Test
S+ Objective 2.1 Quiz
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (15)
1A security manager needs to identify a policy that will reduce the risk of personnel within an organization colluding to embezzle company funds. Which of the following is the BEST choice?
- AAUP
- BTraining
- CMandatory Vacations
- DTime-of-Day Restrictions
2Your organization includes a software development division within the IT department. One developer writes and maintains applications for the Sales and Marketing departments. A second developer writes and maintains applications for the Payroll department. Once a year, they have to switch roles for at least a month. What is the purpose of this practice?
- ATo enforce a separation of duties policy
- BTo enforce a mandatory vacation policy
- CTo enforce a job rotation policy
- DTo enforce an acceptable use policy
3Which of the following accurately identifies the primary security control classifications?
- ARole-based, mandatory, and discretionary
- BTechnical, management, and operational
- CPhysical, logical, and technical
- DTechnical and preventative
4Administrators have noticed an increased workload recently. Which of the following can cause an increased workload from incorrect reporting?
- AFalse negatives
- BFalse positives
- CSeparation of Duties
- DSignature-based IDSs
5Which of the following is most closely associated with residual risk?
- ARisk acceptance
- BRisk Avoidance
- CRisk Deterrence
- DRisk Mitigation
6You need to calculate the ALE for a server. The value of the server is $3,000, but it has crashed 10 times in the past year. Each time it crashed, it resulted in a 10 percent loss. What is the ALE?
- A$300
- B$500
- C$3,000
- D$30,000
7You need to calculate the expected loss on a single incident. Which of the following value combinations would you MOST likely use?
- AALE and ARO
- BALE and SLE
- CSLE and ARO
- DARO and ROI
8You are helping implement your company's business continuity plan. For one system, the plan requires an RTO of five hours and an RPO of one day. Which of the following would meet this requirement?
- AEnsure the system can be restored within five hours and ensure it does not lose more than one day of data.
- BEnsure the system can be restored within one day and ensure it does not lose more than five hours of data.
- CEnsure the system can be restored between five hours and one day after an outage
- DEnsure critical systems can be restored within five hours and noncritical systems can be restored within one day.
9Your organization is evaluating replacement HVAC systems and is considering increasing current capacities. Which of the following is a potential security benefit of increasing the HVAC capabilities?
- ALower MTBF times of hardware components due to lower temperatures.
- BHigher MTBF times of hardware components due to lower temperatures.
- CLower MTTR times of hardware components due to lower temperatures.
- DHigher MTTR times of hardware components due to lower temperatures.
10An attacker was able to sneak into your building but was unable to open the server room door. He bashed the proximity badge reader with a portable fire extinguisher and the door opened. What is the MOST likely reason that the door opened?
- AThe access system was designed to fail-open.
- BThe access system was designed to fail-close.
- CThe access system was improperly installed.
- DThe portable fire extinguisher included a proximity badge.
11Which of the following is an environmental control?
- AEMI shielding
- BFencing
- CVideo Surveillance
- DMotion Detection
12An organization has purchased fire insurance to manage the risk of a potential fire. What method are they using?
- ARisk acceptance
- BRisk avoidance
- CRisk transference
- DRisk mitigation
13You are asked to identify the number of times a specific type of incident occurs per year. Which of the following BEST identifies this?
- AALE
- BARO
- CMTTF
- DSLE
14Lisa needs to calculate the total ALE for a group of servers used in the network. During the past two years, five of the servers failed. The hardware cost to replace each server is $3,500, and the downtime has resulted in $2,500 of additional losses. What is the ALE?
- A$6,000
- B$18,000
- C$15,000
- D$30,000
15Which of the following is a management control?
- AEncryption
- BSecurity Policy
- CLeast Privilege
- DChange Management
Información
- Descripción
- Explain the importance of risk-related concepts.
- Autor
- Tyler Hampton
- Idioma
- English
- Visitas
- 40
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test