EOC review Day 1

What is the best way to protect against social engineering?

• stronger encryption
• stronger authentication
• employee awareness
• risk mitigation

What is needed to highly secure a system?

• lots of time
• more money
• system update
• disabled administrator account

Which concept determines what resources users can access after they log on?

• authentication
• auditing
• access control
• defense in depth

What is used to identify a person before giving access?

• authentication
• encryption
• access control
• auditing

What type of device can be easily lost or stolen or can be used for espionage?

• processors
• RAM chips
• removable devices
• servers

What is a physical or logical device used to capture keystrokes?

• USB flash drive
• PDA
• Smartphone
• keylogger

In dealing with risks, which response is done by buying insurance to protect your bottom line if such a disaster or threat is realized?

• risk avoidance

• risk acceptance

• risk mitigation

• risk transfer

What do you call the process in which a user is identified via a username and password?

• authentication
• authorization
• accounting
• auditing

What is the process of keeping track of a user's activity?

• authentication
• authorization
• accounting
• authoring

What is the process of giving individual access to a system or resource?

• authentication
• authorization
• accounting
• auditing