Question 1

Describe what information security process the term hardening refers to.

Accepted Answer

Hardening is the process of mo

Question 2

Identify six physical access controls.

Accepted Answer

Require visitors to sign in and receive

Question 3

________ is/are an example of a preventive control.

Accepted Answer

A) Emergency response teams 
B) Encryption 
C) Log analysis 
D) Intrusion detection 
A) Emergency response teams 
B) Encryption 
C) Log analysis 
D) Intrusion detection

Question 4

A major financial institution hired a renowned security firm to attempt to compromise its computer network.A few days later,the security firm reported that it had successfully entered the financial institution's computer system without being detected.The security firm presented an analysis of the vulnerabilities that had been found to the financial institution.This is an example of a

Accepted Answer

A) preventive control. 
B) detective control. 
C) corrective control. 
D) security control. 
A) preventive control. 
B) detective control. 
C) corrective control. 
D) security control.

Question 5

Many corrective controls rely on human judgment.

Accepted Answer

A) True 
 B)False

Question 6

If the time an attacker takes to break through the organization's preventive controls is greater than the sum of the time required to detect the attack and the time required to respond to the attack,then security is

Accepted Answer

A) effective. 
B) ineffective. 
C) overdone. 
D) undermanaged. 
A) effective. 
B) ineffective. 
C) overdone. 
D) undermanaged.

Question 7

Kuzman Jovan called a meeting of the top management at Jovan Capital Management.Number one on the agenda was computer system security."The risk of security breach incidents has become unacceptable," he said,and turned to the Chief Information Officer."What do you intend to do?" Which of the following is the best answer?

Accepted Answer

A) Evaluate and modify the system using COBOL. 
B) Evaluate and modify the system using the CTC checklist. 
C) Evaluate and modify the system using the Trust Services framework 
D) Evaluate and modify the system using the COSO Internal Control Framework. 
A) Evaluate and modify the system using COBOL. 
B) Evaluate and modify the system using the CTC checklist. 
C) Evaluate and modify the system using the Trust Services framework 
D) Evaluate and modify the system using the COSO Internal Control Framework.

Question 8

The Trust Services Framework reliability principle that states that users must be able to enter,update,and retrieve data during agreed-upon times is known as

Accepted Answer

A) availability. 
B) security. 
C) maintainability. 
D) integrity. 
A) availability. 
B) security. 
C) maintainability. 
D) integrity.

Question 9

In the time-based model of information security,R represents

Accepted Answer

A) the time it takes to respond to and stop the attack. 
B) the time it takes for the organization to detect that an attack is in progress. 
C) the time it takes an attacker to break through the various controls that protect the organization's information assets. 
D) the time it takes to assess threats and select risk response. 
A) the time it takes to respond to and stop the attack. 
B) the time it takes for the organization to detect that an attack is in progress. 
C) the time it takes an attacker to break through the various controls that protect the organization's information assets. 
D) the time it takes to assess threats and select risk response.

Question 10

A border router

Accepted Answer

A) routes electronic communications within an organization. 
B) connects an organization's information system to the Internet. 
C) permits controlled access from the Internet to selected resources. 
D) serves as the main firewall. 
A) routes electronic communications within an organization. 
B) connects an organization's information system to the Internet. 
C) permits controlled access from the Internet to selected resources. 
D) serves as the main firewall.

Question 11

Why does COBIT5 DSS-05.06 stress the importance of restricting physical access to network printers?

Accepted Answer

A) because hackers can use them to print out sensitive information 
B) because hackers often hide inside large network printers until night 
C) because document images are often stored on network printers 
D) because network printers are easier to hack into than computers 
A) because hackers can use them to print out sensitive information 
B) because hackers often hide inside large network printers until night 
C) because document images are often stored on network printers 
D) because network printers are easier to hack into than computers

Question 12

A well-known hacker started her own computer security consulting business.Many companies pay her to attempt to gain unauthorized access to their network.If she is successful,she offers advice as to how to design and implement better controls.What is the name of the testing for which the hacker is being paid?

Accepted Answer

A) Penetration test. 
B) Vulnerability scan. 
C) Deep packet inspection 
D) Buffer overflow test. 
A) Penetration test. 
B) Vulnerability scan. 
C) Deep packet inspection 
D) Buffer overflow test.

Question 13

According to the Trust Services Framework,the reliability principle of integrity is achieved when the system produces data that

Accepted Answer

A) is available for operation and use at times set forth by agreement. 
B) is protected against unauthorized physical and logical access. 
C) can be maintained as required without affecting system availability, security, and integrity. 
D) is complete, accurate, and valid. 
A) is available for operation and use at times set forth by agreement. 
B) is protected against unauthorized physical and logical access. 
C) can be maintained as required without affecting system availability, security, and integrity. 
D) is complete, accurate, and valid.

Question 14

Restricting access of users to specific portions of the system as well as specific tasks,is an example of

Accepted Answer

A) authentication. 
B) authorization. 
C) identification. 
D) threat monitoring. 
A) authentication. 
B) authorization. 
C) identification. 
D) threat monitoring.

