Question 1

Which of the following is NOT a step in the process of implementing training?
A) Administer the program
B) Establish continuing education for the training staff
C) Maintain the program
D) All of these are steps in the process of implementing training

Accepted Answer

While establishing continuing education for the training staff is important, it is not a step in the process of implementing training. The three steps in the process of implementing training are administering the program, maintaining the program, and evaluating the program.

Question 2

The ____________________ program is designed to reduce the incidence of accidental security breaches by members of the organization.

Accepted Answer

The answer of The ____________________ program is designed to reduce...

Question 3

A study of information security positions found that positions can be classified into one of three types: ____________________ provide the policies,guidelines,and standards.They're the people who do the consulting and the risk assessment,who develop the product and technical architectures.

Accepted Answer

The answer of A study of information security positions found...

Question 4

Security spending per user and per machine ____________________ exponentially as organizations grow,leaving most handcuffed when it comes to implementing effective security procedures.

Accepted Answer

The answer of Security spending per user and per machine...

Question 5

Which of the following is the first step in the process of implementing training?
A) Identify training staff
B) Identify target audiences
C) Identify program scope, goals, and objectives
D) Motivate management and employees

Accepted Answer

Before any training can be implemented, it is important to first determine the scope, goals, and objectives of the program. This will help to ensure that the training is designed to meet specific needs and outcomes. Identifying training staff, target audiences, and motivating management and employees may all come at later stages in the process.

Question 6

A study of information security positions found that positions can be classified into one of three types: ____________________ are the real technical types,who create and install security solutions.

Accepted Answer

The answer of A study of information security positions found...

Question 7

The information security ____________________ is usually brought in when the organization makes the decision to outsource one or more aspects of its security program.

Accepted Answer

The answer of The information security ____________________ is usually brought...

Question 8

____ shifts responsibility for training onto the trainee,with little formal support.
A) Self-study (noncomputerized)
B) One-on-one training
C) Distance learning/Web seminars
D) Computer-based training

Accepted Answer

Self-study places the responsibility of training onto the trainee with minimal formal support. The trainee is expected to learn through reading material or assignments provided to them. Other options listed such as one-on-one training, distance learning/web seminars, and computer-based training, provide more formal support and guidance.

Question 9

When it comes to the personnel budget,in general,security programs are ____________________ for the tasks they have been assigned.

Accepted Answer

The answer of When it comes to the personnel budget,in...

Question 10

Technically qualified individuals who configure firewalls and IDSs,implement security software,diagnose and troubleshoot problems,and coordinate with systems and network administrators to ensure that security technology is properly implemented are referred to as ____________________.

Accepted Answer

The answer of Technically qualified individuals who configure firewalls and...

Question 11

The three elements of a SETA program are security education,security training,and ____________________.

Accepted Answer

The answer of The three elements of a SETA program...

Question 12

____________________ personnel are the front line of incident response,as they may be able to diagnose and recognize an attack while handling calls from users having problems with their computers,the network,or Internet connections.

Accepted Answer

The answer of ____________________ personnel are the front line of...

Question 13

Security officers and investigators are part of the ____________________ aspect of security.

Accepted Answer

The answer of Security officers and investigators are part of...

Question 14

In large organizations the information security department is often located within the ____________________ department.

Accepted Answer

The answer of In large organizations the information security department...

Question 15

The ____________________ function maintains awareness of planned and actual laws and their impact,and coordinates with outside legal council and law enforcement agencies.

Accepted Answer

The answer of The ____________________ function maintains awareness of planned...

Question 16

An organization carries out a risk ____________________ function to evaluate risks present in IT initiatives and/or systems.

Accepted Answer

The answer of An organization carries out a risk ____________________...

Question 17

An organization's information security awareness Web site should ____.
A) contain large images
B) be designed for the latest computer technology
C) be placed on the Internet
D) be tested with multiple browsers

Accepted Answer

An organization's information security awareness Web site should be tested with multiple browsers to ensure compatibility and ease of use for all users. It is not necessary for the site to contain large images or be designed for the latest computer technology, although these may be helpful in certain contexts. The site should also be placed on the Internet for accessibility, but this is not a distinguishing factor for its effectiveness.

Question 18

An organization's ____________________ program refers to the structure and organization of the effort that strives to contain the risks to the information assets of the organization.

Accepted Answer

The answer of An organization's ____________________ program refers to the...

Question 19

A ____ program keeps information security at the forefront of users' minds on a daily basis.
A) security accountability
B) security education
C) security training
D) security awareness

Accepted Answer

A security awareness program is designed to keep information security at the forefront of users' minds on a daily basis. It can include training, education, and accountability measures, but its primary goal is to raise awareness and ensure that everyone in an organization understands the importance of security and their role in protecting sensitive data.

Question 20

Security ____________________ involves providing members of the organization with detailed information and hands-on instruction to enable them to perform their duties securely.

Accepted Answer

The answer of Security ____________________ involves providing members of the...

Quiz 5: Developing the Security Program

Which of the following is NOT a step in the process of implementing training?