Quiz
CISSP - Chapter 1
Este quiz tem tipos de pergunta que abrem no player de sempre.
Perguntas do quiz (100)
1Alyssa is responsible for her organization's security awareness program. She is concerned that changes in technology may make the content outdated. What control can she put in place to protect against this risk?
- AGamification
- BComputer-based training
- CContent reviews
- DLive training
2Gavin is creating a report to management on the results of his most recent risk assessment. In his report, he would like to identify the remaining level of risk to the organization after adopting security controls. What term best describes this current level of risk?
- AInherent risk
- BResidual risk
- CControl risk
- DMitigated risk
3Francine is a security specialist for an online service provider in the United States. She recently received a claim from a copyright holder that a user is storing information on her service that violates the third party's copyright. What law governs the actions that Francine must take?
- ACopyright Act
- BLanham Act
- CDigital Millennium Copyright Act
- DGramm Leach Bliley Act
4FlyAway Travel has offices in both the European Union (EU) and the United States and transfers personal information between those offices regularly. They have recently received a request from an EU customer requesting that their account be terminated. Under the General Data Protection Regulation (GDP), which requirement for processing personal information states that individuals may request that their data no longer be disseminated or processed?
- AThe right to access
- BPrivacy by design
- CThe right to be forgotten
- DThe right of data portability
5After conducting a qualitative risk assessment of her organization, Sally recommends purchasing cybersecurity breach insurance. What type of risk response behavior is she recommending?
- AAccept
- BTransfer
- CReduce
- DReject
6Which one of the following elements of information is not considered personally identifiable information that would trigger most United States (U.S.) state data breach laws?
- AStudent identification number
- BSocial Security number
- CDriver's license number
- DCredit card number
7Renee is speaking to her board of directors about their responsibilities to review cybersecurity controls. What rule requires that senior executives take personal responsibility for information security matters?
- ADue diligence rule
- BPersonal liability rule
- CPrudent man rule
- DDue process rule
8Henry recently assisted one of his co-workers in preparing for the CISSP exam. During this process, Henry disclosed confidential information about the content of the exam, in violation of Canon IV of the Code of Ethics: "Advance and protect the profession." Who may bring ethics charges against Henry for this violation?
- AAnyone may bring charges.
- BAny certified or licensed professional may bring charges.
- COnly Henry's employer may bring charges.
- DOnly the affected employee may bring charges.
9Wanda is working with one of her organization's European Union business partners to facilitate the exchange of customer information. Wanda's organization is located in the United States. What would be the best method for Wanda to use to ensure GDPR compliance?
- ABinding corporate rules
- BPrivacy Shield
- CStandard contractual clauses
- DSafe harbor
10Yolanda is the chief privacy officer for a financial institution and is researching privacy requirements related to customer checking accounts. Which one of the following laws is most likely to apply to this situation?
- AGLBA
- BSOX
- CHIPAA
- DFERPA
11Tim's organization recently received a contract to conduct sponsored research as a government contractor. What law now likely applies to the information systems involved in this contract?
- AFISMA
- BPCI DSS
- CHIPAA
- DGISRA
12Chris is advising travelers from his organization who will be visiting many different countries overseas. He is concerned about compliance with export control laws. Which of the following technologies is most likely to trigger these regulations?
- AMemory chips
- BOffice productivity applications
- CHard drives
- DEncryption software
13Bobbi is investigating a security incident and discovers that an attacker began with a normal user account but managed to exploit a system vulnerability to provide that account with administrative rights. What type of attack took place under the STRIDE threat model?
- ASpoofing
- BRepudiation
- CTampering
- DElevation of privilege
14You are completing your business continuity planning effort and have decided that you want to accept one of the risks. What should you do next?
- AImplement new security controls to reduce the risk level.
- BDesign a disaster recovery plan.
- CRepeat the business impact assessment.
- DDocument your decision-making process.
15You are completing a review of the controls used to protect a media storage facility in your organization and would like to properly categorize each control that is currently in place. Which of the following control categories accurately describe a fence around a facility? (Select all that apply.)
- APhysical
- BDetective
- CDeterrent
- DPreventive
16Tony is developing a business continuity plan and is having difficulty prioritizing resources because of the difficulty of combining information about tangible and intangible assets. What would be the most effective risk assessment approach for him to use?
