MTA Security Fundamentals Lesson 1 Review

Which of the following are valid risk responses?

• Mitigation

• Transfer

• Investment

• Avoidance

Which of the following are considered removable devices or drives?

• iPod

• Netbook

• USB flash drive

• Burnable DVD drive

Which of the following would be considered appropriate security measures for a building's external security perimeter?

• Motion dector

• Parking lot lights

• Turnstile

• Guard patrols

When traveling on business and headed out to dinner with a client, which of the following should be done to secure a laptop?

• Lock it in the car trunk

• Store it out of sight in a dresser drawer

• Secure it to a piece of furniture with a laptop security cable

• Check it at the Front Desk

Which of the following refers to the process of eliminating a risk by choosing to not engage in an action or activity?

• Mitigation

• Residual risk

• Avoidance

• Acceptance

Which of the following technologies could be used to help ensure the confidentiality of proprietary manufacturing techniques for an auto parts manufacturing business?

• Strong encryption

• Guard patrols

• A laptop safe

• Strong authentication

The information security acronym CIA stands for which of the following?

• Confidentiality, Identity, Access control

• Confidentiality, Integrity, Access control

• Confidentiality, Integrity, Availability

• Control, Identity, Access Control

Which of the following statements best describes the concept of core security principles?

• Core security principles refer to the internal security perimeter when setting up a layered physical security environment

• Core security principles refer to the principles of confidentiality, availability, and integrity

• Core security principles refer to leveraging security best practices

• Core security principles refer to the four methods of addressing risk

As the Chief Security Officer for a small medical records processing company, you have just finished setting up the physical security for your new office. You have made sure that the parking lot is illuminated, that you have guards at the door as well as doing periodic patrols, and you have badge readers throughout the building at key locations. And, of course, you have cameras in the parking lot, building entrances, and the data center entrances.

This type of implementation is known as:

• Access Control

• Core Security Principles

• Security Best Practices

• Defense in Depth

Which of the following refers to the process of disabling unneeded services and ports to make the system more secure?

• Reducing the attack surface area

• Mitigating a Trojan horse

• Security avoidance

• Defense in depth