Home Library Explore SAT

Home Library Explore SAT

Sec+ Chapter 1 Flashcards | StudBud

Explore/Sec+ Chapter 1

What's the primary control FUNCTION type of a firewall?

Which of the following standards involve information security specifically?

Sec+ Chapter 1

9 terms·StudBud Administration·61 plays

Sec+ 601

Flashcards9 cardsFPractice quizPHost liveL

Questions 9

Answers

1
Which of the following standards involve information security specifically?
NIST
ISO 27k
SSAE
ISO 31k
2
What's the primary control FUNCTION type of a firewall?
Deterrent
Technical
Managerial
Preventative
3
What's the MAIN security responsibility of an owner/director?
Overall external responsibility
A specific domain
Implementing, maintaining, and monitoring policies
Overall internal responsibility
4
What category of security control would training programs BEST fall into?
Managerial
Compensating
Technical
Operational
5
What's a cultural shift towards integration and collaboration between developers and system admins?
DevOps
SOC
CIRT
DevSecOps
6
What regulation would be most relevant to handling credit card information?
CSA
GDPR
PCI DSS
ISO 31k
7
What describes availability?
Information is accessible to those authorized
Only certain people should know certain information
Data is handled as intended
A person can't deny doing something
8
What legislation mandates risk assessments, internal controls, and audit procedures?
Sarbanes-Oxley Act (SOX)
Gramm-Leach-Bliley Act (GLBA)
Computer Security Act
Federal information Security Management Act (FISMA)
9
What does the function of 'Protect' accomplish, according to the NIST framework?
Evaluate risks and threats, develop secure policies
Develop, handle, and decommission IT assets with security at the forefront
Identify, analyze, contain, and eradicate threats
Implement cybersecurity resilience to restore systems and data