Question 1

Which of the following is a domain of the CISSP certification?

Accepted Answer

The answer of Which of the following is a domain...

Question 2

Configuring firewalls and IDSs,implementing security software,and diagnosing and troubleshooting problems are some of the responsibilities of a ____.

Accepted Answer

Configuring firewalls and IDSs, implementing security software, and diagnosing and troubleshooting problems are technical responsibilities that typically fall under the role of a security technician. A security manager may oversee these tasks, but they are not typically responsible for the technical implementation and troubleshooting. A CISO (Chief Information Security Officer) is responsible for the overall management of an organization's security program and may be involved in decision-making related to security technology, but they are not typically responsible for the day-to-day configuration and troubleshooting of security tools. A security officer may perform some security-related tasks, but typically not the technical implementation of security technology.

Question 3

Which of the following is a responsibility of an information security technician?

Accepted Answer

Providing hands-on technical consulting services to teams of technical specialists is a responsibility of an information security technician. Developing information security requirements for the organization is usually the responsibility of higher-level security professionals. Establishing procedures for the identification of information assets and managing the development of information security policies are responsibilities usually assigned to information security managers or executives.

Question 4

Which of the following is NOT a CISSP concentration?

Accepted Answer

ISSCE is not a CISSP concentration. The correct options are A, C, and D. ISSAP stands for Information Systems Security Architecture Professional, ISSMP for Information Systems Security Management Professional, and CISSP concentration refers to certification concentrations within the Certified Information Systems Security Professional (CISSP) certification program.

Question 5

In the GIAC program,the ____ certification is considered the comprehensive technical credential,covering the entire range of GIAC technical and managerial security knowledge.

Accepted Answer

The GIAC Security Engineer certification is considered the comprehensive technical credential, covering a wide range of GIAC technical and managerial security knowledge.

Question 6

When terminating an employee,how the security process is handled depends upon whether the termination is ____.

Accepted Answer

The security process when terminating an employee varies depending on whether the termination is hostile or friendly. In a friendly termination, security measures may include the retrieval of all company property, cancellation of access to sensitive information or physical areas, and the removal of the terminated employee's name from departmental directories. In a hostile termination, additional security measures may be necessary, such as escorting the employee off company premises or monitoring the employee's use of company equipment after termination. Retirement or relocation (A) are not relevant factors in security processes during termination. Internal or external (C) and voluntary or optional (D) are not applicable concepts in the context of the question.

Question 7

A security technician usually reports to a ____ who in turn reports to a(n)____.

Accepted Answer

A security technician typically reports to a security manager, who is responsible for overseeing and managing the organization's security protocols. The security manager then reports to the CISO (Chief Information Security Officer) who is generally the highest-ranking security executive in the company and reports to the CEO or another high-level executive. Therefore, the best answer is D - security manager, CISO.

Question 8

The ____ certification program is an option for individuals who wish to take the CISSP or SSCP exams before obtaining the requisite experience for certification.

Accepted Answer

The (ISC)² Associate certification program allows individuals to take the CISSP or SSCP exams without meeting the experience requirement. This allows individuals to gain the certification and then work towards fulfilling the experience requirement later on. TICSA, SCP, and MCSE are not relevant to the question.

Question 9

In addition to performing other tasks,many organizations conduct a(n)____ to remind the employee of any contractual obligations,such as nondisclosure agreements,and to obtain feedback on the employee's tenure in the organization.

Accepted Answer

An exit interview is conducted by many organizations to remind the employee of any contractual obligations, such as nondisclosure agreements, and to obtain feedback on the employee's tenure in the organization. Legal disclaimers may be included in the exit interview process, but they are not the main purpose of the interview. Immediate severance and out briefings are not typically part of the exit interview process.

Question 10

____ is a domain of the SSCP certification program.

Accepted Answer

The answer of ____ is a domain of the SSCP...

Question 11

Which of the following job titles with information security elements is part of the IT community of interest?

Accepted Answer

The answer of Which of the following job titles with...

Question 12

Which of the following job titles with information security elements is part of the information security community of interest?

Accepted Answer

Access control system administrator is a job title that specifically relates to information security as it involves managing and controlling access to sensitive information and systems. The other job titles listed may have some information security elements but are not primarily focused on information security.

Question 13

The ____ takes the lead in the interviewing and hiring process and screens personnel.

Accepted Answer

The Chief Information Security Officer (CISO) typically takes the lead in the interviewing and hiring process for security personnel, as they are responsible for overseeing the organization's security strategy and team.

Question 14

Currently the only advanced technical security certifications are offered by ____.

Accepted Answer

The answer of Currently the only advanced technical security certifications...

Question 15

Which of the following job titles with information security elements is part of the general business community of interest?

Accepted Answer

Business contingency planning is a job title that is focused on the overall business continuity and disaster recovery process, including security measures. This role is therefore part of the general business community of interest. The other job titles listed are more focused on IT operations and infrastructure, and while they may have security elements, they are not typically considered part of the broader business community.

Question 16

Which of the following is a responsibility of an information security department manager?

