CSF Quiz 4

Which of these is NOT an example of security controls?

• Access controls

• Audits and inventories

• High availability

• Backups

Which of these is NOT a positive trait of a digital product in regard to the value assigned to information and data?

• Digital sales through peer-to-peer transactions make it easier to sell information without the oversight of an institutional set of rules

• A digital product is one that is sold or distributed as binary computer data

• Digital products typically have low manufacturing and distribution costs.

• The ability to sell information via hosting has increased the availability and accessibility of information even though infrastructure costs can be high.

Which of the following is a disadvantage of a semi-structured data warehouse for storing information?

• A programmer can serialize objects via a lightweight library.

• Support for lists of objects simplifies data models by avoiding the messy translations of lists into a relational data model.

• The traditional relational data model has a popular and ready-made query language, SQL.

• Support for nested or hierarchical data often simplifies data models representing complex relationships between entities

What is data correlation?

• The process of capturing and collecting data and information

• The presentation of information in a meaningful output

• The raw data itself

• The process of analyzing the whole data set and finding connections and links between data points

In Information Technology (IT) terminology, what is ROSI and how do you calculate it?

• Return on Security Investment; to calculate ROSI, you perform risk assessments to work out how much the loss of data would cost your organization and how likely it is that data loss might occur when an attacker removes data from your network without authorization.

• Return on Spending Index; to calculate ROSI, divide your revenue by spending to find the return.

• Radio signaling protocol; ROSI is the calculated use of abbreviation or slang over radio communications.

• Reporting of Safety Information; to calculate ROSI, you must compare your company's safety performance against a national or stage average to come up with the incident rate.

What do you call an action through which someone uses, makes, sells, or imports your invention without your permission?

• Patent infringement

• Copyright infringement

• A technocrime

• An intellectual property crime

What is the first step needed to begin a data-driven business decision?

• Correlation of data

• Meaningful reporting

• Set-up of a data capture and collection system

• Business decisions should not be data driven

What is a data exfiltration?

• A security breach in which a hacker has attached malicious code to a program and attacked your computer, eliminating your data

• A security breach in which a hacker makes software that looks legitimate but can take control of your computer

• A security breach that occurs when an individual’s or organization’s data is illegally copied with or without their knowledge

• A security breach in which a hacker hides a damaging image or file inside an image, causing damage to your computer

What is an example of a digital product?

• A computer case

• Documentation that supports computer software

• A video download

• A computer monitor

When does data become information?

• When it is presented as unprocessed facts and figures without any added interpretation or analysis

• It does not matter when data is applied and turned into information

• Data does not have to be readily available to be useful

• When it is applied to some purpose and adds timely value for the recipient