CNET251 Chapt 5 - Developing the Security Program

A CISO never reports to the CIO, and must always go through management hierarchies.

• True

• False

It is the CISO’s responsibility to ensure that InfoSec functions are performed within an organization.

• True

• False

Which of the following information security roles best describe a type of specialized security administrator, and is typically responsible for analyzing and designing security solutions in a specific domain.

• Security manager

• Chief security officer

• Security analyst

• Chief information security officer

An organization is considered to be medium-sized when it has approximately how many devices?

• Less than 100

• More than 1000

• More than 100, less than 1000

• More than 2000

Which certification is considered to be one of the most prestigious certifications for security managers and CISOs?

• CISA

• CISSP

• CND

• CompTIA Security+

Which of the following represents a sequence of activities or events that take the majority of time to complete on a PERT or CPM diagram?

• Critical order

• Absolute path

• Slack time

• Critical path

Which security role is typically an entry-level position responsible for monitoring some aspect of the organization’s security posture?

• Security technicians

• Security administrators

• Analysts

• Watchstanders

Which of the following is considered one of the least frequently implemented but most effective security methods?

• Security Education

• Security Certifications

• Security Training

• Security Awareness

Which of the following is NOT a major benefit of SETA programs?

• They enable the organization to hold employees accountable

• They can inform members of the organization about where to report policy violations

• They can improve employee behavior

• They can improve configuration rule security

All but which of the following is certification training recommended for a student focusing on managerial information security?

• Certified Information Systems Security Professional

• Security+

• Certified Information Security Manager

• Global Information Security Officer