- AQuantitative risk assessment
- BQualitative risk assessment
- CNeither quantitative nor qualitative risk assessment
- DCombination of quantitative and qualitative risk assessment
17Vincent believes that a former employee took trade secret information from his firm and brought it with him to a competitor. He wants to pursue legal action. Under what law could he pursue charges?
- ACopyright law
- BLanham Act
- CGlass-Steagall Act
- DEconomic Espionage Act
18Which one of the following principles imposes a standard of care upon an individual that is broad and equivalent to what one would expect from a reasonable person under the circumstances?
- ADue diligence
- BSeparation of duties
- CDue care
- DLeast privilege
19Brenda's organization recently completed the acquisition of a competitor firm. Which one of the following tasks would be LEAST likely to be part of the organizational processes addressed during the acquisition?
- AConsolidation of security functions
- BIntegration of security tools
- CProtection of intellectual property
- DDocumentation of security policies
20Kelly believes that an employee engaged in the unauthorized use of computing resources for a side business. After consulting with management, she decides to launch an administrative investigation. What is the burden of proof that she must meet in this investigation?
- APreponderance of the evidence
- BBeyond a reasonable doubt
- CBeyond the shadow of a doubt
- DThere is no standard
21Keenan Systems recently developed a new manufacturing process for microprocessors. The company wants to license the technology to other companies for use but wants to prevent unauthorized use of the technology. What type of intellectual property protection is best suited for this situation?
- APatent
- BTrade secret
- CCopyright
- DTrademark
22Which one of the following actions might be taken as part of a business continuity plan?
- ARestoring from backup tapes
- BImplementing RAID
- CRelocating to a cold site
- DRestarting business operations
23When developing a business impact analysis, the team should first create a list of assets. What should happen next?
- AIdentify vulnerabilities in each asset.
- BDetermine the risks facing the asset.
- CDevelop a value for each asset.
- DIdentify threats facing each asset.
24Mike recently implemented an intrusion prevention system designed to block common network attacks from affecting his organization. What type of risk management strategy is Mike pursuing?
- ARisk acceptance
- BRisk avoidance
- CRisk mitigation
- DRisk transference
25Laura has been asked to perform an SCA. What type of organization is she most likely in?
- AHigher education
- BBanking
- CGovernment
- DHealthcare
26Carl is a federal agent investigating a computer crime case. He identified an attacker who engaged in illegal conduct and wants to pursue a case against that individual that will lead to imprisonment. What standard of proof must Carl meet?
- ABeyond the shadow of a doubt
- BPreponderance of the evidence
- CBeyond a reasonable doubt
- DMajority of the evidence
27The International Information Systems Security Certification Consortium uses the logo shown here to represent itself online and in a variety of forums. What type of intellectual property protection may it use to protect its rights in this logo?
- ACopyright
- BPatent
- CTrade secret
- DTrademark
28Mary is helping a computer user who sees the following message appear on his computer screen. What type of attack has occurred?
- AAvailability
- BConfidentiality
- CDisclosure
- DDistributed
29Which one of the following organizations would not be automatically subject to the privacy
and security requirements of HIPAA if they engage in electronic transactions?- AHealthcare provider
- BHealth and fitness application developer
- CHealth information clearinghouse
- DHealth insurance plan
30John's network begins to experience symptoms of slowness. Upon investigation, he realizes
that the network is being bombarded with TCP SYN packets and believes that his organization is the victim of a denial-of-service attack. What principle of information security is being violated?- AAvailability
- BIntegrity
- CConfidentiality
- DDenial
31Renee is designing the long-term security plan for her organization and has a three-to
five-year planning horizon. Her primary goal is to align the security function with the
broader plans and objectives of the business. What type of plan is she developing?- AOperational
- BTactical
- CSummary
- DStrategic
32Gina is working to protect a logo that her company will use for a new product they are
launching. She has questions about the intellectual property protection process for this logo.
What U.S. government agency would be best able to answer her questions?- AUSPTO
- BLibrary of Congress
- CNSA
- DNIST
33The Acme Widgets Company is putting new controls in place for its accounting department.
