CNET251 Chapter 8 - Security Management Models

Taking a look at the paths taken by other organizations in order to create a blueprint is known as which of the following?

• framework

• benchmarking

• comparison model

• architecture

The ISO 27002 document was originally based on which standard?

• BS7799

• BS17799

• ISO 17799:2013

• ISO 27001

Which NIST security publication was recently revised in 2017, over 20 years after the being created?

• SP 800-14

• SP 800-184

• SP 800-18

• SP 800-12

Which of the following is NOT one of the five principles provided by COBIT 5?

• Meeting Stakeholder Needs

• Covering the Enterprise End-to-End

• Applying a Single, Integrated Framework

• Reliability of Financial Reporting

Which of the following is NOT one of the five components of the COSO framework?

• Control environment

• Risk assessment

• Meeting stakeholder needs

• Information and communication

What term is used to describe the act of retrieving potentially compromising information from recycle bins or trash areas?

• cleaning trash

• dumpster diving

• mantrap

• shoulder surfing

In lattice-based access control, users are assigned a matrix of authorizations for particular areas of access.

• True

• False

When using the U.S. military classification scheme, which classification indicates that disclosure of contained information could cause minor or moderate damage to national security?

• Confidential data

• Need-to-know

• Top secret data

• For official use only

The use of specialized classification schemes is known as which of the following?

• Clarification

• Obfuscation

• Compartmentalization

• Fortification

In the Clark-Wilson integrity model, what is known as a procedure that only allows changes to a constrained data item?

• integrity verification procedure

• target of evaluation procedure

• system evaluation procedure

• transformation procedure