wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

MTA Security Fundamentals Lesson 1 Review

Total questions: 21

Worksheet time: 18mins

Name
Class
Date
1.

Which of the following are valid risk responses?

a)

Mitigation

b)

Transfer

c)

Investment

d)

Avoidance

2.

Which of the following are considered removable devices or drives?

a)

iPod

b)

Netbook

c)

USB flash drive

d)

Burnable DVD drive

3.

Which of the following would be considered appropriate security measures for a building's external security perimeter?

a)

Motion dector

b)

Parking lot lights

c)

Turnstile

d)

Guard patrols

4.

When traveling on business and headed out to dinner with a client, which of the following should be done to secure a laptop?

a)

Lock it in the car trunk

b)

Store it out of sight in a dresser drawer

c)

Secure it to a piece of furniture with a laptop security cable

d)

Check it at the Front Desk

5.

Which of the following refers to the process of eliminating a risk by choosing to not engage in an action or activity?

a)

Mitigation

b)

Residual risk

c)

Avoidance

d)

Acceptance

6.

Which of the following technologies could be used to help ensure the confidentiality of proprietary manufacturing techniques for an auto parts manufacturing business?

a)

Strong encryption

b)

Guard patrols

c)

A laptop safe

d)

Strong authentication

7.

The information security acronym CIA stands for which of the following?

a)

Confidentiality, Identity, Access control

b)

Confidentiality, Integrity, Access control

c)

Confidentiality, Integrity, Availability

d)

Control, Identity, Access Control

8.

Which of the following statements best describes the concept of core security principles?

a)

Core security principles refer to the internal security perimeter when setting up a layered physical security environment

b)

Core security principles refer to the principles of confidentiality, availability, and integrity

c)

Core security principles refer to leveraging security best practices

d)

Core security principles refer to the four methods of addressing risk

9.

As the Chief Security Officer for a small medical records processing company, you have just finished setting up the physical security for your new office. You have made sure that the parking lot is illuminated, that you have guards at the door as well as doing periodic patrols, and you have badge readers throughout the building at key locations. And, of course, you have cameras in the parking lot, building entrances, and the data center entrances.


This type of implementation is known as:

a)

Access Control

b)

Core Security Principles

c)

Security Best Practices

d)

Defense in Depth

10.

Which of the following refers to the process of disabling unneeded services and ports to make the system more secure?

a)

Reducing the attack surface area

b)

Mitigating a Trojan horse

c)

Security avoidance

d)

Defense in depth

11.

Which type of network traffic originates from outside the network routers and proceeds towards a destination inside the network?

a)

Ingress

b)

Egress

c)

Traverse

d)

Encrypted

12.

(a)   is the characteristic of a business resource - ensuring access is restricted to only permitted users, applications, or computer systems.

13.

If a user is deploying technologies to restrict access to a resources, they are practicing the _____ _____ security principle.

(a)  

14.

Deploying multiple layers of security technology to defend assets is called _____ _____ ______.

(a)  

15.

An action or occurrence that could result in a breach in the security, outage, or corruption of a system by exploiting known or unknown vulnerabilities is a (a)   .

16.

A risk manager for a medium sized pharmaceutical company who is asked to perform a formal risk analysis would most likely record the results of the risk assessment is a _____ _____.

(a)  

17.

_____ _____ is a method used to gain access to data, systems, or network, primarily misrepresentation.

(a)  

18.

The consistency, accuracy, and validity of data or information is called (a)   .

19.

A business traveler notices that there is an extra connector between the keyboard and the computer in a business center. She has most likely encountered a (a)   .

20.

_____ _____ refers to the risk of an event that remains after measures have been taken to reduce the likelihood or minimize the effect of the event.

(a)  

21.

Implementing security measures must always be balanced with (a)   .