Font size
WorksheetsBP - Organisational Procedure & Information Security
Total questions: 34
Worksheet time: 18mins
What does 'integrity of data' mean?
"Accuracy and completeness of the data"
"Data should be viewable at all times"
"Data should be access by only the right people"
"None of the above"
What kind of cyber security risks can be minimised by using a Virtual Private Network (VPN)?
Use of insecure Wi-Fi networks
Key-Logging
De-anonymization by network operators
Phishing attacks
An email that attempts to trick a reader into installing software that may contain a virus is:
Phishing Scam
Lobster trap
Fishing Scam
Phone Scam
Which is an example of PII? (Personally Identifiable Information)
Credit Card Number
Name
Home Address
All of the above
What is the best definition of Spear Phishing?
"A Phishing email aimed directly at you"
"A malicious virus that can encrypt or lock your computer"
"A method hackers can use to guess your password"
"A random Phishing email sent to a massive group"
What is a step that you can take to minimise the chance and impact of a ransomware attack?
"All of these answers"
"Keep your computer software up to date"
"Ensure that anti-virus tools are running and up to date"
"Ensure that you are backing up your critical files"
Who you are allowed to give your password to?
"Anybody you trust"
"Only supervisors and authorised IT staff if requested"
"Only IT staff"
"Nobody"
Which security principles are covered by the CIA triad?
certified, integrated, accessible
continuity, integrity, accessibility
confidentiality, integrity, availability
confidentiality, installation, assembly
What does compliance mean?
providing secure access to user data
using honest means to bypass security measures
conducting tests to identify vulnerabilities in a system
following the rules or standards that have been established
Which of the following is not considered social engineering?
dumpster diving
convincing people to reveal information
encrypting data to prevent user access until a fee is paid
looking through social media sites for information
Employee Onboarding is the process of ....
Directing new employees to their work place
Directing new employees about the daily tasks
Introducing new employees to the organization’s environment and culture
Introducing new employees to explore work environment on their own
Why efficient employee onboarding matters
All organisations have it
Is the first interaction an employee has with the organization
To help your new hires settle down in their jobs
It will help in managers to direct on tasks to do
Why efficient employee onboarding matters -2
A memorable onboarding experience makes employees feel welcome
To complete the joining formalities
To Managers to start dictating the job
To know about the rules and regulations
Multilevel support model is also called...
Frontline/backline model
Help desk structure
Support hierarchy
None of the above
____ is a well-defined, formal process help desk staff follow to:
–Handle problem incidents
–Get information to users
–Solve user problems
–Maintain records about the incident
Call management
Incident management
ITIL
None of the above
_____ determines whether help desk staff are authorised to handle an incident.
Prescreening
Authentication procedure
Logging
None of the above
_____ is a normal process in which an incident is transferred to a higher level support agent.
Tracking
Resolution
Escalation
None of the above
_____ is a contract that defines expected performance of user support services or external vendor-provided services.
SLA
Last will and testament
Terms and conditions
None of the above
How do we tighten our security?
Use strong password
Only connect to trusted network
Log-off network account when not in use
All of the above
What's included in a strong password?
A minimum of eight characters
At least one lowercase alphabetical letter (a-z)
At least one uppercase alphabetical letter (A-Z)
At least one digit (0-9) and/or one special character (i.e., @ ! % & $ ^ * ( ) + = )
All of the above
What is one step you can take to protect yourself from social engineers on social media?
Give out all your information
Limit personal information in your social media profiles.
Don't answer the phone
Move to Harris County with no internet access.
What is the document that details what a person who takes a certain job will be required to do?
Job description
Person specification
Personality test
Offer letter
Which of the following does NOT describe the purpose or function of internal control?
The means by which Management directs the company towards achievement of its objectives and corrects or redirects activities as circumstances change.
It is a continuous activity and represents all the methods and processes which ensure adherence to policies, promote operational efficiency and enable risk to be managed by confining exposures to acceptable levels.
It is designed to ensure activities and operations are carried out efficiently, effectively and economically.
It is created to inspire people to work together to achieve business objectives by giving them a sense of purpose and destiny.
Which of the following statement is FALSE?
Helpdesk role does not include resolving an incident ticket
All incident tickets will be assigned with the Urgency and Impacts defined in the Group Impact Classification Matrix
If any CIMB IT Staff Member detected an incident, they need to ensure that an incident ticket is logged by either contacting the Helpdesk or raise the incident ticket by themselves
If an incident ticket has been resolved and but the same issue is being reported again within a relatively-short period of time, this should be handled via the existing incident ticket
