Question 1

Credit reports contain information on a job candidate's medical history,credit history,and other personal data.

Accepted Answer

Credit reports only contain information on a job candidate's credit history and related financial information. Medical history and other personal data are not included in credit reports.

Question 2

It is easy to limit a temporary employee's access to only the information required for his or her assigned duties.

Accepted Answer

The answer of It is easy to limit a temporary...

Question 3

The CISSP has recently had three concentrations added: the Information Systems Security Architecture Professional (ISSAP),the Information Systems Security Engineering Professional (ISSEP)and the Information Systems Security Management Professional (ISSMP)._________________________

Accepted Answer

The statement is true, the CISSP has added three concentrations: the Information Systems Security Architecture Professional (ISSAP),the Information Systems Security Engineering Professional (ISSEP)and the Information Systems Security Management Professional (ISSMP).

Question 4

In addition to the responsibility of conducting investigations of information security violations,a(n)CISO has to work effectively with external law enforcement to resolve these situations._________________________

Accepted Answer

It is true that a Chief Information Security Officer (CISO) has the responsibility of investigating information security violations and working effectively with external law enforcement to resolve these situations. This collaboration ensures that the breach is properly handled and that the perpetrator is held accountable for their actions.

Question 5

Security is generally a people problem and not a technological one.

Accepted Answer

Security breaches often occur due to human error or intent, such as weak passwords, sharing sensitive information, or falling for phishing scams, rather than because of technological vulnerabilities. Therefore, improving security often requires measures such as training employees on best practices, implementing access controls, and regular security audits.

Question 6

In the classification of information security positions,the real technical types who create and install security solutions fall under the category of those that define._________________________

Accepted Answer

build

Question 7

When two business partners integrate their information systems,the level of security of both systems must be examined before any physical integration takes place,as system connection means that vulnerability on one system becomes vulnerability for all linked systems.

Accepted Answer

When two businesses integrate their information systems, the level of security of both systems must be examined before any physical integration takes place, as system connection means that vulnerability on one system becomes vulnerability for all linked systems. Therefore, the statement is true.

Question 8

Before extending an offer of employment,it is necessary to conduct a background check on any potential candidate,regardless of job level.

Accepted Answer

Conducting a background check on potential candidates is a common practice among employers as it helps them ensure the safety and security of their workplace and employees. It also helps verify the information provided by the candidate and assess their fitness for the job. Therefore, it is necessary to conduct a background check on any potential candidate before extending an offer of employment, regardless of job level.

Question 9

The International Information Systems Security Certification Consortium's most popular certification program is the CISM.__________________________________________________

Accepted Answer

CISSP
 Certified Information Systems Security Professional

Question 10

Social engineering uses persuasive techniques to gain an individual's confidence in an effort to obtain information.

Accepted Answer

This is the definition of social engineering. It involves using social skills such as manipulation, deception, and impersonation to trick people into revealing sensitive information or performing a certain action.

Question 11

Typical temporary workers include groundskeepers,maintenance,services staff,electricians,mechanics,attorneys,technical consultants,and IT specialists.

Accepted Answer

Attorneys are typically not considered temporary workers, as they usually require specialized legal expertise and often work in more permanent or long-term positions.

Question 12

The general management community of interest should learn more about the requirements and qualifications for information security positions in order to move the information security discipline forward._________________________

Accepted Answer

By learning more about the requirements and qualifications for information security positions, the general management community of interest can better understand the skills and expertise needed in information security roles, which can ultimately lead to more effective management and development of information security programs within organizations.

Question 13

Organizations are required by LAW to protect sensitive or personal employee information,including personally identifying facts such as employee addresses,phone numbers,Social Security numbers,medical conditions,and even names and addresses of family members.

Accepted Answer

This is true. The law requires organizations to protect sensitive or personal employee information to ensure the privacy and safety of individuals. Failure to do so can result in legal consequences for the organization.

Question 14

In an effort to push the information security discipline forward,middle management should learn more about personnel and information security budgetary needs._________________________

Accepted Answer

upper

Question 15

In a friendly departure,the resigning employee's account is usually allowed to continue with a new expiration date.

Accepted Answer

In a friendly departure, the employer may choose to allow the employee's account to continue with a new expiration date so they can continue accessing company resources.

Question 16

In the efforts to maintain effective personnel security practices,one of the threats to an organization's information is the inability to perform the tasks of an employee who is unable or unwilling to perform them.

Accepted Answer

If an employee is unable or unwilling to perform their tasks, it can create vulnerabilities in the organization's information security as critical tasks may be left incomplete, allowing for unauthorized access or breaches. Therefore, this is a valid threat that organizations must consider in their personnel security practices.

Question 17

The SSCP certification is considered to be a scaled-down version of the CISSP,however the SSCP's domains are not a subset of the CISSP domains,but rather contain slightly more technical content._________________________

Accepted Answer

The statement is true. The SSCP certification covers technical content that is not included in the CISSP domains, making it a scaled-down version of CISSP with additional technical content.

Question 18

The SCP credential is geared toward experienced information security managers and others who may have information security management responsibilities,and includes areas of information security governance.________________________________________

Accepted Answer

CISM
 Certified Information Security Manager

Question 19

The CISO has the responsibility of obtaining top management's approval and ongoing support for all major information security plans for his or her organization._________________________

Accepted Answer

The statement is correct and True. CISO is responsible for obtaining top management's approval and ongoing support for all major information security plans for the organization.

Question 20

The CISO is typically considered the top information security officer in an organization._________________________

Accepted Answer

The CISO (Chief Information Security Officer) is indeed considered the top information security officer in an organization.

Quiz 11: Personnel and Security