Intro to Cybersecurity Quiz 3 practice

In many cases, organizations look for a technically qualified information security generalist who has a solid understanding of how an organization operates.

• True

• False

A background check is not always necessary to determine the level of trust the business can place in a candidate for an information security position.

• True

• False

The information security function can be placed within the _____.

• insurance and risk management function

• administrative services function

• legal department

• All of the other answers are correct

The _____ is the title most commonly associated with the top information security officer in the organization.

• CISO

• CFO

• CTO

• CEO

Many organizations use a(n) _____ interview to remind the employee of contractual obligations, such as nondisclosure agreements, and to obtain feedback on the employee’s tenure in the organization.

• hostile

• welcome

• exit

• background

_____ is the requirement that every employee be able to perform the work of another employee.

• Task rotation

• Duty exchange

• Collusion

• Two-man control

Which one is NOT true for hostile departure of any employee?

• Before the employee is aware, all logical and keycard access is terminated.

• Employee collects all belongings and surrenders all keys, keycards, and other company property

• Employee is escorted out of the building

• More difficult for the security to maintain positive control over the employee’s access and information usage.

Separation of duties is used to reduce the chance that an employee will violate information security and breach the confidentiality, integrity, or availability of information by having tasks divided between multiple employees.

• True

• False

It is not necessary to prescreen, escort, and subject to nondisclosure agreements with the security and technology consultants to protect the organization.

• True

• False

Which one is NOT a typical required qualification for a Security Technician?

• Some experience with a particular software package

• Some experience with a particular hardware package

• Experience in using a specific technology

• Experience as a security manager