What is the greatest risk for an organization if no information security policy has been defined? A. If everyone works with the same account, it is impossible to find out who worked on what. B. Information security activities are carried…
An employee in the administrative department of Smiths Consultants Inc. finds out that the expiry date of a contract with one of the clients is earlier than the start date. What type of measure could prevent this error? A. Availability…
What sort of security does a Public Key Infrastructure (PKI) offer? A. It provides digital certificates which can be used to digitally sign documents. Such signatures irrefutably determine from whom a document was sent. B. Having a PKI shows customers…
Your company has to ensure that it meets the requirements set down in personal data protection legislation. What is the first thing you should do? A. Make the employees responsible for submitting their personal data. B. Translate the personal data…
What is a risk analysis used for? A. A risk analysis is used to express the value of information for an organization in monetary terms. B. A risk analysis is used to clarify to management their responsibilities. C. A risk…
A well executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives. What is not one of the four main objectives of a risk analysis? A. Identifying assets and their value B. Determining…
What is an example of a security incident? A. The lighting in the department no longer works. B. A member of staff loses a laptop. C. You cannot set the correct fonts in your word processing software. D. A file…
Which of the following measures is a corrective measure? A. Incorporating an Intrusion Detection System (IDS) in the design of a computer centre B. Installing a virus scanner in an information system C. Making a backup of the data that…
We can acquire and supply information in various ways. The value of the information depends on whether it is reliable. What are the reliability aspects of information? A. Availability, Information Value and Confidentiality B. Availability, Integrity and Confidentiality C. Availability,…
Which of the following measures is a preventive measure? A. Installing a logging system that enables changes in a system to be recognized B. Shutting down all internet traffic after a hacker has gained access to the company systems C.…