Question 1

Which of the following is true about a company's InfoSec awareness Web site?
A) it should contain large images to maintain interest
B) appearance doesn't matter if the information is there
C) it should be placed on the Internet for public use
D) it should be tested with multiple browsers

Accepted Answer

A company's InfoSec awareness website should be tested with multiple browsers to ensure that it can be accessed by a variety of users. The website's appearance is also important, but it should not be at the expense of the information provided. Large images may be helpful in maintaining interest, but they should not be the sole focus of the website. The website may be placed on the Internet for public use, but it may also be restricted to internal use within the company.

Question 2

A SETA program consists of three elements: security education,security training,and which of the following?.
A) security accountability
B) security authentication
C) security awareness
D) security authorization

Accepted Answer

A SETA program consists of security education and security training to ensure that employees are knowledgeable and trained in security protocols. The third element is security awareness, which involves promoting a culture of security consciousness and encouraging employees to stay vigilant and report security incidents. Option A (security accountability) and Option D (security authorization) are important concepts in security management but are not directly related to a SETA program. Option B (security authentication) refers to verifying the identity of users and devices, which is another important aspect of security management but not specifically related to a SETA program.

Question 3

The ____________________ program is designed to reduce the occurrence of accidental security breaches by members of the organization.

Accepted Answer

The answer of The ____________________ program is designed to reduce...

Question 4

The information security ____________________ is usually brought in when the organization makes the decision to outsource one or more aspects of its security program.

Accepted Answer

The answer of The information security ____________________ is usually brought...

Question 5

What is the SETA program designed to do?
A) reduce the occurrence of external attacks
B) improve operations
C) reduce the occurence of accidental security breaches
D) increase the efficiency of InfoSec staff

Accepted Answer

The SETA (Security Education, Training, and Awareness) program is designed to reduce the occurrence of accidental security breaches by educating and training employees on security policies and practices.

Question 6

A study of information security positions found that positions can be classified into one of three types: ____________________ are the real technical types,who create and install security solutions.

Accepted Answer

The answer of A study of information security positions found...

Question 7

Which of the following is the most cost-effective method for disseminating security information and news to employees?
A) distance learning seminars
B) security-themed Web site
C) conference calls
D) security newsletter

Accepted Answer

A security newsletter is the most cost-effective method for disseminating security information and news to employees as it can be produced in-house and distributed electronically or in print. Distance learning seminars and conference calls may require travel and expensive equipment. A security-themed website may require ongoing maintenance and updates.

Question 8

Project ____________________is adescription of a project's features,capabilities,functions,and quality level,used as the basis of a project plan.

Accepted Answer

The answer of Project ____________________is adescription of a project's features,capabilities,functions,and...

Question 9

Which of the following is an advantage of the formal class method of training?
A) Personal
B) Self-paced, can go as fast or as slow as the trainee needs
C) Can be scheduled to fit the needs of the trainee
D) Interaction with trainer is possible

Accepted Answer

The advantage of the formal class method of training is the interaction with the trainer, which is only possible in a formal classroom setting. Options A, B, and C are advantages of self-paced or online training methods.

Question 10

Which of the following is an advantage of the one-on-one method of training?
A) Trainees can learn from each other
B) Very cost-effective
C) Customized
D) Maximizes use of company resources

Accepted Answer

One-on-one training allows for customization of the training program to specifically meet the needs of the individual trainee. They can ask questions and receive immediate feedback, which can lead to a more effective learning experience.

Question 11

Which of the following is the first step in the process of implementing training?
A) Identify training staff
B) Identify target audiences
C) Identify program scope, goals, and objectives
D) Motivate management and employees

Accepted Answer

The first step in the process of implementing training is to identify the program scope, goals, and objectives. This sets the foundation for determining the necessary training staff and target audiences, as well as motivating management and employees.

Question 12

Which of the following is an advantage of the user support group form of training?
A) Usually conducted in an informal social setting
B) Formal training plan
C) Can be live, or can be archived and viewed at the trainee's convenience
D) Can be customized to the needs of the trainee

Accepted Answer

User support group training is often conducted in informal social settings, allowing for a more relaxed and interactive learning environment.