Management is concerned that a rogue accountant may be able to create a new false vendor
and then issue checks to that vendor as payment for services that were never rendered. What
security control can best help prevent this situation?- AMandatory vacation
- BSeparation of duties
- CDefense in depth
- DJob rotation
34Which one of the following categories of organizations is most likely to be covered by the
provisions of FISMA?- ABanks
- BDefense contractors
- CSchool districts
- DHospitals
35Robert is responsible for securing systems used to process credit card information. What
security control framework should guide his actions?- AHIPAA
- BPCI DSS
- CSOX
- DGLBA
36Which one of the following individuals is normally responsible for fulfilling the operational
data protection responsibilities delegated by senior management, such as validating data
integrity, testing backups, and managing security policies?- AData custodian
- BData owner
- CUser
- DAuditor
37Alan works for an e-commerce company that recently had some content stolen by another
website and republished without permission. What type of intellectual property protection
would best preserve Alan's company's rights?- ATrade secret
- BCopyright
- CTrademark
- DPatent
38Florian receives a flyer from a U.S. federal government agency announcing that a new
administrative law will affect his business operations. Where should he go to find the text
of the law?- AUnited States Code
- BSupreme Court rulings
- CCode of Federal Regulations
- DCompendium of Laws
39Tom enables an application firewall provided by his cloud infrastructure as a service provider that is designed to block many types of application attacks. When viewed from a risk
management perspective, what metric is Tom attempting to lower by implementing this
countermeasure?- AImpact
- BRPO
- CMTO
- DLikelihood
40Which one of the following individuals would be the most effective organizational owner for
an information security program?- ACISSP-certified analyst
- BChief information officer (CIO)
- CManager of network security
- DPresident and CEO
41What important function do senior managers normally fill on a business continuity
planning team?- AArbitrating disputes about criticality
- BEvaluating the legal environment
- CTraining staff
- DDesigning failure controls
42You are the CIS for a major hospital system and are preparing to sign a contract with a
software as a service (SaaS) email vendor and want to perform a control assessment to ensure
that its business continuity planning measures are reasonable. What type of audit might you
request to meet this goal?- ASOC1
- BFISMA
- CPCIDSS
- DSOC2
43Gary is analyzing a security incident and, during his investigation, encounters a user who
denies having performed an action that Gary believes he did perform. What type of threat
has taken place under the STRIDE model?- ARepudiation
- BInformation disclosure
- CTampering
- DElevation of privilege
44Beth is the security administrator for a public school district. She is implementing a new stu-
dent information system and is testing the code to ensure that students are not able to alter
their own grades. What principle of information security is Beth enforcing?- AIntegrity
- BAvailability
- CConfidentiality
- DDenial
45Which one of the following issues is not normally addressed in a service-level
agreement (SLA)?- AConfidentiality of customer information
- BFailover time
- CUptime
- DMaximum consecutive downtime
46Joan is seeking to protect a piece of computer software that she developed under intellectual
property law. Which one of the following avenues of protection would not apply to a piece
of software?- ATrademark
- BCopyright
- CPatent
- DTrade secret
47please refer to the following scenario in the image and answer the question below:
Users in the two offices would like to access each other's file servers over the internet. What
control would provide confidentiality for those communications?
- ADigital signatures
- BVirtual private network
- CVirtual LAN
- DDigital content management
48Referer to the image to answer the question below:
You are also concerned about the availability of data stored on each office's server. You
would like to add technology that would enable continued access to files located on the
server even if a hard drive in a server fails. What control allows you to add robustness
without adding additional servers?- AServer clustering
- BLoad balancing
- CRAID
- DScheduled backups
49Referer to the image to answer the question below:
Finally, there are historical records stored on the server that are extremely important to
the business and should never be modified. You would like to add an integrity control
that allows you to verify on a periodic basis that the files were not modified. What control
can you add?- AHashing
- BACLs
- CRead-only attributes
- DFirewalls
50Beth is a human resources specialist preparing to assist in the termination of an employee.
Which of the following is not typically part of a termination process?- AAn exit interview
- BRecovery of property
- CAccount termination
- DSigning an NCA
51Frances is reviewing her organization's business continuity plan documentation for completeness. Which one of the following is not normally included in business continuity plan documentation?
- AStatement of accounts
- BStatement of importance
- CStatement of priorities
- DStatement of organizational responsibility
52An accounting employee at Doolittle Industries was recently arrested for participation in
an embezzlement scheme. The employee transferred money to a personal account and then
shifted funds around between other accounts every day to disguise the fraud for months.
