ABC Corporation’s network is configured such that a user must log in individually at each server and access control. Which type of authentication is in use? A. Role-based access control B. Three-factor authentication C. Single sign-on D. Hybrid access control…
Which type of Business Continuity Plan (BCP) test involves shutting down a primary site, bringing an alternate site on-line, and moving all operations to the alternate site? A. Parallel B. Full interruption C. Checklist D. Structured walkthrough E. Simulation
Which of the following is likely in a small-business environment? A. Most small businesses employ a full-time information-technology staff. B. Resources are available as needed. C. Small businesses have security personnel on staff. D. Most employees have experience with information…
What type of document contains information on alternative business locations, IT resources, and personnel? A. End-user license agreement B. Nondisclosure agreement C. Acceptable use policy D. Security policy E. Business continuity plan
A(n) ______________________________ is a quantitative review of risks, to determine how an organization will continue to function, in the event a risk is realized. A. Monitored risk process B. Disaster-recovery plan C. Business impact analysis D. Full interruption test E.…
Internal intrusions are loosely divided into which categories? (Choose TWO.) A. Attempts by insiders to perform appropriate acts, on information assets to which they have been given rights or permissions. B. Attempts by insiders to access resources, without proper access…
A security administrator implements Secure Configuration Verification (SCV), because SCV: (Choose THREE.) A. Does not enable the administrator to monitor the configuration of remote computers. B. Can block connectivity for machines that do not comply with the organization’s security policy.…
A new U.S. Federal Information Processing Standard specifies a cryptographic algorithm. This algorithm is used by U.S. government organizations to protect sensitive, but unclassified, information. What is the name of this Standard? A. Triple DES B. Blowfish C. AES D.…
If a firewall receives traffic not explicitly permitted by its security policy, what should the firewall do? A. Nothing B. Do not log and drop the traffic. C. Log and drop the traffic. D. Log and pass the traffic. E.…
Which of the following statements about encryption’s benefits is false? Encryption can: (Choose TWO.) A. significantly reduce the chance information will be modified by unauthorized entities. B. only be used to protect data in transit. Encryption provides no protection to…