SEC 340 Week 2 Quiz 1(Q&A)_LATEST 2020,100% CORRECT

Question 1 5 pts (TCOs 1, 2, 4) Objects, persons, or other entities that pose a potential risk of loss to an asset are called _____. vulnerabilities threats attacks exploits Textbook page 4 ...

Question 1 5 pts (TCOs 1, 2, 4) Objects, persons, or other entities that pose a potential risk of loss to an asset are called _____. vulnerabilities threats attacks exploits Textbook page 4 Question 2 5 pts (TCOs 1, 2, 4) The process of assigning a risk rating or score to an information asset is called _____. risk management risk analysis risk mitigation risk assessment Textbook page 18 Question 3 5 pts (TCOs 1, 2, 4) Which part of the contingency plan provides detailed scenarios of the potential impact of each type of attack? Incident response plan Business impact analysis Disaster recovery plan Business continuity plan Textbook page 24 Question 4 5 pts (TCOs 1, 2, 4) Which is not a role of the contingency planning management team? Obtaining commitment and support from senior management Writing the contingency plan document Conducting the business impact analysis Conducting the risk assessment Textbook page 47 Question 5 5 pts (TCOs 1, 2, 4) Threats are converted to attacks and then used to create attack ______. diagrams possibilities angles profiles Textbook page 62 Question 6 5 pts (TCOs 1, 2, 4) Which of the following is a method or source for collecting data for the BIA? Online questionnaires Focus groups Application and system logs All of the above Textbook page 70-83 Question 7 5 pts (TCOs 3, 5) Which of the following is not a possible IR team structure model? Central IR team Distributed IR teams Decentralized IR team Coordinating IR team Textbook page 99 Question 8 5 pts (TCOs 3, 5) The circumstances that cause the IR plan to be initiated are called the _____. attack trigger phone call notification process Textbook page 111 Question 9 5 pts (TCOs 3, 5) Which type of plan testing involves individuals who act as if an incident has occurred, but do so without interfering with normal operations? Simulation Full interruption War gaming Parallel testing Textbook page 117 Question 10 5 pts (TCOs 3, 5) Legitimate activities wrongly reported as incident candidates are referred to as _____. noise alerts alarms None of the above Textbook page 146 Question 11 5 pts (TCOs 3, 5) The _____ should be the first deliverable undertaken by the IR planning committee. Incident response policy Security incident response team Analysis of backup plans None of the above Textbook page 95 Question 12 5 pts (TCOs 3, 5) Which of the following is required first and foremost for the successful execution of a business continuity plan? Drafting a backup plan Education and awareness Admitting there is a problem None of the above Week 2 Lecture Question 13 5 pts (TCOs 3, 5) _____ reflect upon the relative security of an information system. Patching, updates, and log files Qualitative and quantitative risk analysis Confidentiality, integrity, and availability None of the above Week 2 Lecture Question 14 5 pts (TCOs 3, 5) Which of the following refers to the way that an information system is capable of identifying those who do not have the right to know and access information? Integrity Risk assessment Access lists Confidentiality Question 15 5 pts (TCOs 3, 5) Which of the following is not a problem associated with risk management? It is a distraction It is expensive It is not effective It can be too effective Week 2 Lecture Question 16 5 pts (TCO 1) The _____ model of information security evolved from a concept known as the CIA triangle. comprehensive integrity confidentiality CNSS Textbook page 3 Question 17 5 pts (TCO 1) Which of the following can become the basis for an attack on information? Profit Threat Risk None of the above Textbook page 4 Question 18 5 pts (TCOs 2, 4) The BIA takes up where the _____ leaves off. risk assessment process business continuity plan qualitative evaluation business management board Textbook page 4 Question 19 5 pts (TCO 5) When a non-event is categorized as an actual incident, it is also known as a _____. false negative false positive reliable indicator threat vector Textbook page 135 Question 20 5 pts (TCO 5) False positives or noise often result from which of the following causes in an incident collection candidate? Placement Policy Awareness All of the above Textbook page 136