Fortress IQ: The ISMS Quest

Which objective of the ISMS Policy focuses specifically on the encryption of sensitive data?

• Improve Employee Awareness

• Enhance Data Protection Measures

• Strengthen Access Control

• Improve Incident Response Time

What is the primary goal of an Information Security Management System (ISMS)?

• Increase sales

• Protect information assets

• Improve marketing

• Replace all software annually

Which three core principles does information security aim to protect?

• Accountability, Accuracy, Affordability

• Confidentiality, Integrity, Availability

• Risk, Return, Resilience

• Planning, Execution, Monitoring

Which of the following is NOT an acceptable practice as per the password policy of Tribastion?

• Using a password that includes a family member’s name

• Setting a password with a mix of upper and lower case letters

• Configuring systems to store passwords in encrypted form

• Using multi-factor authentication for privileged accounts

Which group is responsible for reporting brute-force attacks or credential compromises?

• Human Resources

• Cyber Intelligence and Defence Centre

• Finance Department

• Legal and Compliance Team

What happens after five consecutive failed login attempts on Tribastion systems, unless exceptions apply?

• The user is prompted to reset the password

• The account is permanently locked

• The account is temporarily locked

• A warning email is sent to IT

Select the option that best represents a strong password, based on what you learned:

• Abc123

• P@ssw0rd

• Summer2024

• W!nT3r#42Z

Which of the following best describes the primary goal of a Clear Desk Policy?

• To make workspaces look tidy for management visits

• To reduce electricity costs

• To prevent unauthorized access to sensitive information

• To ensure documents are available for quick access

Which of the following violates the Clear Desk Policy?

• Shredding confidential documents before disposal

• Locking printed reports in your drawer

• Leaving printouts face-down on your desk overnight

• Using a screen privacy filter

What is the most appropriate way to dispose of a document that contains sensitive information?

• Tear it in half and throw it in the bin

• Recycle it

• Shred it using a cross-cut shredder

• Save it in a folder for future use