Question 1

In ____________________ testing,security personnel simulate or perform specific and controlled attacks to compromise or disrupt their own systems by exploiting documented vulnerabilities.

Accepted Answer

The answer of In ____________________ testing,security personnel simulate or perform...

Question 2

Boards of directors should supervise strategic information security objectives by demanding ____________________ from the various layers of management on the information security program's effectiveness and adequacy

Accepted Answer

The answer of Boards of directors should supervise strategic information...

Question 3

Data ____________________ are responsible for the security and use of a particular set of information.

Accepted Answer

The answer of Data ____________________ are responsible for the security...

Question 4

The Carnegie Mellon University ____________________ information security governance model begins with a stimulus for change and loops through proposals for future actions.

Accepted Answer

The answer of The Carnegie Mellon University ____________________ information security...

Question 5

In a(n)____________________ attack,the attacker uses an e-mail or forged Web site to attempt to extract personal information from a user.

Accepted Answer

The answer of In a(n)____________________ attack,the attacker uses an e-mail...

Question 6

A(n)____________________ is an identified weakness of a controlled system in which necessary controls are not present or are no longer effective.

Accepted Answer

The answer of A(n)____________________ is an identified weakness of a...

Question 7

According to Sun Tzu: if you know the ____________________ and know yourself,you need not fear the results of a hundred battles.

Accepted Answer

The answer of According to Sun Tzu: if you know...

Question 8

The critical components of the ____________________ plan include budgeting,resource allocation,and manpower.

Accepted Answer

The answer of The critical components of the ____________________ plan...

Question 9

The ____________________ has the primary responsibility for independent annual audit coordination.

Accepted Answer

The answer of The ____________________ has the primary responsibility for...

Question 10

Tactical plans are used to develop ____________________ plans.

Accepted Answer

The answer of Tactical plans are used to develop ____________________...

Question 11

The ____________________ statement contains a formal set of organizational principles,standards,and qualities.

Accepted Answer

The answer of The ____________________ statement contains a formal set...

Question 12

Boards of directors should Ensure the effectiveness of the corporation's information security ____________________ through review and approval.

Accepted Answer

The answer of Boards of directors should Ensure the effectiveness...

Question 13

A(n)____________________ is an object,person,or other entity that represents a constant danger to an asset of an organization.

Accepted Answer

The answer of A(n)____________________ is an object,person,or other entity that...

Question 14

Another significant benefit of information security governance is ____________________ for safeguarding information during critical business activities,such as mergers and acquisitions,business process recovery,and regulatory response.

Accepted Answer

The answer of Another significant benefit of information security governance...

Question 15

The impetus to begin an SDLC-based project may be ____________________ that is a response to some activity in the business community,or plan-driven,the result of a carefully-developed planning strategy.

Accepted Answer

The answer of The impetus to begin an SDLC-based project...

Question 16

An act or event that exploits a vulnerability is known as a(n)____________________.

Accepted Answer

The answer of An act or event that exploits a...

Question 17

Top-down information security initiatives must have a(n)____________________ - ideally,an executive with sufficient influence to move the project forward,ensure that it is properly managed,and push for its acceptance throughout the organization.

Accepted Answer

The answer of Top-down information security initiatives must have a(n)____________________...

Question 18

A technique used to gain unauthorized access to computers,whereby the intruder sends network-level messages to a computer with an IP address indicating that the message is coming from a trusted host is known as a(n)____________________ attack.

Accepted Answer

The answer of A technique used to gain unauthorized access...

Question 19

Controls or ____________________ are used to protect information from attacks by threats; the terms are also often used interchangeably.

Accepted Answer

The answer of Controls or ____________________ are used to protect...

Question 20

A technique or mechanism that is used to compromise a system is called a(n)____________________.

Accepted Answer

The answer of A technique or mechanism that is used...

Quiz 2: Planning for Security