Deck 1: Introduction to the Management of Information Security

Question 1

Project team members may require special training on newly introduced technologies,and this may increase the risk of human resource turnover because personnel trained in a new,high-demand skill are more likely to leave the organization in search of better opportunities elsewhere.

Answer 1

False

Question 2

Unlike ongoing operations,project management involves the short-term gathering of a group that completes the project,and whose members are then released,and perhaps assigned to other projects.

Answer 2

True

Question 3

The authorization process takes place before the authentication process.

Answer 3

False

Question 4

The C.I.A.triangle is an important element of the CNSS model of information security.

Question 5

Leadership includes supervising employee behavior,performance,attendance and attitude.

Question 6

When you review technological feasibility,you address the organization's financial ability to purchase the technology needed to implement a candidate solution

Question 7

Only a deliberate attack,such as a virus,can result in the corruption of a file.

Question 8

The set of organizational guidelines that dictate certain behavior within the organization is called planning.

Question 9

A manager is responsible for coordinating the completion of tasks.

Question 10

A manager has many roles to play including informational,interpersonal,and decisional.

Question 11

Changing only one of the project plan elements does not usually affect the accuracy and reliability of the estimates of the other two.

Question 12

Information security can be both a process and a project because it is in fact a continuous series of projects.

Question 13

The first step in solving problems is to gather facts and make assumptions.

Question 14

The confidentiality of information is breached when unauthorized individuals or systems are able to access the information.

Question 15

The CNSS security model includes detailed guidelines and policies that direct the implementation of controls.

Question 16

Both autocratic and democratic leaders tend to be action-oriented.

Question 17

Information technology is the sole responsibility of a small,dedicated group of people in a company.

Question 18

Tactical planning focuses on the day-to-day operation of local resources.

Question 19

All managers are expected to play a leadership role.

Question 20

Corruption of information can occur only while information is being stored.

Question 21

The $\text {\underline{ integrity } }$
of information is threatened when it is exposed to corruption,damage,or destruction._________________________

Question 22

In the WBS approach,a project plan is first broken down into a small tasks or specific action steps.

Question 23

The three desirable characteristics of information on which the C.I.A.triangle is founded are confidentiality,integrity,and $\text {\underline{ authorization} }$
_________________________

Question 24

The process of achieving objectives using a given set of resources is called $\text {\underline{ management } }$
._________________________

Question 25

$\text {\underline{ Leadership} }$
generally addresses the direction and motivation of the human resource._________________________

Question 26

Any project manager is better served using a tool they know,rather than an overly complex one that he or she cannot use suitably.

Question 27

$\text {\underline{Democratic } }$

leaders tend to make decisions only when they are needed to avoid bringing the process to a complete halt._________________________

Question 28

The two network scheduling techniques,the Critical Path Method and PERT,are similar in design.

Question 29

An effective project management software application is capable of eliminating the need for a project manager.

Question 30

The characteristic of information that enables a user to access it without interference or obstruction and in a useable format is $\text {\underline{ confidentiality } }$

._________________________

Question 31

$\text {\underline{Autocratic } }$

leaders typically seek input from all interested parties,and then formulate a position that can be supported by the majority._________________________

Question 32

During the $\text {\underline{ identification} }$

process,a control provides proof that a user possesses the identity that he or she claims._________________________

Question 33

$\text {\underline{ Network } }$
security encompasses strategies to protect people,tangible assets,and the workplace from various threats._________________________

Question 34

Popular management theory categorizes the principles of management into planning,organizing,leading and $\text {\underline{ controlling} }$
._________________________

Question 35

$\text {\underline{Communications } }$

security addresses the protection of an organization's data networking devices,connections,and contents._________________________

Question 36

$\underline { \text { Operations } }$

security focuses on securing the organization's ability to carry out its operational activities without interruption or compromise._________________________

Question 37

The first step in solving problems is to recognize and $\text {\underline{ gather facts about} }$
the problem._________________________

Question 38

The protection of an organization's information assets is the primary mission of the information technology community._________________________

Question 39

A project can have more than one critical path.

Question 40

An information system that is able to recognize the identity of individual users is said to provide $\text {\underline{authentication } }$

_________________________

Question 41

Training project team members on how to use new technologies when they are introduced $\text {\underline{ decreases } }$

the risk of human resource turnover._________________________

Question 42

One method for sequencing tasks and subtasks in a project plan is known as $\text {\underline{ Web} }$

scheduling,referring to the collection of possible pathways to project completion from the beginning task to the ending task._________________________

Question 43

In reviewing behavior feasibility,you assess a candidate solution according to the likelihood that $\text {\underline{ management} }$
will adopt and support a solution,rather than resisting it._________________________

Question 44

A group of decision makers and/or working professionals is known as a(n)____.

A) area of interest
B) decision partner
C) community of interest
D) source of interest

Question 45

$\text {\underline{Policies } }$

are InfoSec operations that are specifically managed as separate entities._________________________

Question 46

Another popular project management tool is the bar or $\text {\underline{McCumber } }$
chart,named for its developer,who created this method in the early 1900s._________________________

Question 47

The ____ community has the lead role in protecting the organization's information assets.