Which one of the following controls might have best allowed the earlier detection of
this fraud?- ASeparation of duties
- BLeast privilege
- CDefense in depth
- DMandatory vacation
53Jeff would like to adopt an industry-standard approach for assessing the processes his organization uses to manage risk. What maturity model would be most appropriate for his use?
- ACMM
- BSW-CMM
- CRMM
- DCOBIT
54Chris' organization recently suffered an attack that rendered their website inaccessible to paying customers for several hours. Which information security goal was most directly impacted?
- AConfidentiality
- BIntegrity
- CAvailability
- DDenial
55Yolanda is writing a document that will provide configuration information regarding the
minimum level of security that every system in the organization must meet. What type of
document is she preparing?- APolicy
- BBaseline
- CGuideline
- DProcedure
56Who should receive initial business continuity plan training in an organization?
- ASenior executives
- BThose with specific business continuity roles
- CEveryone in the organization
- DFirst responders
57James is conducting a risk assessment for his organization and is attempting to assign an
asset value to the servers in his data center. The organization's primary concern is ensuring
that it has sufficient funds available to rebuild the data center in the event it is damaged or
destroyed. Which one of the following asset valuation methods would be most appropriate in
this situation?- APurchase cost
- BDepreciated cost
- CReplacement cost
- DOpportunity cost
58Roger's organization suffered a breach of customer credit card records. Under the terms of
PCI DSS, what organization may choose to pursue an investigation of this matter?- AFBI
- BLocal law enforcement
- CBank
- DPCI SSC
59Rick recently engaged critical employees in each of his organization's business units to ask.
for their assistance with his security awareness program. They will be responsible for sharing
security messages with their peers and answering questions about cybersecurity matters.
What term best describes this relationship?- ASecurity champion
- BSecurity expert
- CGamification
- DPeer review
60Frank discovers a key logger hidden on the laptop of his company’s chief executive officer.
What information security principle is the key logger most likely designed to disrupt?- AConfidentiality
- BIntegrity
- CAvailability
- DDenial
61Elise is helping her organization prepare to evaluate and adopt a new cloud-based human resource management (HRM) system vendor. What would be the most appropriate minimum security standard for her to require of possible vendors?
- ACompliance with all laws and regulations
- BHandling information in the same manner the organization would
- CElimination of all identified security risks
- DCompliance with the vendor's own policies
62The following graphic shows the NIST risk management framework with step 4 missing.
What is the missing step?
- AAssess security controls.
- BDetermine control gaps.
- CRemediate control gaps.
- DEvaluate user activity.
63HAL Systems recently decided to stop offering public NTP services because of a fear that its TP servers would be used in amplification DoS attacks. What type of risk management strategy did HAL pursue with respect to its NTP services?
- ARisk mitigation
- BRisk acceptance
- CRisk transference
- DRisk avoidance
64Susan is working with the management team in her company to classify data in an attempt to
apply extra security controls that will limit the likelihood of a data breach. What principle of
information security is Susan trying to enforce?- AAvailability
- BDenial
- CConfidentiality
- DIntegrity
65Which one of the following components should be included in an organization's emergency
response guidelines?- AList of individuals who should be notified of an emergency incident
- BLong-term business continuity protocols
- CActivation procedures for the organization's cold sites
- DContact information for ordering equipment
66Chas recently completed the development of his organization's business continuity plan. Who
is the ideal person to approve an organization's business continuity plan?- AChief information officer
- BChief executive officer
- CChief information security officer
- DChief operating officer
67Which one of the following actions is not normally part of the project scope and planning phase of business continuity planning?
- AStructured analysis of the organization
- BReview of the legal and regulatory landscape
- CCreation of a BCP team
- DDocumentation of the plan
68Gary is implementing a new website architecture that uses multiple small web servers behind
a load balancer. What principle of information security is Gary seeking to enforce?- ADenial
- BConfidentiality
- CIntegrity
- DAvailability
69Becka recently signed a contract with an alternate data processing facility that will provide
her company with space in the event of a disaster. The facility includes HVAC, power, and
communications circuits but no hardware. What type of facility is Becka using?- ACold site
- BWarm site
- CHot site
- DMobile site
70Greg's company recently experienced a significant data breach involving the personal data of
many of their customers. Which breach laws should they review to ensure that they are taking appropriate action?- AThe breach laws in the state where they are headquartered.
