NEW
Font size
WorksheetsM4-Q2
Total questions: 10
Worksheet time: 10mins
When implementing a log management program, it's BEST to start with:
Technology from a trusted vendor
A careful review of the organization's log management and reporting needs
The same program and process that organizations with similar business are using
List of top-three vendors from a published report
The security principle of least privilege is:
The practice of limiting permissions to a level that will allow users to perform their jobs and those of their immediate colleagues.
The practice of limiting permissions to the minimal level that will allow users to perform their jobs.
The practice of increasing permissions to a level that will allow users to perform their jobs and those of their supervisor.
The practice of increasing permissions to a level that will allow users to use the cloud services of their choice in order to get their jobs done more quickly.
Why does privilege creep pose a security risk?
Users' privileges don't match their job or role and responsibilities.
Because with more privileges there are more responsibilities.
Auditors may question about a mismatch between an individual's responsibilities and their privileges and access rights
Users have more privileges than they need and may use them to perform actions outside of their job description.
Software Configuration Management is the discipline for systematically controlling
Changes due to the evolution of work products as the project progresses
The changes required due to defects being found which are to be fixed
Changes necessary due to change in requirements
All of the above
Which of the following is the top priority that, companies planning to implement an asset management system should examine?
The visual appeal of websites, internal search pages, and marketing collateral
Number of videos, audio files, and other multimedia assets available
Specific data needs and the business problems to be solved
All of the above
Self-service assistance to users provided by help-desk such as resetting passwords etc. is considered which level of assistance?
Level 4
Level 2
Level 1
Level 0
During the development of a software system, which of the following will be used to maintain software integrity?
Configuration Management
Change Management
Version Control
None of the above
Who of the following would approve or reject major changes in configuration?
Management
System Administrator
Change control board
User
A transaction in a database management system should be atomic in nature. An Atomic Transaction is:
The transaction should be submitted by a user
A transaction can be in-between fail and complete
Transaction should fail
Transaction should be either completed or not completed at all
Why should organizations want to manage logs?
To be informed when something unusual happens involving a system or application
To be able to take action in response to a security event
To keep a record of all the responses to security events
All of the above