Accepted Answer

Preparing post-mortem analyses of information security breaches is a responsibility of an information security department manager as it helps in identifying the factors that led to the security breach and to take necessary actions to prevent such incidents in the future. The other options are tasks that may be carried out by the technical staff of the information security department, but not necessarily the manager.

Question 17

The ____ program offers a wide array of certification tracks and requires applicants to complete a written practical assignment that tests the application of skills and knowledge.

Accepted Answer

The GIAC program is known for offering certification tracks in various areas of cybersecurity and requires applicants to complete a practical assignment to demonstrate their skills and knowledge. SCP, (ISC)² Associate, and TICSA certifications do not have this requirement.

Question 18

The ____ works with others who periodically run vulnerability identification software packages.

Accepted Answer

The security engineer is responsible for assessing security risks and vulnerabilities, and working with others who periodically run vulnerability identification software packages. The CISO, security consultant and security officer may also collaborate on this task, but it is not their primary responsibility.

Question 19

A common job title for a security technician in an organization is ____.

Accepted Answer

A security technician is typically a hands-on professional who installs, configures and maintains security systems and equipment in an organization. This role involves a strong technical skillset and knowledge of security best practices. While security managers and officers may have some technical knowledge, their roles are more focused on overall security strategy and management, and security consultants typically offer high-level security advice rather than hands-on technical work. A security engineer, on the other hand, is a technical professional who designs and implements security systems and solutions, making it the best choice for a security technician job title.

Question 20

The ____ is considered the most prestigious certification for security managers and CISOs.

Accepted Answer

The CISSP (Certified Information Systems Security Professional) is widely recognized as the most prestigious certification for security managers and CISOs, as it covers all aspects of information security and requires years of professional experience. The other options (GIAC, SSCP, SCP) are also well-regarded certifications in the security industry, but not as highly valued as the CISSP.

Quiz 11: Personnel and Security

Which of the following is a domain of the CISSP certification?

Configuring firewalls and IDSs,implementing security software,and diagnosing and troubleshooting problems are some of the responsibilities of a ____.

Which of the following is a responsibility of an information security technician?

Which of the following is NOT a CISSP concentration?

In the GIAC program,the ____ certification is considered the comprehensive technical credential,covering the entire range of GIAC technical and managerial security knowledge.

When terminating an employee,how the security process is handled depends upon whether the termination is ____.

A security technician usually reports to a who in turn reports to a(n) .

The ____ certification program is an option for individuals who wish to take the CISSP or SSCP exams before obtaining the requisite experience for certification.

In addition to performing other tasks,many organizations conduct a(n) ____ to remind the employee of any contractual obligations,such as nondisclosure agreements,and to obtain feedback on the employee's tenure in the organization.

____ is a domain of the SSCP certification program.

Which of the following job titles with information security elements is part of the IT community of interest?

Which of the following job titles with information security elements is part of the information security community of interest?

The ____ takes the lead in the interviewing and hiring process and screens personnel.

Currently the only advanced technical security certifications are offered by ____.

Which of the following job titles with information security elements is part of the general business community of interest?

Which of the following is a responsibility of an information security department manager?

The ____ program offers a wide array of certification tracks and requires applicants to complete a written practical assignment that tests the application of skills and knowledge.

The ____ works with others who periodically run vulnerability identification software packages.

A common job title for a security technician in an organization is ____.

The ____ is considered the most prestigious certification for security managers and CISOs.

Quiz 11: Personnel and Security

Which of the following is a domain of the CISSP certification?

Configuring firewalls and IDSs,implementing security software,and diagnosing and troubleshooting problems are some of the responsibilities of a ____.

Which of the following is a responsibility of an information security technician?

Which of the following is NOT a CISSP concentration?

In the GIAC program,the ____ certification is considered the comprehensive technical credential,covering the entire range of GIAC technical and managerial security knowledge.

When terminating an employee,how the security process is handled depends upon whether the termination is ____.

A security technician usually reports to a ____ who in turn reports to a(n) ____.

The ____ certification program is an option for individuals who wish to take the CISSP or SSCP exams before obtaining the requisite experience for certification.

In addition to performing other tasks,many organizations conduct a(n) ____ to remind the employee of any contractual obligations,such as nondisclosure agreements,and to obtain feedback on the employee's tenure in the organization.

____ is a domain of the SSCP certification program.

Which of the following job titles with information security elements is part of the IT community of interest?

Which of the following job titles with information security elements is part of the information security community of interest?

The ____ takes the lead in the interviewing and hiring process and screens personnel.

Currently the only advanced technical security certifications are offered by ____.

Which of the following job titles with information security elements is part of the general business community of interest?

Which of the following is a responsibility of an information security department manager?

The ____ program offers a wide array of certification tracks and requires applicants to complete a written practical assignment that tests the application of skills and knowledge.

The ____ works with others who periodically run vulnerability identification software packages.

A common job title for a security technician in an organization is ____.

The ____ is considered the most prestigious certification for security managers and CISOs.

A security technician usually reports to a who in turn reports to a(n) .