4.04 Maintain data security

Which statement best explains why investing in data security is recommended for small businesses?

• Insurance providers require no additional safeguards

• Remediation costs after breaches are typically higher

• Security tools always eliminate all future threats

• Most attacks only target very large enterprises

Which pair correctly matches an audit step with its purpose?

• Create a priority list — rank assets and risks

• Create a control list — expand information access

• Define your audit — encrypt employee emails

• Add intrusion protection — give all users admin

In the audit process, what does an access control list primarily help prevent?

• Physical theft of office equipment

• Excessive user access to sensitive information

• Power loss and building fires

• Spam volume on external email gateways

Identify the best reason to review past incidents when planning for future threats.

• It allows skipping other audit steps entirely

• It guarantees the same threats will recur soon

• It fulfills yearly documentation requirements

• Past events reveal patterns to strengthen defenses

Which action most directly reduces risk from phishing emails?

• Employee training on safe email behavior

• Posting printed policies in the lobby

• Allowing macros by default in documents

• Disabling all internet access at work

Which measure strengthens physical security of portable business devices?

• Allowing guest Wi‑Fi on production VLANs

• Turning off spam filters on email servers

• Using the same password for all users

• Full‑disk encryption on laptops and drives

When defining threats during an audit, which item belongs on the list?

• Lack of backups for critical information

• Buying plants for the reception area

• Hiring more staff for customer support

• Painting the office to improve morale

Which combination best protects against network intrusions?

• Single antivirus with no update schedule

• Intrusion alerts plus next‑gen firewalls and anti‑malware

• Public guest Wi‑Fi merged with internal networks

• Manual logs with no real‑time monitoring

A user regularly has to walk away from their computer and is worried someone may access their workstation. Which of the following would BEST prevent this?

• Lock the workstation

• Shutdown the computer

• Logon using the unprivileged guest account

• Set the screensaver password

It's a good idea to share your user name and password with your best friend so they can help with your program.

• True
• False