Question 13

An organization carries out a risk ____________________ function to evaluate risks present in IT initiatives and/or systems.

Accepted Answer

The answer of An organization carries out a risk ____________________...

Question 14

The purpose of SETA is to enhance security in all but which of the following ways?
A) by building in-depth knowledge
B) by adding barriers
C) by developing skills
D) by improving awareness

Accepted Answer

The purpose of SETA is to enhance security by building in-depth knowledge, developing skills, and improving awareness. However, it does not specifically focus on adding barriers.

Question 15

__________ is a simple project management planning tool.
A) RFP
B) WBS
C) ISO 17799
D) SDLC

Accepted Answer

WBS (Work Breakdown Structure) is a simple project management planning tool that breaks down a project into smaller, more manageable tasks. It provides a visual representation of the project scope, tasks, and deliverables, and helps in organizing and tracking progress. RFP (Request for Proposal) is a document used to solicit proposals from potential vendors or suppliers. ISO 17799 is a standard that provides guidelines for information security management. SDLC (Software Development Life Cycle) is a process followed by developers to design, develop, and test software applications.

Question 16

An organization's information security program refers to theentire set of activities,resources,personnel,and technologies used by an organization to manage the risks to the information _______ of the organization.

Accepted Answer

The answer of An organization's information security program refers to...

Question 17

Which of the following is a disadvantage of the one-on-one training method?
A) Inflexible
B) May not be responsive to the needs of all the trainees
C) Content may not be customized to the needs of the organization
D) Resource intensive, to the point of being inefficient

Accepted Answer

One-on-one training is resource intensive because it requires a dedicated trainer for each trainee, making it inefficient in terms of time and cost.

Question 18

Which of the following is NOT a step in the process of implementing training?
A) administer the program
B) hire expert consultants
C) motivate management and employees
D) identify target audiences

Accepted Answer

While hiring expert consultants may be a helpful step in developing and designing training programs, it is not a step in the actual implementation process. The steps in the implementation process typically include identifying target audiences, motivating management and employees, administering the program, evaluating the program, and making adjustments as needed.

Question 19

Advanced technical training can be selected or developed based on which of the following?
A) level of previous education
B) level of previous training
C) technology product
D) number of employees

Accepted Answer

The answer of Advanced technical training can be selected or...

Question 20

A(n)____________________ is a specific point in the project plan when a task that has a noticeable impact on plan's the progress is complete.

Accepted Answer

The answer of A(n)____________________ is a specific point in the...

Quiz 5: Developing the Security Program

Which of the following is true about a company's InfoSec awareness Web site?

A SETA program consists of three elements: security education,security training,and which of the following?.

The ____________________ program is designed to reduce the occurrence of accidental security breaches by members of the organization.

The information security ____________________ is usually brought in when the organization makes the decision to outsource one or more aspects of its security program.

What is the SETA program designed to do?

A study of information security positions found that positions can be classified into one of three types: ____________________ are the real technical types,who create and install security solutions.

Which of the following is the most cost-effective method for disseminating security information and news to employees?

Project ____________________is adescription of a project's features,capabilities,functions,and quality level,used as the basis of a project plan.

Which of the following is an advantage of the formal class method of training?

Which of the following is an advantage of the one-on-one method of training?

Which of the following is the first step in the process of implementing training?

Which of the following is an advantage of the user support group form of training?

An organization carries out a risk ____________________ function to evaluate risks present in IT initiatives and/or systems.

The purpose of SETA is to enhance security in all but which of the following ways?

__________ is a simple project management planning tool.

An organization's information security program refers to theentire set of activities,resources,personnel,and technologies used by an organization to manage the risks to the information _______ of the organization.

Which of the following is a disadvantage of the one-on-one training method?

Which of the following is NOT a step in the process of implementing training?

Advanced technical training can be selected or developed based on which of the following?

A(n)____________________ is a specific point in the project plan when a task that has a noticeable impact on plan's the progress is complete.