific guides are useful for configuring web servers,operating systems,applications servers,and network infrastructure devices.

Accepted Answer

A) True 
 B)False

Question 6

A written document that states how an organization plans to protect the company's information technology assets is a:

Accepted Answer

A) security policy 
B) guideline 
C) security procedure 
D) standard 
A) security policy 
B) guideline 
C) security procedure 
D) standard

Question 7

The classification designation of government documents is typically Top Secret,Secret,Unusual,Confidential,and Unclassified.

Accepted Answer

A) True 
 B)False

Question 8

What control is designed to identify any threat that has reached the system?

Accepted Answer

A) preventive control 
B) compensating control 
C) detective control 
D) deterrent control 
A) preventive control 
B) compensating control 
C) detective control 
D) deterrent control

Question 9

A security control is any device or process that is used to reduce risk.

Accepted Answer

A) True 
 B)False

Question 10

Due to the potential impact of changes that can affect all users in an organization,and considering that security vulnerabilities can arise from uncoordinated changes,what should an organization create to oversee changes?

Accepted Answer

A) change management team 
B) incident response team 
C) security control team 
D) compliance team 
A) change management team 
B) incident response team 
C) security control team 
D) compliance team

What type of threat is a threat related to the natural surroundings of an enterprise?

Assessing risk should include testing of technology assets to identify any vulnerabilities.

What can be defined as the planning,coordination,and communications functions that are needed to resolve an incident in an efficient manner?

Vendor-specific guides are useful for configuring web servers,operating systems,applications servers,and network infrastructure devices.

A written document that states how an organization plans to protect the company's information technology assets is a:

The classification designation of government documents is typically Top Secret,Secret,Unusual,Confidential,and Unclassified.

What control is designed to identify any threat that has reached the system?

A security control is any device or process that is used to reduce risk.

Due to the potential impact of changes that can affect all users in an organization,and considering that security vulnerabilities can arise from uncoordinated changes,what should an organization create to oversee changes?

Introduction to Security

Malware and Social Engineering Attacks

Basic Cryptography

Advanced Cryptography and PKI

Networking and Server Attacks

Network Security Devices, Design, and Technology

Administering a Secure Network

Wireless Network Security

Client and Application Security

Mobile and Embedded Device Security

Authentication and Account Management

Access Management

Vulnerability Assessment and Data Security

Business Continuity

Filters

Exam 15: Risk Mitigation

What type of threat is a threat related to the natural surroundings of an enterprise?

Assessing risk should include testing of technology assets to identify any vulnerabilities.

What can be defined as the planning,coordination,and communications functions that are needed to resolve an incident in an efficient manner?

Vendor-specific guides are useful for configuring web servers,operating systems,applications servers,and network infrastructure devices.

A written document that states how an organization plans to protect the company's information technology assets is a:

The classification designation of government documents is typically Top Secret,Secret,Unusual,Confidential,and Unclassified.

What control is designed to identify any threat that has reached the system?

A security control is any device or process that is used to reduce risk.

Due to the potential impact of changes that can affect all users in an organization,and considering that security vulnerabilities can arise from uncoordinated changes,what should an organization create to oversee changes?

Introduction to Security

Malware and Social Engineering Attacks

Basic Cryptography

Advanced Cryptography and PKI

Networking and Server Attacks

Network Security Devices, Design, and Technology

Administering a Secure Network

Wireless Network Security

Client and Application Security

Mobile and Embedded Device Security

Authentication and Account Management

Access Management

Vulnerability Assessment and Data Security

Business Continuity

Filters