Security Policy Quiz

What is a security policy?

• A set of rules for computer and communications resources

• A method for creating passwords

• A hardware component for security

• A type of software application

Which area is NOT included in a security policy?

• Financial security

• Network security

• Personnel security

• Physical security

What does the security policy define?

• The hardware used in the organization

• The number of employees

• What an organization wants to protect

• The software applications in use

What is the purpose of monitoring security measures?

• To determine if someone is circumventing safeguards

• To increase the number of users

• To reduce costs

• To improve software performance

What is the first step in developing a security policy?

• Train employees

• Define security objectives

• Update the network

• Install software

What does resource protection ensure?

• Only authorized users can access objects

• Software is updated regularly

• All users can access all objects

• Data is always backed up

What is authentication?

• Creating passwords

• Monitoring user activity

• Granting access to resources

• Verification of identity

What does authorization determine?

• How to create passwords

• How to monitor security

• Who can access system resources

• What software to install

What is data integrity?

• Logging access attempts

• Verifying user identity

• Ensuring system performance

• Protection from unauthorized changes

What does nonrepudiation provide?

• Access to all system resources

• Proof that a transaction occurred

• A way to monitor user activity

• A method for creating passwords