Module 5 & 6 review

Information security should be prioritized over business operations.

• True

• False

What is a type of documentation that recommends action?

• Policy

• Standard

• Guidelines

• Procedure

Type of information security policy that specifies who should be permitted access to network resources and what verification procedures are in place to facilitate this

• Identification and authentication

• Acceptable use policy

• Remote access policy

• Credentials and password policy

This group deals with communicating with external parties and in charge with media relations during an incident.

• IT Support

• Legal Department

• Physical Security and Facilities Management

• Public Affairs

What is not a component of NIST Cybersecurity Framework 2.0?

• Govern

• Identify

• Protect

• Deter

SECaaS is not a cloud computing service.

• True

• False

Effective incident response helps to dealing properly with legal issues that may arise during incidents

• True

• False

This is a type of information security policy that outlines procedures for updating an organization’s specified connectivity technology, operating systems and end-user applications

• Acceptable use policy

• Remote access policy

• Network maintenance policy

• System administration policy

Effective incident response minimizes loss or theft of information and disruption of services caused by incidents.

• True

• False

When a security incident happens because of a physical attack, Physical Security and Facilities Management needs to be informed and involved –

• True

• False