Quiz
Quiz 11
Questions in this quiz (25)
1An employee in an organization is requesting access to more information than is required. This request should be denied on the basis of which principle:
- ASeparation of duties
- BLeast privilege
- CNeed to know
- DJob rotation
2Two separate employees are required to open a safe containing sensitive information. One employee has part of the safe combination, and a second employee has another part of the safe combination. This arrangement follows the principle of:
- ASplit custody
- BSegregation of duties
- CNeed to know
- DLeast privilege
3The information security officer in an organization has assigned various accounting department employees to various roles in the organization’s financial system, taking care to assign roles with the fewest possible functions. Roles have been assigned according to the principle of:
- ANeed to know
- BSegregation of duties
- CSplit custody
- DLeast privilege
4An organization has in its possession many types of business records that vary in sensitivity and handling requirements. No policy exists that defines how any of these records should be protected. This organization lacks:
- AStorage and handling procedures
- BSeparation of duties
- CData classification policy
- DInformation security policy
5The purpose of a periodic review of user access rights is:
- ATo check whether employees have logged in to the system
- BTo check for active accounts that belong to terminated employees
- CTo determine password quality and expiration
- DTo determine whether access control systems still function properly
6The purpose of a password policy that requires a minimum number of days between password changes is:
- ATo prevent a brute force attack against a password
- BTo prevent an intruder from carrying out a dictionary attack against a password
- CTo prevent someone from quickly cycling back to their familiar password
- DTo prevent a second user from changing the password
7The purpose of a password policy that locks an account after five unsuccessful login attempts is:
- ATo prevent an intruder from carrying out a dictionary attack against a password
- BTo prevent a second user from changing the password
- CTo prevent someone from quickly cycling back to their familiar password
- DTo prevent other individuals from logging in to the account
8The purpose of backups includes all of the following EXCEPT:
- ASoftware malfunctions
- BHuman error
- CHardware malfunctions
- DCluster failovers
9The most effective way to confirm whether backups function properly is:
- AConfirming the presence of error messages in backup logs
- BConfirming the absence of error messages in backup logs
- CTesting the ability to backup data onto backup media
- DTesting the ability to restore data from backup media
10An organization’s data classification policy includes handling procedures for data at each level of sensitivity. The IT department backs up all data onto magnetic tape, resulting in tapes that contain data at all levels of sensitivity. How should these backup tapes be handled?
- AAccording to procedures for the lowest sensitivity level
- BAccording to procedures for the highest sensitivity level
- CAccording to procedures in between the lowest and highest sensitivity levels
- DData handling procedures do not apply to backup media, only original media
11All of the following methods for destroying data on hard disk drives are sufficient EXCEPT:
- AReformatting
- BDegaussing
- CShredding
- DDrilling
12All of the following are valid reasons for backing up data EXCEPT:
- ADisaster
- BSoftware bugs that corrupt data
- CReplication
- DSabotage
13An organization’s IT manager is establishing a business relationship with an off-site media storage company, for storage of backup media. The storage company has a location 5 miles away from the organization’s data center, and another location that is 70 miles away. Why should one location be preferred over the other?
- AIt makes no difference which facility is chosen
- BThe closer location should be chosen, to facilitate periodic on-site inspections
- CThe closer location should be chosen, to facilitate faster recovery
- DThe farther location should be chosen, because it will not be affected by a regional disaster
14An organization’s IT manager wants to discontinue the business relationship with an off-site media storage company, and instead store the organization’s backup tapes at his residence, which is closer to the organization’s data center. Should this plan be considered, and why:
- AThis should not be considered because the media will have fewer physical safeguards
- BThis should be considered because it will save money
- CThis should be considered because it is closer to the organization’s data center
- DThis should not be chosen because it is too closer to the organization’s data center
15Why do the actions of system administrators need to be monitored more closely than other personnel?
- AAdministrator actions can be more harmful and have a larger impact on the organization
- BAdministrators are more likely to make mistakes
- CAdministrators have access to all other users’ passwords
- DAdministrative interfaces have fewer safeguards
16Which of the following is NOT a risk associated with remote access:
- ARisk associated with sensitive information is stored on a non-company-owned computer, out of the organization’s control
- BA non-company-owned computer with inadequate anti-malware protection can introduce an infection through remote access
- CAnti-virus software on the remote computer will not be able to download virus definition updates
- DIf a split tunnel is used, the remote computer may be more vulnerable to attack
17A workstation that can remotely access the organization’s network through a VPN and access the local LAN, all through the same physical network connection, is using:
- ASplit tunneling
- BSplit gateways
- CIPsec VPN software
- DSSL VPN software
18What is the difference between split tunneling and inverse split tunneling:
- AOnly inverse split tunneling can utilize a firewall
- BOnly split tunneling can utilize a firewall
- CSplit tunneling uses IPsec and SSL, while inverse split tunneling uses L2TP
- DIn split tunneling, the default network is the LAN; in inverse split tunneling, the default network is the VPN
19The primary advantage of the use of a central management console for anti-virus is:
- ACentralized virus detection
- BCentralized reporting
- CConsolidation of reporting and centralized signature file distribution
- DCentralized signature file distribution
20The process of erasing magnetic media through the use of a strong magnetic field is known as:
- ADelousing
- BDegaussing
- CShredding
- DWiping
21A security manager has instructed a system administrator to wipe files on a hard disk. This means that the administrator needs to:
- APerform a low-level format on the hard disk
- BUse a degausser to re-align the magnetic storage material on the hard disk
- CUse a tool to overwrite files multiple times
- DPerform a high-level format on the hard disk
22An organization has received notice of a lawsuit related to activities in its operations department. How should the organization respond:
- ACease all purging activities until further notice
- BAlter retention schedules and begin purging the oldest information
- CPurge all information older than timelines specified in its retention schedule
- DHire an outside organization to perform all purging activities
23An organization has experienced several virus infections on its desktop workstations. Which of the following remedies would NOT be effective to reduce virus infections?
- AInstall an anti-virus gateway web proxy server
- BInstall anti-virus on its e-mail servers
- CInstall anti-virus central management console
- DInstall anti-virus on its web servers
24An organization has been made a party in a civil lawsuit. The organization is required to search its electronic records for specific memoranda. This process is known as:
- ASubpoena
- BSearch and seizure
- CDiscovery
- DElectronic discovery
25An organization’s critical application is required to be continuously available, with only a few minutes’ per month of downtime allowed. What measure should the organization implement to assure this level of availability?
- AServer clustering
- BServer clustering and data replication
- CHot standby site
- DData replication
Information
- Description
- 1 CSI270 Quiz on Quiz 11, created by Joshua Villy on 09/05/2013.
- Author
- Joshua Villy
- Language
- English
- Views
- 383
- Tags
- Rating
- No ratings yet Rate this quiz