Cyber II | M3 L9: Physical Security Controls by Mr. B

ISO IEC 27001:2013 is suitable for which of the following

• Use within organizations to formulate security requirements and objectives
• Use within organizations to ensure that security risks are cost-effectively managed
• Use within organizations to ensure compliance with laws and regulations
• Provides federal protections for the personal health information held by covered entities and gives patients an array of rights with respect to that information
• Definition of new information security management processes

ISO IEC 27001:2013 is suitable for which of the following

• Identification and clarification of existing information security management processes
• Use by organization management to determine the status of information security management activities
• provides independent oversight of public accounting firms providing audit services
• Implementation of business-enabling information security
• Use by organizations to provide relevant information about information security to customers

FISMA standards include the

• Standards for categorizing information and information systems by mission impact
• Standards for minimum security requirements for information and information systems
• Guidance for selecting appropriate security controls for information systems
• Guidance for assessing security controls in information systems and determining security control effectiveness
• Guidance for security authorization of information systems

Attempting to attract intruders to a system set up to monitor them is called what

• Intrusion dettection

• Intrusion deflection

• Intrusion routing

• Intrusion banishment

Which law was created to protect your health care data?

• HIPAA
• COPPA
• ECPA
• GLBA

Your company hired a pen tester as a contractor to conduct a security assessment of your network in order to meet rigorous PCI DSS standards.

What type of hacker best describes the pen tester?

• Authorized

• Non-authorized

• Semi authorized

Many firewalls work with NAT which “hides” internal devices behind an external IP address. What does NAT stand for?

• Network alternate translation

• Network auto transit

• Network administration translation

• Network address translation

• Network address transition

A series of ICMP packets sent to your ports in sequence might indicate what?

• ping floof

• ip spoofing

• sql injection

• sniffing

Name the security device.

• Safe

• Biometric reader

• Number pad

• Cable lock

• Security guard

Which of the following are likely to collect and store personal data on a computer system?

• All of these are true.
• A doctor's office
• A bank
• A government office