Emmen Kap 1

Which of the following are valid risk responses? (Choose all that apply.)

Which of the following are considered removable devices or drives? (Choose all that apply.)

Which of the following would be considered appropriate security measures for a building’s external security perimeter? (Choose all that apply.)

You are traveling on business and are headed out to dinner with a client.You cannot take your laptop with you to the restaurant. What should you dowith the device? (Choose the best answer.)

The process of eliminating a risk by choosing not to engage in an action or activity describes which of the following?

You have just been promoted to Chief Security Officer for your auto partsmanufacturing business and you are trying to identify technologies that willhelp ensure the confidentiality of your proprietary manufacturingtechniques. Which of the following are technologies you could use to helpwith this endeavor? (Choose all that apply.)

The acronym CIA stands for which of the following?

You have been placed in charge of the corporate security department andyour boss has asked you to help her understand what is meant by coresecurity principles. Which of these explanations should you give to your boss?

As the Chief Security Officer for a small medical records processingcompany, you have just finished setting up the physical security for your new office. In particular, you have made sure that the parking lot isilluminated, that you have guards both at the door and performing periodic patrols, and that you have badge readers throughout the building at keylocations. You also have put biometric access technology on the data center door. In addition, you have cameras in the parking lot, at building entrances,and at the data center entrances. This type of implementation is known as:(Choose the best answer.)

What do you call the process of disabling unneeded services and ports tomake a system more secure?

... Is the characteristic of a resource that ensures thataccess is restricted to only permitted users, applications, or computer systems.

If you are deploying technologies to restrict access to a resource, youare practicing the security principle known as ...

Deploying multiple layers of security technology is called ...

An action or occurrence that could result in the breach, outage, or corruption of a system by exploiting known or unknown vulnerabilities is a(n) ...

You have just taken a new job as the Risk Manager for a medium-sized pharmaceutical company, and your first assignment is to perform aformal risk assessment. You will most likely record the results of your risk assessment in a(n) ...

A secretary at your office just got off the phone with someone who saidhe was calling from the corporate IT department. The caller had a number of questions about the secretary’s computer setup, and he aske dfor her user ID and password. In this situation, the secretary was mostlikely a victim of ...

The consistency, accuracy, and validity of data or information is called ...

You are traveling for work and decide to use a computer in the hotel business center to check your email and pay several bills. When you sitdown at the computer, you notice there is an extra connector betweenthe keyboard and the computer. You have most likely encountered a(n) ...

You are the Risk Manager for a regional bank, and you have justdeployed a new badge reader system to address an access control risk.Although your solution has mitigated the risk, there is still a smallremaining risk associated with access control. This risk is known as the ...

The larger the ... ... Of a particular environment, the greater the risk of a successful attack