Which of the following is not considered a security policy supporting document?
参考答案(由小熊题库网聘请的专业题库老师提供的解答)
请点击↑↑↑ 查看官方参考答案 按钮
习题解析
请点击 查看官方参考答案 按钮
您可能感兴趣的题目
1 .User accounts are the first target of a hacker who has gained access to an organization's network. Which of the following is a true statement when maintaining user access accounts?
A There must be a mechanism to disable accounts should relations end between the organization and any of its employees. B No privileges should be granted until authorization is completed by Human Resources and the IT Security Officer. C All of the answer choices are correct. D It is important to hav...
2 .Passwords are designed to protect access to secure sites and information. Which of the following is incorrect?
A Passwords are generally more effective when they are longer. B Passwords should be changed every 90 days. C Alternating between a minimum of three to five passwords provides optimal protection. D Passwords are generally more effective when they are complex passwords (e.g., combinations of: upperca...
3 .HideIt Company uses data encryption for certain key data in its application systems. Which of the following statements is correct with respect to data encryption?
A In asymmetric encryption, a public key is used to encrypt messages. The same public key is transmitted along with the message and is used to decrypt the message at the other end. B Data encryption is based on the concept of keys. With data encryption, the sophistication of the encryption algorithm...
4 .Which of the following is true regarding Public Key Infrastructure (PKI)?
A PKI includes a "tree of trust" that's checked each time a certificate is presented as proof of one's identity. B PKI refers to the system and processes used to issue and manage asymmetric keys and digital certificates. C PKI assumes asymmetric encryption to create legally-binding electronic docume...
5 .Which of the following is not a true statement of user access?
A User accounts are often the first target of a hacker who has gained access to an organization's network. B Involvement of an Information Security Officer may depend upon the level of security granted to an account. C Human Resources and Information Technology should coordinate to monitor changes i...
7 .When a client's accounts payable computer system was relocated, the administrator provided support through a dial-up connection to a server. Subsequently, the administrator left the company. No changes were made to the accounts payable system at that time. Which of the following situations represents the greatest security risk?
A Management procedures for user accounts are not documented. B Security logs are not periodically reviewed for violations. C User passwords are not required to be in alpha-numeric format. D User accounts are not removed upon termination of employees.
8 .An entity doing business on the Internet most likely could use any of the following methods to prevent unauthorized intruders from accessing proprietary information, except:
A Batch processing. B Digital certificates. C Data encryption. D Password management.
9 .Which type of security policy might prescribe the need for information security and may delegate the creation and management of the program to a role within the IT department?
A Issue-specific policy. B System-specific policy. C Program-level policy. D Program-framework policy.
10 .Kinney Corporation operates parking lots throughout the U.S. and Canada. Its computer systems are run at a data center in a newly redeveloped area of the South Bronx. On all of its application systems, Kinney uses program modification control software. Which of the following statements is correct for such program modification control software?
A Program change control software normally includes a software change management tool and a change request tracking tool. B Program modification controls are controls over the modification of programs being used in production applications. C Program modification controls include both controls that a...
