Question 1

Organizations should have a carefully planned and fully populated inventory of all their network devices,communication channels,and computing devices._________________________

Accepted Answer

Having a comprehensive inventory of network, communication, and computing devices is important for effective network management, security, and maintenance. It enables organizations to identify and track all devices and connections, monitor their usage, detect any unauthorized or malicious activity, and ensure compliance with regulations and policies.

Question 2

The primary goal of the external monitoring domain is to maintain an informed awareness of the state of all of the organization's networks,information systems,and information security defenses._________________________

Accepted Answer

internal

Question 3

Specific routine bulletins are issued when developing threats and specific attacks pose a measurable risk to the organization._________________________

Accepted Answer

warning

Question 4

Major planning components should be reviewed on a periodic basis to ensure that they are current,accurate,and appropriate.

Accepted Answer

It is important to regularly review planning components to ensure that they reflect changes in the environment and remain relevant to the organization's goals and objectives.

Question 5

UN-CERT is a set of moderated mailing lists full of detailed,full-disclosure discussions and announcements about computer security vulnerabilities._________________________

Accepted Answer

Bugtraq

Question 6

CM assists in streamlining change management processes and prevents changes that could detrimentally affect the security posture of a system before they happen._________________________

Accepted Answer

Configuration Management (CM) plays an essential role in mitigating security risks by preventing unauthorized changes to systems and ensuring that system configurations are up to date and secure. CM also assists in streamlining change management processes, providing visibility and control over changes that may affect the security posture of a system. By detecting and addressing issues early, CM helps prevent security breaches and ensures that systems are running smoothly and securely.

Question 7

Each phase of the SDLC includes a(n)maximum set of information security-related activities required to effectively incorporate security into a system._________________________

Accepted Answer

minimum

Question 8

ISO 27001 Information Security Handbook: A Guide for Managers provides managerial guidance for the establishment and implementation of an information security program._________________________

Accepted Answer

NIST SP 800-100

Question 9

Tracking awareness involves assessing the status of the program as indicated by the database information and mapping it to standards established by the agency._________________________

Accepted Answer

compliance

Question 10

To be put to the most effective use,the information that comes from the IDPS must be integrated into the inventory process._________________________

Accepted Answer

maintenance

Question 11

Threats cannot be removed without requiring a repair of the vulnerability.

Accepted Answer

The answer of Threats cannot be removed without requiring a...

Question 12

Policy needs to be reviewed and refreshed from time to time to ensure that it's sound.

Accepted Answer

Policies should be regularly reviewed and updated to ensure that they are still relevant, effective, and legally compliant with any changes in laws, regulations, or industry practices. This helps to ensure that policies remain sound and provide the intended guidance and protections for the organization and its stakeholders.

Question 13

For configuration management (CM)and control,it is important to document the proposed or actual changes in the security plan of the system._________________________

Accepted Answer

Documenting proposed or actual changes in the security plan is an important aspect of configuration management and control, as it helps ensure that any modifications to the system are managed in a consistent and secure manner. This documentation can also help track changes over time and provide a basis for auditing and compliance activities.

Question 14

Rehearsal adds value by exercising the procedures,identifying shortcomings,and providing security personnel the opportunity to improve the security plan before it is needed.

Accepted Answer

Rehearsal helps in identifying shortcomings and improving the security plan before it is needed, therefore adding value to security procedures.

Question 15

In some organizations,facilities management is the identification,inventory,and documentation of the current information systems status-hardware,software,and networking configurations._________________________

Accepted Answer

configuration

Question 16

The basic function of the external monitoring process is to monitor activity,report results,and escalate warnings._________________________

Accepted Answer

The external monitoring process is designed to keep a watchful eye on an organization's activity, to report on key performance metrics, and when necessary to escalate warning signs or potential concerns to management or other relevant stakeholders. This process can help ensure that an organization continues to operate effectively and that any potential issues are identified and addressed in a timely manner.

Question 17

CERTs stands for computer emergency recovery teams._________________________

Accepted Answer

response

Question 18

A trouble ticket is closed when a user calls about an issue._________________________

Accepted Answer

opened

Question 19

An effective information security governance program requires constant change._________________________

Accepted Answer

review

Question 20

In some instances,risk is acknowledged as being part of an organization's business process.

Accepted Answer

Some organizations are willing to take risks in order to achieve their business objectives and goals. They may have a risk management process in place to identify, assess, and mitigate potential risks, but they still recognize that some level of risk is necessary for growth and innovation.

Quiz 12: Information Security Maintenance