103 (BASED ON QUIZZES)

With limited resources and training time, you need to prioritize the security topics covered in your organization's training program. How should you approach this decision?

• Focus on the latest and most trending cybersecurity threats.

• Base the selection solely on industry compliance requirements.

• Conduct a risk assessment to identify the most relevant threats specific to your organization.

• Prioritize topics with the highest potential financial impact.

Strong passwords should be:

• at least 8 characters long

• easily memorable

• shared with colleagues

• based on personal information

Which of the following is NOT a good practice for physical security?

• locking doors and windows

• using security cameras

• leaving sensitive documents unattended

• regularly testing backup systems

Which of the following is NOT a direct benefit of implementing information assurance policies?

• reduced risk of data breaches

• improved employee productivity

• increased compliance with regulations

• enhanced brand reputation

The best way to ensure employees understand and follow information assurance and security policies is to:

• Send them an email with the policy attached.

• Provide regular training and awareness sessions.

• Punish employees who violate the policies.

• all of the choices

Which of the following best balances security needs with employee productivity when designing an acceptable use policy?

• prioritizing flexibility for employees while outlining clear guidelines and consequences for violations

• restricting access to all social media platforms

• prohibiting personal email use during work hours

• filtering all web traffic to block potential threats

A company experiences a data breach despite having a data encryption policy. Which factor is most likely to have contributed to the breach?

• inadequate storage of encryption keys

• outdated encryption algorithms

• lack of employee training on encryption procedures

• absence of a data retention policy

Which approach offers the most cost-effective solution for a small business with limited resources to implement a firewall while maintaining adequate security?

• implementing a cloud-based firewall solution

• relying solely on antivirus software for protection

• purchasing a high-end hardware firewall with advanced features

• disabling all network connectivity

Which password policy balances strongest protection against brute-force attacks with reasonable usability for employees?

• allowing employees to choose passwords without restrictions

• forcing password changes every 30 days, regardless of strength

• requiring passwords to be at least 15 characters long, with a mix of uppercase, lowercase, numbers, and symbols

• using multi-factor authentication with passwords

Which physical security measure would be most effective in identifying an insider threat responsible for recent data theft?

• implementing access control systems for restricted areas

• requiring employees to wear identification badges

• installing security cameras in sensitive areas

• conducting regular security audits