PART2

In the event of a disaster, what should be the PRIMARY objective?

• Apply disaster communication

• Protect the production database

• Guarantee the safety of people

• Guarantee the continuity of critical systems

A security professional should report violations of a company's security policy to:

• The ISC Ethics Committee

• Company management

• National authorities

• A court of law

Which department in a company is NOT regularly involved in a DRP?

• Executives

• IT

• Public Relations

• Financial

Which of the following is included in an SLA document?

• A plan to prepare the organization for the continuation of critical business functions

• A plan to keep business operations going while recovering from a significant disruption

• Instructions to detect, respond to, and limit the consequences of a cyber-attack

• Instructions on data ownership and destruction

What is the most important difference between MAC and DAC?

• In MAC, security administrators set the roles for the users; in DAC, roles are set at the object owner’s discretion

• In MAC, security administrators assign access permissions; in DAC, security administrators set user roles

• In MAC, security administrators assign access permissions; in DAC, access permissions are set at the object owner’s discretion

• In MAC, access permissions are set at the object owner’s discretion; in DAC, it is up to security administrators to assign access permissions

Requiring a specific user role to access resources is an example of:

• MAC

• ABAC

• RBAC

• DAC

Which type of document outlines the procedures ensuring that vital company systems keep running during business disrupting events?

• Business Impact Plan

• Business Impact Analysis

• Disaster Recovery Plan

• Business Continuity Plan

Which of the following is NOT a best practice in access management?

• Give only the right amount of permission

• Periodically assess if user permissions still apply

• Request a justification when upgrading permission

• Trust but verify

If a company collects PII, which policy is required?

• Remote Access Policy

• GDPR

• Privacy Policy

• Acceptable Use Policy

Which of these is LEAST likely to be installed by an infection?

• Logic Bomb

• Keylogger

• Trojan

• Backdoor