Question 1

What analytical technique prevents individuals in a group from feeling pressured to go along with others in the group?&#10;A)Scenario Technique&#10;B)Qualitative Technique&#10;C)Delphi Technique&#10;D)Protection Mechanisms

Accepted Answer

The Delphi technique prevents individuals in a group from feeling pressured to go along with others in the group. This is a group decision method used to ensure that each member gives an honest opinion of what he or she thinks the result of a particular threat will be. This avoids a group of individuals feeling pressured to go along with other's thoughts processes and enables them to participate in an independent and anonymous way.

Question 2

Mike is not sure the software he developed is any good. Steve suggests he should run the software through several tests to check. Which item is not a testing method?&#10;A)Unit Testing&#10;B)Digression Testing&#10;C)Regression Testing&#10;D)Acceptance Testing

Accepted Answer

Digression testing is not a software testing method. Unit testing is when individual components are in a controlled environment where programmers validate data structure, logic, and boundary conditions. Acceptance testing ensures that the code meets customer requirements. Regression ensures that after a change to a system takes place, the functionality, performance, and protections are retested.

Question 3

What type of testing is the process of simulating attacks on a network and its systems at the request of the owner or senior management?&#10;A)Toolbox Testing&#10;B)Penetration Testing&#10;C)Computer-aided Testing&#10;D)Extreme Testing

Accepted Answer

Penetration testing is the process of simulating attacks on a network and its systems at the request of the owner or senior management. Penetration testing uses a set of procedures and tools designed to test and possibly bypass the security controls of a system. Its goal is to measure an organization's level of resistance to an attack and to uncover any weaknesses within the environment. Organizations need to determine the effectiveness of their security measures, not trust the security vendors.

Question 4

What method can be used for determining functions, identifying functional failures, assessing the causes of failure and their failure effects through a structured process?&#10;A)Failure Modes Effect Analysis&#10;B)Qualitative Risk Analysis&#10;C)Handling Analysis&#10;D)None of the Above

Accepted Answer

Failure Modes Effect Analysis (FMEA) can be used for determining functions, identifying functional failures, assessing the causes of failure and their failure effects through a structured process. The application of this process to a chronic failure enables the determination of where exactly the failure is most likely to occur. This is helpful to pinpoint where vulnerability exists and determine what the vulnerability entails.

Question 5

Who provides a method for independently ensuring that management and shareholders of an organization can rely upon the appropriateness of security objectives?&#10;A)Data Custodian&#10;B)Data Owner&#10;C)Auditor&#10;D)Security Administrator

Accepted Answer

The auditor provides a method for independently ensuring that management and shareholders of an organization can rely upon the appropriateness of security objectives. The auditor is brought in to an organization to determine if the controls that have been implemented by the administration for either technical or physical attributes have been reached and have complied with the security objectives that are either required for the organization by legislation or that have been deemed necessary by the governance of the organization.

Question 6

For all the efforts a company can take to protect their assets and sensitive information, it may prove to be useless unless their systems are checked to ensure all areas of security are working properly and providing full protection. What would these checks be called?

A)Testing Drills
B)Security Testing
C)Physical Access Auditing
D)Patrol Drills

Accepted Answer

To ensure all security efforts of security are working properly and providing full protection, physical access auditing must take place. Physical access control systems can use software and auditing features to produce audit trails or access logs pertaining to access attempts. Information should be logged and reviewed for date and time of access attempt, the entry point at which access was attempted, the user ID employed during access attempt, and unsuccessful access attempts, especially during unauthorized hours.

Question 7

Whose function is it to provide a method for ensuring independently that management and shareholders of an organization can rely on security objectives?&#10;A)CEO&#10;B)Independent Contractor&#10;C)Auditor&#10;D)Investigator

Accepted Answer

The auditor is it to provide a method for ensuring independently that management and shareholders of an organization can rely on security objectives. The auditor is brought in to an organization to determine if the controls that have been implemented by the administration for either technical or physical attributes have reached and complied with and the security objectives that are either required for the organization by legislation or have been deemed necessary by the governance of the organization.

Deck 1: Assessment