Mid Test SC900

Which of the following is an example of a "something you know"

• User ID

• Password

• Fingerprint

• Iris scan

Within the organization, who can identify risk?

• The security manager

• Any security team member

• Senior management

• Anyone

A vendor sells a particular operating system (OS). In order to deploy the OS securely on different platforms, the vendor publishes several sets of instructions on how to install it, depending on which platform the customer is using. This is an example of a .......

• Law

• Procedure

• Standard

• Policy

Of the following, which would probably not be considered a threat?

• Natural DIsaster

• Unintentional damage to the system caused by a user

• A laptop with sensitivie data on it

• An external attacker trying to gain unauthorized access to the environment

For which of the following assests is integrity probably the most important security aspect?

• One frame of a streaming video

• The file that contains passwords used to authenticate users

• The color scheme of a marketing website

• Software that checks the spelling of product descriptions for a retail website

Kerpak works in the security office of a medium-sized entertainment company. Kerpak is asked to assess a particular threat, and he suggests that

the best way to counter this threat would be to purchase and implement a particular security solution. This is an example of ......

• Acceptance

• Avoidance

• Mitigation

• Transference

The Triffid Corporation publishes a policy that states all personnel will act in a manner that protects health and human safety. The security office is tasked with writing a detailed set of processes on how employees should wear protective gear such a hardhat and gloves when in haradous areas. This detailed set of process is a ......

• Policy

• Procedure

• Standard

• Law

The city of Grampon wants to know where all its public vehicles (garbage trucks, police cars, etc.) are at all times, so the city has GPS transmitters installed in all the vehicles. What kind of control is this?

• Administrative

• Entrenched

• Physical

• Technical

The Payment Card Industry (PCI) Council is a committee made up of representatives from major credit card providers (Visa, Mastercard, American Express) in the United States. The PCI Council issues rules that merchants must follow if the merchants choose to accept payment via credit card. These rules describe best practices for securing credit card processing technology, activities for securing credit card information, and how to protect customers' personal data. This set of rules is a _____.

• Law

• Policy

• Standard

• Procedure

Grampon municipal code requires that all companies that operate within city limits will have a set of processes to ensure employees are safe while working with hazardous materials. Triffid Corporation creates a checklist of activities employees must follow while working with hazardous materials inside Grampon city limits. The municipal code is a ______, and the Triffid checklist is a ________.

• Law, procedure

• Standard, law

• Law, standard

• Policy, law