- BThe breach laws of states they do business in.
- COnly federal breach laws.
- DBreach laws only cover government agencies, not private businesses.
71Ben is seeking a control objective framework that is widely accepted around the world and
focuses specifically on information security controls. Which one of the following frameworks
would best meet his needs?- AITIL
- BISO 27002
- CCMM
- DPMBOK Guide
72Matt works for a telecommunications firm and was approached by a federal agent seeking
assistance with wiretapping one of Matt's clients pursuant to a search warrant. Which one
of the following laws requires that communications service providers cooperate with law
enforcement requests?- AECPA
- BCALEA
- CPrivacy Act
- DHITECH Act
73Every year, Gary receives privacy notices in the mail from financial institutions where he has
accounts. What law requires the institutions to send Gary these notices?- AFERPA
- BGLBA
- CHIPAA
- DHITECH
74Which one of the following agreements typically requires that a vendor not disclose confidential information learned during the scope of an engagement?
- ANCA
- BSLA
- CNDA
- DRTO
75The (ISC)? Code of Ethics applies to all CISSP holders. Which of the following is not one of
the four mandatory canons of the code?- AProtect society, the common good, the necessary public trust and confidence, and the infrastructure.
- BDisclose breaches of privacy, trust, and ethics.
- CProvide diligent and competent service to the principles.
- DAdvance and protect the profession.
76Which one of the following stakeholders is not typically included on a business continuity
planning team?- ACore business function leaders
- BInformation technology staff
- CCEO
- DSupport departments
77Ben is designing a messaging system for a bank and would like to include a feature that allows the recipient of a message to prove to a third party that the message did indeed come from the purported originator. What goal is Ben trying to achieve?
- AAuthentication
- BAuthorization
- CIntegrity
- DNonrepudiation
78What principle of information security states that an organization should implement overlap.
ping security controls whenever possible?- ALeast privilege
- BSeparation of duties
- CDefense in depth
- DSecurity through obscurity
79Ron is a CISSP-certified cybersecurity professional working in a nonprofit organization. Which of the following ethical obligations apply to his work? (Select all that apply.)
- A(ISC)2 Code of Ethics
- BOrganizational code of ethics
- CFederal code of ethics
- DRFC 1087
80Ben is responsible for the security of payment card information stored in a database. Policy
directs that he remove the information from the database, but he cannot do this for opera-
tonal reasons. He obtained an exception to policy and is seeking an appropriate compensating control to mitigate the risk. What would be his best option?- APurchasing insurance
- BEncrypting the database contents
- CRemoving the data
- DObjecting to the exception
81The Domer Industries risk assessment team recently conducted a qualitative risk assessment
and developed a matrix similar to the one shown here. Which quadrant contains the risks
that require the most immediate attention?
- AI
- BII
- CIII
- DIV
82Tom is planning to terminate an employee this afternoon for fraud and expects that the
meeting will be somewhat hostile. He is coordinating the meeting with human resources
and wants to protect the company against damage. Which one of the following steps is most
important to coordinate in time with the termination meeting?- AInforming other employees of the termination
- BRetrieving the employee's photo ID
- CCalculating the final paycheck
- DRevoking electronic access rights
83Rolando is a risk manager with a large-scale enterprise. The firm recently evaluated the
risk of California mudslides on its operations in the region and determined that the cost
of responding outweighed the benefits of any controls it could implement. The company
chose to take no action at this time. What risk management strategy did Rolando's organization pursue?- ARisk avoidance
- BRisk mitigation
- CRisk transference
- DRisk acceptance
84Helen is the owner of a U.S. website that provides information for middle and high school students preparing for exams. She is writing the site's privacy policy and would like to ensure that it complies with the provisions of the Children's Online Privacy Protection Act (COPPA), What is the cutoff age below which parents must give consent in advance of the collection of personal information from their children under COPPA?
- A13
- B15
- C17
- D18
85Tom is considering locating a business in the downtown area of Miami, Florida. He consults the FEMA flood plain map for the region, shown here, and determines that the area he is considering lies within a 100-year flood plain. What is the ARO of a flood in this area?