A) information technology
B) information security
C) general business
D) general public

Question 48

Activity definition is a process in the knowledge area of $\text {\underline{time } }$

,in project management methodology._________________________

Question 49

The ____ community allocates resources necessary for all of to the communities of interest to function properly.

A) information security
B) information technology
C) general business
D) general public

Question 50

Communications security involves the protection of an organization's ____.

A) employees
B) physical assets
C) technology
D) data network devices

Question 51

The first step in the WBS is to identify the work to be accomplished in the task or task area; that is,the activities and $\text {\underline{constraints. } }$

._________________________

Question 52

During the project execution phase,the $\text {\underline{positive } }$

feedback loop or cybernetic loop ensures that progress is measured periodically._________________________

Question 53

WBS is a simple planning tool used to create a(n) $\text {\underline{project plan } }$

._________________________

Question 54

$\text {\underline{ Operations } }$

are discrete sequences of activities with starting points and defined completion points._________________________

Question 55

Administrative closure is a process in the knowledge area of $\text {\underline{ communications} }$

,in project management methodology._________________________

Question 56

Physical security is concerned with the protection of the ____.

A) people within the organization
B) physical assets of the organization
C) network devices of the organization
D) data of the organization

Question 57

Among the advantages to the $\text {\underline{PERT } }$

method is planning large projects is made easier by facilitating the identification of pre- and post- activities._________________________

Question 58

The project plan inputs include work time,resources and project $\text {\underline{ activities} }$

._________________________

Question 59

The most popular of networking dependency diagramming techniques is the $\text {\underline{ Program Evaluation and Review Technique (PERT)} }$
,similar to the Critical Path Method._________________________

Question 60

The ____ community supplies and supports information technology appropriate to a business needs.

A) information security
B) information technology
C) general business
D) general public

Question 61

Autocratic leaders usually ____.

A) seek input from all interested parties
B) request ideas and suggestions
C) do not accept alternative viewpoints
D) sit back and allow the process to develop as it goes

Question 62

Identification is typically performed by means of a(n)____.

A) audit log
B) user name
C) cryptographic certificate
D) access control list

Question 63

____ security addresses the ability to use the network to accomplish the organization's data communication functions.

A) Communications
B) Network
C) Operations
D) Physical

Question 64

The activation and use of access control lists is an example of the ____ process.

A) identification
B) accountability
C) authorization
D) authentication

Question 65

____ occurs when a control provides proof that a user possesses the identity that he or she claims.

A) Identification
B) Authentication
C) Authorization
D) Accountability

Question 66

Audit logs that track user activity on an information system provide ____.

A) identification
B) authorization
C) accountability
D) authentication

Question 67

A manager has informational,interpersonal,and ____ roles within the organization.

A) decisional
B) creative
C) security related
D) leadership

Question 68

According to the C.I.A.triangle,the three desirable characteristics of information are confidentiality,integrity,and ____.

A) accountability
B) availability
C) authorization
D) authentication

Question 69

The characteristic of ____ exists when a control provides assurance that every activity undertaken can be attributed to a named person or automated process.

A) accountability
B) privacy
C) authorization
D) authentication

Question 70

Strategic planning ____.

A) focuses on production planning
B) occurs at the highest levels of the organization
C) focuses on the day-to-day operation of local resources
D) occurs in the short or immediate term

Question 71

The process that develops,creates,and implements strategies for the accomplishment of objectives is called ____.

A) leading
B) controlling
C) organizing
D) planning

Question 72

____ leaders are also known as "laid-back" leaders.

A) Autocratic
B) Laissez-faire
C) Democratic
D) Aristocratic

Question 73

During the transmission of information,algorithms,hash values,and error-correcting codes help ensure the ____ of the information.

A) confidentiality
B) integrity
C) corruption
D) availability

Question 74

The protection of information and the systems and hardware that use,store,and transmit that information is known as ____.

A) security
B) information security
C) authentication
D) identification

Question 75

____ of information ensures that only those with sufficient privileges and a demonstrated need may access certain information.

A) Integrity
B) Availability
C) Authentication
D) Confidentiality

Question 76

____ leaders reserve all decision-making responsibilities for themselves.

A) Autocratic
B) Democratic
C) Laissez-faire
D) Diplomatic

Question 77

The use of cryptographic certificates to establish Secure Sockets Layer (SSL)connections is an example of the ____ process.

A) accountability
B) authorization
C) identification
D) authentication

Question 78

The ____ of information refers to the ability to access information without interference or obstruction and in a useable format.

A) privacy
B) confidentiality
C) integrity
D) availability

Question 79

____ is the quality or state of being whole,complete,and uncorrupted.

A) Integrity
B) Authorization
C) Security
D) Confidentiality

Question 80

An information system possesses the characteristic of ____ when it is able to recognize individual users.

A) authentication
B) identification
C) authorization
D) accountability