Free Printable ITE 370

Worksheets

ITE 370 - IAS 2 Quiz

Total questions: 17

Worksheet time: 26mins

Name

Class

Date

Choose your block

Block 1

Block 2

Block 3

Block 4

Block 5

This step focuses on the action performed when managing risks

Identifying

Assessing

Treatment

Communication

Re-identification

This step refers to figuring out how much focus we should give on isolating or eliminating a risk.

Identifying

Assessing

Treatment

Communication

Re-identification

Incident 1: During a routine inspection of the ITS department, they noticed an unauthorized access to sensitive student records. After further investigation, they found out that the activity was traced to a student's personal laptop. The student had obtained the login credential of a teacher and used them to gain access to confidential files Incident 2: A security guard at the main entrance notices an abandoned backpack near the school gate. After reviewing the cameras, it was discovered that the bag was left by a stranger who is neither a student nor a staff member. The person was seen walking away quickly after leaving the bag.

Both incident are internal threats

Both incidents are external threats

Incident 1 is internal, and Incident 2 is external

Incident 1 is external, and incident 2 is internal

This refers to removing the source of the risk entirely, which is often impractical since it could involve disposing of valuable

Risk Transfer

Reduction

Remediation

Avoidance

This step involves continually revisiting and re-evaluating the risks even if you already solved it, rather than treating it as a one time task.

Assessing

Treatment

Re-identification

Communication

Incident 1: During a routine network monitoring session, the IT team identified an intruder attempting to gain unauthorized access to the company's main server through a brute force attack. The attacker was actively trying different password combinations to break into the system. Incident 2: An employee reported unusual activity on their workstation. Upon investigation, it was discovered that an attacker had exploited a vulnerability in the company's VPN system. This exploitation allowed the attacker to gain access to sensitive files and data from the compromised workstation.

Both incidents are direct attacks

Both incidents are indirect attacks

Incident 1 is a direct attack, and Incident 2 is an indirect attack

Incident 1 is an indirect attack, and Incident 2 is a direct attack

What is the primary goal of security architecture design?

Ensuring confidentiality of data

Achieving high system availability

Minimizing risk and protecting information systems

Enforcing strict access control policies

The purpose of data protection is solely to ensure physical security of the organization's premises, and it does not involve tools like firewalls or intrusion detection systems.

True

False

10.

What is the general purpose of a risk assessment in security architecture design?

Developing access control policies

Identifying and mitigating potential risks and vulnerabilities

Conducting penetration testing

Implementing secure coding practices

11.

It is crucial for you to memorize each and every detail of the Security Architecture Design, rather than understanding them

True

False

12.

What is the primary purpose of an IT Disaster Recovery Plan (IT DRP)?

To prevent all disasters from occurring

To identify and fix vulnerabilities in software code

To ensure systems are restored and operational after a disaster

To manage physical security of the organization

13.

Which of the following is NOT an example of a solution in an IT Disaster Recovery Plan?

Backup servers

Hiring more employees

Testing and drills

Restarting a malfunctioning server

14.

What step in creating an IT Disaster Recovery Plan involves identifying

Determining the criticality of the activity

Risk identification

Creating backup systems

Investigating the root cause

15.

How does business continuity relate to an IT Disaster Recovery Plan?

It is a separate process unrelated to disaster recovery

It ensures the organization can continue operations after a disaster

It only applies to physical disasters like earthquakes

It eliminates the need for disaster recovery plans

16.

What is the purpose of testing and exercising an IT Disaster Recovery Plan?

To identify physical security vulnerabilities

To evaluate the impact of a disaster on employees

To ensure the plan is effective and actionable during a real disaster

To replace outdated hardware

17.

After enacting the solution to a disaster, what is the next step in an IT Disaster Recovery Plan?

Develop new IT infrastructure

Investigate the root cause and report to appropriate personnel

Stop all operations until the issue is resolved

Create an entirely new disaster recovery plan

100 %

ITE 370 - IAS 2 Quiz

Total questions: 17

Worksheet time: 26mins

Similar Resources on Wayground