Security+ - TestOut - Modules 13-14

How often should change-control management be implemented?

Which term identifies the process of reviewing log files for suspicious activity and threshold compliance?

Which type of control makes use of policies, DPRs, and BCPs?

When should a hardware device be replaced in order to minimize downtime?

A broken water pipe that floods the reception area would be considered which type of threat?

Which is defined as a contract that describes the business parameters a provider bestows to its client?

Which of the following BEST describes phishing?

Which of the following would you do to help protect against phishing?

A file server with data is consider which of the following asset types?

Which of the following data destruction techniques uses a punch press or hammer system to crush a hard disk?

What is a service level agreement (SLA)?

Which type of control is used to discourage malicious actors from attempting to breach a network?

Change control should be used to oversee and manage changes over which aspect of an organization?

Which of the following frameworks introduced the first cloud-centric individual certification?

Which of the following government acts protects medical records and personal health information?

Which type of audit is performed by either a consultant or an auditing firm employee?

Which of the following is true concerning internal audits?

HIPAA is a set of federal regulations that define security guidelines. What do HIPAA guidelines protect?

When analyzing assets, which analysis method assigns financial values to assets?

A recreation of historical events is made possible through which of the following?

Auditing type verifies that systems are utilized appropriately, in accordance with written organizational policies

Which of the following laws was designed to protect a child's information on the internet?

Which malicious activity can be described as numerous unsolicited email messages sent to a wide range of victims?

What is the average number of times that a specific risk is likely to be realized in a single year?

Which of the following BEST describes compensating controls?

Which of the following is an example of a preventative control type?

Which of the following standards relates to the use of credit cards?

Which of the following BEST describes an email security gateway?

When you inform an employee that he or she is being terminated, which of the following is the most important activity?

In a high-security environment, which is the most important concern when removable media is no longer needed?