- A100
- B1
- C0.1
- D0.01
86You discover that a user on your network has been using the Wireshark tool, as shown here. Further investigation revealed that he was using it for illicit purposes. What pillar of information security has most likely been violated?
- AIntegrity
- BDenial
- CAvailability
- DConfidentiality
87Alan is performing threat modeling and decides that it would be useful to decompose the system into the core elements shown here. What tool is he using?
- AVulnerability assessment
- BFuzzing
- CReduction analysis
- DData modeling
88Craig is selecting the site for a new data center and must choose a location somewhere within the United States. He obtained the earthquake risk map shown here from the United States Geological Survey. Which of the following would be the safest location to build his facility if he were primarily concerned with earthquake risk?
- ANew York
- BNorth Carolina
- CIndiana
- DFlorida
89Which type of business impact assessment tool is most appropriate when attempting to evaluate the impact of a failure on customer confidence?
- AQuantitative
- BQualitative
- CAnnualized loss expectancy
- DReduction
90Ryan is a security risk analyst for an insurance company. He is currently examining a scenario in which a malicious hacker might use a SQL injection attack to deface a web server due to a missing patch in the company's web application. In this scenario, what is the threat?
- AUnpatched web application
- BWeb defacement
- CMalicious hacker
- DOperating System
91Based upon the information in this scenario, what is the exposure factor the effect of a tornado on Atwood Landing's data center:
- A10 percent
- B25 percent
- C50 percent
- D75 percent
92Based upon the information in this scenario, what is the annualized rate of occurrence for a tornado at Atwood Landing's data center?
- A0.0025
- B0.005
- C0.01
- D0.015
93Based upon the information in this scenario, what is the annualized loss expectancy for a tornado at Atwood Landing's data center?
- A$25,000
- B$50,000
- C$250,000
- D$500,000
94John is analyzing an attack against his company in which the attacker found comments
embedded in HTML code that provided the clues needed to exploit a software vulnerability.
Using the STRIDE model, what type of attack did he uncover?- ASpoofing
- BRepudiation
- CInformation disclosure
- DElevation of privilege
95Chris is worried that the laptops that his organization has recently acquired were modified
by a third party to include keyloggers before they were delivered. Where should he focus his
efforts to prevent this?- AHis supply chain
- BHis vendor contracts
- CHis post-purchase build process
- DThe original equipment manufacturer (OEM)
96In her role as a developer for an online bank, Lisa is required to submit her code for testing and review. After it passes through this process and it is approved, another employee moves the code to the production environment. What security management does this process describe?
- ARegression testing
- BCode review
- CChange management
- DFuzz testing
97After completing the first year of his security awareness program, Charles reviews the data
about how many staff completed training compared to how many were assigned the training
to determine whether he hit the 95 percent completion rate he was aiming for. What is this
type of measure called?- AA KPI
- BA metric
- CAn awareness control
- DA return on investment rate
98Which of the following is not typically included in a pre-hire screening process?
- AA drug test
- BA background check
- CSocial media review
- DFitness evaluation
99Which of the following would normally be considered a supply chain risk? (Select all that apply.)
- AAdversary tampering with hardware prior while being shipped to the end customer
- BAdversary hacking into a web server run by the organization in an IaaS environment
- CAdversary using social engineering to compromise an employee of a SaaS vendor to gain access to customer accounts
- DAdversary conducting a denial-of-service attack using a botnet
100[blank_start]A[blank_end] U.S. law that requires covered financial institutions to provide their customers with a privacy notice on a yearly basis
[blank_start]B[blank_end] A U.S. law that requires internal controls assessments, including IT transaction flows for publicly traded companies
[blank_start]C[blank_end] An industry standard that covers organizations that handle credit cards
[blank_start]D[blank_end] A U.S. law that provides data privacy and security requirements for medical Information- AGLBA
- BPCI DSS
- CHIPAA
- DSOX
- EGLBA
- FPCI DSS
- GHIPAA
- HSOX
- IGLBA
- JPCI DSS
- KHIPAA
- LSOX
- MGLBA
- NPCI DSS
- OHIPAA
- PSOX
Informações
- Descrição
- Graduate CISSP Quiz sobre CISSP - Chapter 1, criado por Craig Willey em 29-01-2022.
- Autor
- Craig Willey
- Idioma
- English
- Visualizações
- 45
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz