Which type of security policy might prescribe the need for information security and may delegate the creation and management of the program to a role within the IT department?
参考答案(由小熊题库网聘请的专业题库老师提供的解答)
请点击↑↑↑ 查看官方参考答案 按钮
习题解析
请点击 查看官方参考答案 按钮
您可能感兴趣的题目
1 .Which of the following is true regarding Public Key Infrastructure (PKI)?
A PKI includes a "tree of trust" that's checked each time a certificate is presented as proof of one's identity. B PKI refers to the system and processes used to issue and manage asymmetric keys and digital certificates. C PKI assumes asymmetric encryption to create legally-binding electronic docume...
2 .Which of the following is not a true statement of user access?
A User accounts are often the first target of a hacker who has gained access to an organization's network. B Involvement of an Information Security Officer may depend upon the level of security granted to an account. C Human Resources and Information Technology should coordinate to monitor changes i...
3 .Which of the following is not considered a security policy supporting document?
A Regulations. B Corporate culture. C Standard and baselines. D Procedures.
4 .When a client's accounts payable computer system was relocated, the administrator provided support through a dial-up connection to a server. Subsequently, the administrator left the company. No changes were made to the accounts payable system at that time. Which of the following situations represents the greatest security risk?
A Management procedures for user accounts are not documented. B Security logs are not periodically reviewed for violations. C User passwords are not required to be in alpha-numeric format. D User accounts are not removed upon termination of employees.
5 .An entity doing business on the Internet most likely could use any of the following methods to prevent unauthorized intruders from accessing proprietary information, except:
A Batch processing. B Digital certificates. C Data encryption. D Password management.
7 .Kinney Corporation operates parking lots throughout the U.S. and Canada. Its computer systems are run at a data center in a newly redeveloped area of the South Bronx. On all of its application systems, Kinney uses program modification control software. Which of the following statements is correct for such program modification control software?
A Program change control software normally includes a software change management tool and a change request tracking tool. B Program modification controls are controls over the modification of programs being used in production applications. C Program modification controls include both controls that a...
8 .Which of the following statements is correct concerning the security of messages in an electronic data interchange (EDI) system?
A When the confidentiality of data is the primary risk, message authentication is the preferred control rather than encryption. B Message authentication in EDI systems performs the same function as segregation of duties in other information systems. C Encryption performed by physically secure hardwa...
9 .A company began issuing handheld devices to key executives. Each of the following factors is a reason for requiring changes to the security policy, except:
A Storage of sensitive data. B Vulnerability of the device. C Convenience of the device. D Portability of the device.
10 .Accountants often access the website for the American Institute of Certified Public Accountants and order publications from that organization. As part of that process, they provide their name and address and a password establishing their identity and provide credit or debit card information to pay for goods purchased. Use of the Internet to effect purchases of this type is called:
A Electronic Data Interchange (EDI). B E-Commerce. C Enterprise Resource Planning (ERP). D E-Mail.
