Quiz 9

The categories of laws in the U.S. are:

Trademarks, copyrights, and patents are all a part of:

An organization has developed a new type of printer. What approach should the organization take to protect this invention?

A financial services organization is required to protect information about its customers. Which of these laws requires this protection:

A suspect has been forging credit cards with the purpose of stealing money from their owners through ATM withdrawals. Under which U.S. law is this suspect most likely to be prosecuted?

Which U.S. law gives law enforcement organizations greater powers to search telephone, e-mail, banking, and other records?

The Payment Card Industry Data Security Standard (PCI DSS) requires encryption of credit card in which circumstances:

A security incident as defined as:

The phases of a comprehensive security incident plan are:

A security manager has discovered that sensitive information stored on a server has been compromised. The organization is required by law to notify law enforcement. What should the security manager do first to preserve evidence on the server:

All of the following statements about a security incident plan are correct EXCEPT:

The purpose of a security incident debrief is all of the following EXCEPT:

Why would a forensic examiner wish to examine a computer’s surroundings during a forensic investigation?

A case of employee misconduct that is the subject of a forensic investigation will likely result in a court proceeding. What should included in the forensic investigation:

The (ISC)2 code of ethics includes all of the following EXCEPT:

A security manager has been asked to investigate employee behavior on the part of a senior manager. The investigation has shown that the subject has suffered a serious lapse in judgment and has violate the organization’s code of conduct. The security manager has been asked to keep the results of the investigation a secret. How should the security manager respond?

A forensics investigator has been asked to examine the workstation used by an employee who has been known to misbehave in the past. This investigation is related to more potential misconduct. What approach should the investigator take in this new investigation?

The allegation that an employee has violated company policy by downloading child pornography onto a company workstation should result in:

An organization has developed its first-ever computer security incident response procedure. What type of test should be undertaken first?

An organization’s security incident management strategy consists of response procedures to be used when an incident occurs. What other measures should the organization undertake:

The purpose of the containment step in a security incident response plan is:

The U.S. law that made sending unsolicited commercial e-mail illegal is:

The purpose of administrative laws in the U.S. is:

The U.S. Code defines:

The type of intellectual property law that protects a written work is known as: