CISSP - Domain 1 - Quiz 2

You are an advisory board member for a local nonprofit organization. Because your fellow board members know of your expertise in security, they approach you with the following question: Who is ultimately responsible for information security? How will you answer them?

• Information Custodians

• Users

• Managers

• Senior Management

Examine Table 1.2 and list which line item is not correct.

• Customer database

• Facility

• Domain Controller

• E-Commerce Website

what is the correct order for the following items

• Identify, authorize, authenticate

• Authenticate, authorize, identify

• Authorize, authenticate, identify

• Identify, authenticate, authorize

What is ARO?

• Average Risk Occurrence

• Annual Risk Occurrence

• Annualized Rate of Occurrence

• Annualized Risk Outage

Which of the following does not require prior employee notification?

• Monitoring emails
  

• Monitoring unsuccessful login attempts

• Monitoring voice communications

• Monitoring web traffic

Your intern comes to you with the following question about your company’s change control board: What is not one of the primary reasons why a change control board is needed? How do you answer?

• Change control is needed so that all changes can be controlled.

• Change control is needed so that changes can be made quickly.

• Change control is needed so that the impact of new changes can be studied.

• Change control is needed so that changes can be reversed.

Which of the following should be performed in conjunction with a termination?

• Exit interview

• Potential limitation of computer access

• Prior notice of termination

• Adequate private time to say goodbye to friends and coworkers

What is the highest level of government data classification?

• Confidential

• Secret

• Sensitive

• Top Secret

Your manager is concerned about a new piece of software being developed by a contractor. Your manager wants you to verify that no means of unauthenticated access is left in the finished product. What is another name for a method of unauthenticated access into a program?

• Covert Wrapper

• Slip

• Wrapper

• Backdoor

35. Which of the following is the lowest level of private-sector data classification?

• Public

• Secret

• Unclassified

• Sensitive but Classified