Free Printable Compliance at Pos Digicert

1.

Which of the following best describes Information Security Management System (ISMS)?

a)

A security process in a company which improves data analytics.

b)

A set of policies and procedures for systematically managing an organization’s sensitive data

c)

A set of policies and procedures to manage the reputation risk of company.

d)

A quality management system is a collection of business processes focused on consistently meeting customer requirements and enhancing their satisfaction.

2.

What are the benefits in implementing Information Security Management System?

i. Protects the confidentiality, integrity and availability

ii. To receive good praises from customer

iii. Improve company culture towards data protection

iv. To be number one in market research field

a)

i and ii

b)

ii and iii

c)

ii, iii and iv

d)

i and iii

3.

Who is responsible for Quality Management System?

a)

Quality Manager / Quality Management Representative

b)

Division / Department

c)

COO

d)

All employees in the company

4.

What are the licenses / recognition that Pos Digicert have acquired from MCMC in the cause of doing its business?

i. CA License

ii. Recognition of Repository

iii. Recognition of Date Time Stamping

iv. Local Council License (MP Sepang)

a)

i and ii

b)

i, ii and iii

c)

ii, iii and iv

d)

All of the above

5.

What is validity period for ISO 9001:2015 and ISO 27001:2013?

a)

1 year

b)

2 years

c)

3 years

d)

5 years

6.

Elements required for trust as per the public key infrastructure (PKI) are as follows, except:

a)

Functionality

b)

Confidentiality

c)

Authentication

d)

Non-repudiation

7.

In the fundamental security concepts embodied by Public Key Infrastructure (PKI); Non-repudiation generally means:

a)

Information is genuine

b)

Information is available only to those authorised for it

c)

Evidence that an activity or transaction cannot later be denied

d)

You are who you say you are, and you have rights to entry or information

8.

The following are the legal effects of DSA 1997, except:

a)

S. 64. A digitally signed message is valid, enforceable, and effective as if it had been written on paper.

b)

S.62 (2). A document signed with a digital signature is legally binding as a document signed with a handwritten signature, an affixed thumbprint, or any other mark.

c)

S.64 A digitally signed message is verified by the signer himself or herself with the intention of sending the message.

d)

S.65. A digitally signed message is valid, enforceable, and effective as the original message

9.

Which of the following document can be permitted to use digital signature?

i. Agreements

ii. Wills and Codicils

iii. Trust documents

iv. Financial reports

a)

i and ii

b)

i, ii and iii

c)

ii and iii

d)

All of the above

10.

What is the key benefit of a CA being enrolled under the AATL program?

a)

Automatically trusts new digital signage that are chained to the Adobe Root certificate embedded in Adobe Acrobat or Reader software.

b)

Allows for the creation of digital signatures that are trusted whenever the signed document is opened in Adobe Acrobat or Reader software

c)

Allows users to create logos, graphics, cartoons and fonts for the photo-realistic layouts to be opened in Adobe Acrobat or Reader software.

d)

Allows users to digitally sign their documents.

11.

How many years retention period for CA related records that we are currently practice?

a)

10 years

b)

8 years

c)

5 years

d)

7 years

12.

In Pos Digicert, we are practicing document classification system. What is our current practice for document classification?

a)

Top Secret, Private & Confidential, Restricted

b)

Top Secret, Secret, Public

c)

Top Secret, Private & Confidential, Public

d)

Top Secret, Confidential, Restricted

13.

In QMS ISO 9001:2015 & ISMS ISO/IEC 27001:2013 Standards , which clause mentions about Documented Information?

a)

Clause 7.5

b)

Clause 6.5

c)

Clause 5.2

d)

Annex 8.1

14.

What is the handling method for documents classified under Top Secret classification?

a)

Documented information for this level can be shared with third party without approval.

b)

Documented information shall be kept in a locked cabinet, controlled by process owner and labelled “TOP SECRET’.

c)

Documented information to be controlled by process owner, labelled “TOP SECRET’ and can be shared with third party without approval.

d)

Documented information labelled top secret and can be left at work station for reference.

15.

What does a typical department manual in Pos Digicert contain?

i. Document creator’s photo

ii. Versioning

iii. Process Flow

iv. Process Description

v. Attendance Time Sheet

a)

i and ii

b)

i, ii and iii

c)

ii, iii and iv

d)

All of the above

16.

What does SSL stands for?

a)

Serial Session Layer

b)

Secure Socket Layer

c)

Session Secure Layer

d)

Series Socket Layer

17.

What type of SSL validation that Pos Digicert offers to its customers?

i. Domain Validated

ii. Organisation Validated

iii. Extended Validation

iv. Code Validated

a)

i and iii

b)

iii and iv

c)

i, ii and iii

d)

i and iv

18.

What is our official SLA for SSL orders?

a)

1-2 business days

b)

3-5 business days

c)

5-10 business days

d)

7-10 business days

19.

Which of the following brand of SSL certificate that we resell to our customers?

i. Symantec

ii. Entrust

iii. Go Daddy

iv. GlobalSign

a)

i and ii

b)

ii and iii

c)

ii and iv

d)

i, ii, iii and iv

20.

What is the name of our internal SSL certificate?

a)

Pos Digicert Server ID G3

b)

Pos Digicert Class 2 Root CA G3

c)

Pos Digicert SSL Root CA 2048

d)

Pos Digicert AATL Root G3

Compliance at Pos Digicert

Total questions: 20

Worksheet time: 10mins

Similar Resources on Wayground