Question 15

All employees of E.C.Hoxy are required to pass through a gate and present their photo identification cards to the guard before they are admitted.Entry to secure areas,such as the Information Technology Department offices,requires further procedures.This is an example of a(n)

Accepted Answer

A) authentication control. 
B) authorization control. 
C) physical access control. 
D) hardening procedure. 
A) authentication control. 
B) authorization control. 
C) physical access control. 
D) hardening procedure.

Question 16

The most important element of any preventive control is

Accepted Answer

A) the people. 
B) the performance. 
C) the procedure(s). 
D) the penalty. 
A) the people. 
B) the performance. 
C) the procedure(s). 
D) the penalty.

Question 17

Cloud computing is generally more secure than traditional computing.

Accepted Answer

A) True 
 B)False

Question 18

The Trust Services Framework reliability principle that states personal information should be protected from unauthorized disclosure is known as

Accepted Answer

A) availability. 
B) security. 
C) privacy. 
D) integrity. 
A) availability. 
B) security. 
C) privacy. 
D) integrity.

Question 19

ShareIt is a social networking site that boasts over a million registered users and a quarterly membership growth rate in the double digits.As a consequence,the size of the information technology department has been growing very rapidly,with many new hires.Each employee is provided with a name badge with a photo and embedded computer chip that is used to gain entry to the facility.This is an example of a(n)

Accepted Answer

A) authentication control. 
B) biometric device. 
C) remote access control. 
D) authorization control. 
A) authentication control. 
B) biometric device. 
C) remote access control. 
D) authorization control.

Question 20

The security technology that evaluates IP packet traffic patterns in order to identify attacks against a system is known as

Accepted Answer

A) an intrusion prevention system. 
B) stateful packet filtering. 
C) static packet filtering. 
D) deep packet inspection. 
A) an intrusion prevention system. 
B) stateful packet filtering. 
C) static packet filtering. 
D) deep packet inspection.

Describe what information security process the term hardening refers to.

Identify six physical access controls.

________ is/are an example of a preventive control.

Many corrective controls rely on human judgment.

If the time an attacker takes to break through the organization's preventive controls is greater than the sum of the time required to detect the attack and the time required to respond to the attack,then security is

The Trust Services Framework reliability principle that states that users must be able to enter,update,and retrieve data during agreed-upon times is known as

In the time-based model of information security,R represents

A border router

Why does COBIT5 DSS-05.06 stress the importance of restricting physical access to network printers?

According to the Trust Services Framework,the reliability principle of integrity is achieved when the system produces data that

Restricting access of users to specific portions of the system as well as specific tasks,is an example of

All employees of E.C.Hoxy are required to pass through a gate and present their photo identification cards to the guard before they are admitted.Entry to secure areas,such as the Information Technology Department offices,requires further procedures.This is an example of a(n)

The most important element of any preventive control is

Cloud computing is generally more secure than traditional computing.

The Trust Services Framework reliability principle that states personal information should be protected from unauthorized disclosure is known as

The security technology that evaluates IP packet traffic patterns in order to identify attacks against a system is known as

Conceptual Foundations of Accounting Information Systems

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Confidentiality and Privacy Controls

Processing Integrity and Availability Controls

Auditing Computer-Based Information Systems

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, implementation, and Operation

Filters

Exam 8: Controls for Information Security

Describe what information security process the term hardening refers to.

Identify six physical access controls.

________ is/are an example of a preventive control.

Many corrective controls rely on human judgment.

If the time an attacker takes to break through the organization's preventive controls is greater than the sum of the time required to detect the attack and the time required to respond to the attack,then security is

The Trust Services Framework reliability principle that states that users must be able to enter,update,and retrieve data during agreed-upon times is known as

In the time-based model of information security,R represents

A border router

Why does COBIT5 DSS-05.06 stress the importance of restricting physical access to network printers?

According to the Trust Services Framework,the reliability principle of integrity is achieved when the system produces data that

Restricting access of users to specific portions of the system as well as specific tasks,is an example of

All employees of E.C.Hoxy are required to pass through a gate and present their photo identification cards to the guard before they are admitted.Entry to secure areas,such as the Information Technology Department offices,requires further procedures.This is an example of a(n)

The most important element of any preventive control is

Cloud computing is generally more secure than traditional computing.

The Trust Services Framework reliability principle that states personal information should be protected from unauthorized disclosure is known as

The security technology that evaluates IP packet traffic patterns in order to identify attacks against a system is known as

Conceptual Foundations of Accounting Information Systems

Overview of Transaction Processing and Enterprise Resource Planning Systems

Systems Documentation Techniques

Relational Databases

Computer Fraud

Computer Fraud and Abuse Techniques

Control and Accounting Information Systems

Confidentiality and Privacy Controls

Processing Integrity and Availability Controls

Auditing Computer-Based Information Systems

The Revenue Cycle: Sales to Cash Collections

The Expenditure Cycle: Purchasing to Cash Disbursements

The Production Cycle

The Human Resources Management and Payroll Cycle

General Ledger and Reporting System

Database Design Using the Rea Data Model

Implementing an Rea Model in a Relational Database

Special Topics in Rea Modeling

Introduction to Systems Development and Systems Analysis

Ais Development Strategies

Systems Design, implementation, and Operation

Filters