TRUE/FALSE QUESTIONS:
Assurance is the process of examining a computer product or system with respect to certain criteria.
Problems with providing strong computer security involve only the design phase.
IT security management has evolved considerably over the last few decades due to the rise in risks to networked systems.
To ensure that a suitable level of security is maintained, management must follow up the implementation with an evaluation of the effectiveness of the security controls.
MULTIPLE CHOICES QUESTIONS
__________ assures that individuals control or influence what information related to them may be collected and stored and by whom and to whom that information may be disclosed.
A. Availability C. System Integrity
B. Privacy D. Data Integrity
Answer
Security classes are referred to as __________.
security clearances B. security classifications
security levels D. security properties
Answer
__________ ensures that critical assets are sufficiently protected in a cost-effective manner.
A. IT control B. IT security management
C. IT discipline D. IT risk implementations
Answer
The intent of the ________ is to provide a clear overview of how an organization’s IT infrastructure supports its overall business objectives.
risk register B. corporate security policy
vulnerability source D. threat assessment
Answer
Which of the following supports the Defense-in-depth strategy?
Abstraction B. Data Hiding
C Layering D. Encryption
Answer
The objective of the ________ control category is to avoid breaches of any law, statutory, regulatory, or contractual obligations, and of any security requirements.
Access
Asset management
Compliance
Business continuity management
Answer
Which of the following is not a security architecture framework?
Sherwood Applied Business Security Architecture (SABSA)
NIST Special publication…