Question 1

You are a consultant and are regularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports.

Which reliability aspect of the information in your reports must you protect?

Options :

A : Availability

B : Integrity

C : Confidentiality

Answer: C

Question 2

Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

Options :

A : ISO/IEC 27001:2005

B : Intellectual Property Rights

C : ISO/IEC 27002:2005

D : Personal data protection legislation

Answer: D

Question 3

Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. What is accomplished if all other reports from this insurance office are also assigned the appropriate grading?

Options :

A : The costs for automating are easier to charge to the responsible departments.

B : A determination can be made as to which report should be printed first and which ones can wait a little longer.

C : Everyone can easily see how sensitive the reports' contents are by consulting the grading labe

D : Reports can be developed more easily and with fewer errors.

Answer: C

Question 4

What do employees need to know to report a security incident?

Options :

A : How to report an incident and to whom.

B : Whether the incident has occurred before and what was the resulting damage.

C : The measures that should have been taken to prevent the incident in the first place.

D : Who is responsible for the incident and whether it was intentional.

Answer: A

Question 5

What should be used to protect data on removable media if data confidentiality or integrity are important considerations?

Options :

A : backup on another removable medium

B : cryptographic techniques

C : a password

D : logging

Answer: B