stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Chapter 9 Flashcards | StudBud
Explore
/
Chapter 9
Chapter 9
10 terms
·
StudBud Administration
·
35 plays
Imported from external platform
Flashcards
10 cards
F
Practice quiz
P
Host live
L
Questions
10
Answers
1
Which of the following is not part of the criteria to classify information/data?
Format
Criticality
Value
Sensitivity
2
Step-by-step instructions to setup a remote VPN connection is an example of a:
Guideline
Procedure
Standard
Policy
3
"Therefore, strict adherence to this Code is a condition of certification" refers to
The IEEE code of ethics
The Java Certified Programmer sample code evaluation
The CISSP code of ethics
The NYPD code of conduct
4
The main reason to keep a hardware inventory is so that old servers can be sold back in the used equipment market
True
False
5
Which of the following CISO functions leans more towards the business side than the technical side?
Protect, Defend, Prevent
Respond, Recover, Sustain
Govern, Manage Risk, Educate
Monitor, Hunt, Detect
6
Which of the following is NOT a best practice for secure application development?
Check user authentication to the application
Validate all inputs
Handle errors and exceptions consistently
Use default credentials for administrative accounts
7
Why should cybersecurity professionals be involved in configuration management?
To reduce hardware costs by optimizing configurations
To ensure configuration changes don't cause unintended issues for security
To increase the speed of software deployment
To automate routine administrative tasks
8
Which of the following is not a commonly used principle to prevent employee fraud and conflicts of interest?
Team building exercises
Separation of duties
Job rotation
Mandatory vacations
9
Which of the following is a key step in the change control process?
Deploying changes in production to see if they work
Submitting a change request to obtain approval
Modifying system settings as soon as needed
Assess the impact of the proposed changes after approving them
10
Continued dependency on the provider is an advantage of outsourcing security services
True
False