CNET151 Chap 10 - Security Policies

A security policy is a document that defines how an organization will deal with some aspect of security. True or False?

• True

• False

Effective user policies must cover passwords. True or False?

• True

• False

A good password should have at least eight characters and use all lowercase letters. True or False?

• True

• False

An organization should not permit end users to install anything on their computers. True or False?

• True

• False

After an employee discontinues employment, his or her workstation hard drive should be searched. True or False?

• True

• False

The concept of least privileges means that no one person can perform critical tasks. True or False?

• True

• False

One reason allowing a user to change the desktop configuration poses a security risk is that to change a desktop, the user must be given rights that also allow them to change other system settings. True or False?

• True

• False

You cannot disable some USB devices from end-user computers and allow others. True or False?

• True

• False

Standards are specific instructions on how to handle specific issues. True or False?

• True

• False

Security policies toward programmers and web developers are development policies. True or False?

• True

• False