QUIZ MATERI #5

Who approves the incident response policy?

• (ISC)²

• Senior management

• The security manager

• Investor

True of False? Business continuity planning is a reactive procedure that restores business operations after a disruption occurs.

• True

• False

Which of the following is likely to be included in the business continuity plan?

• Alternate work areas for personnel affected by a natural disaster

• The organization’s strategic security approach

• Last year’s budge information

• Log data from all systems

Tekila works for a government agency. All data in the agency is assigned a particular sensitivity level, called a "classification." Every person in the agency is assigned a "clearance" level, which determines the classification of data each person can access. What is the access control model being implemented in Tekila's agency?

• MAC (mandatory access control)

• DAC (discretionary access control)

• RBAC (role-based access control)

• FAC (formal access control)

In order for a biometric security to function properly, an authorized person's physiological data must be ______.

• Broadcast

• Stored

• Deleted

• Modified