QUIZ IAS 2 finals

What is the primary purpose of System Integration/Installation in the Implementation Phase?

• To refine configuration baselines

• To develop user manuals

• To ensure proper system functionality

• To determine budget constraints

Answer explanation

To ensure proper system functionality

What should be included in the Security Control Development phase?

• System integration

• Budgeting

• Implementing security controls

• Continuous monitoring

Answer explanation

The Security Control Development phase should include implementing security controls to ensure the system's protection against potential threats.

What is an essential role of information assurance teams in system development?

• Preventing any system changes

• Providing solutions and options for security concerns

• Refusing to participate in system development

• Outsourcing security responsibilities

Answer explanation

Providing solutions and options for security concerns

In which phase of the System Development Life Cycle (SDLC) is the need for a system established?

• Acquisition/Development

• Operation/Maintenance

• Implementation

• Initiation

Answer explanation

In the Initiation phase of the System Development Life Cycle (SDLC), the need for a system is established by identifying the problem or opportunity that the system will address.

Why is Security Test and Evaluation important during system implementation?

• To reduce system costs

• To ensure security controls operate effectively

• To develop user manuals

• To eliminate system vulnerabilities

Answer explanation

Security Test and Evaluation is important during system implementation to ensure security controls operate effectively and to eliminate system vulnerabilities.

What is the purpose of initial risk assessment?

• To identify system vulnerabilities

• To develop security specifications

• To determine the budget

• To establish security requirements based on sensitivity

Answer explanation

The purpose of initial risk assessment is to identify system vulnerabilities and establish security requirements based on sensitivity.

What should the Information Assurance team ensure during the Disposal Phase?

• Media sanitization

• System integration

• Security planning

• Configuration management

Answer explanation

During the Disposal Phase, the Information Assurance team should ensure media sanitization to securely erase data before disposing of it.

What is involved in the Budgeting phase?

• Developing user manuals

• Determining hardware requirements

• Identifying security controls

• Estimating costs

Answer explanation

The Budgeting phase involves estimating costs, which includes determining the financial requirements for the project.

Why should the information assurance team be involved during the Requirement Analysis/Development phase?

• To reduce system costs

• To develop user manuals

• To deliver accurate security requirements

• To speed up system implementation

Answer explanation

The information assurance team should be involved during the Requirement Analysis/Development phase to deliver accurate security requirements.

What is the focus of the Implementation phase?

• System testing

• System integration

• Security planning

• Risk assessment

Answer explanation

The focus of the Implementation phase is System integration, which involves combining different components of the system to ensure they work together seamlessly.