chapter nine security +

chapter nine security +

Multiple Choice

The foundation of the organizational security system is the ______________.

• A. Security profile

• Security policy

Multiple Choice

A conceptual structure for high level security strategy within the organization is the ______________.

• Security policy

• Security framework

Multiple Choice

is a comprehensive IT management framework developed in the UK

• COBIT 5

• ITIL

Multiple Choice

___________ is an IT management and governance framework which gives guiding principles for organizations to achieve objectives.

• COBIT 5

• ISO/IEC 27001

Multiple Choice

The practice of ensuring that legal, regulatory, and organizational requirements are met is

• Compliance

• Policy

Multiple Choice

________ is an approach to operational security that incorporates many different avenues of defense

• Layered security

• Security framework

Multiple Choice

A tactic that leverages layered security but incorporates more comprehensive security strategies is __________________.

• Failsafe

• Defense in Depth

Multiple Choice

Assets that, if lost, do not affect the business operation are classified as __________.

• Level 2 assets

• Level 3 assets

Multiple Choice

Organizational assets that are considered critical and absolutely necessary to maintain operations are classified as ____________.

• Level 1 assets

• Level 3 assets

Multiple Choice

What is a policy that defines rules of behavior that are acceptable and unacceptable with corporate resources?

• Audit policy

• Acceptable use policy

Multiple Choice

The practice of ensuring that all of an organization’s personnel are complying with policy is

• Personnel management

• AUP

Multiple Choice

_________ is the practice of dividing duties and responsibilities among individuals.

• Job rotation

• Separation of duties

Multiple Choice

The practice of ensuring that no one person stays in a vital job role for too long is _________.

• Separation of duties

• Job rotation

Multiple Choice

What defines the services to be provided to a client?

• ISA

• SLA

Multiple Choice

_________ defines how a partnership between businesses is conducted?

• BPA

• ISA

Multiple Choice

A non-legally binding agreement that does not involve the exchange of money is ________.

• BPA

• MOU