IST 1143 CH15

What is the term given to assigning and revoking privileges to objects?

What control is designed to identify any threat that has reached the system?

Which is not a type of information classification?

A security control is any device or process that is used to reduce risk.

Which formula below is the way to calculate expected $ loss over a one-year period due to risk?

3 of the 4 choices below are guides talked about in the text. Which is not?

A physical control attempts to discourage security violations before they occur.

All below are common security issues listed in the text except:

Assessing risk should include testing of technology assets to identify any vulnerabilities.

All are reasons that vulnerability testing authorization should be done EXCEPT:

What type of learner learns best through hands-on approaches?

A subject's privilege over an object should follow the principle of least privilege.

Which of the following is not a threat classification for information security risk management?

A copy of a properly configured/secured software system that can be replicated to other PCs is:

All are non-persistence tools except:

What does MTTF stand for?

What term is a function of threats, consequences of threats, and the resulting vulnerabilities?

Risk assessment involves all but which of the following?

All are types of security controls below except:

What is an asset, as far as information security is concerned?

All standard operating procedures were discussed in the text below except:

When hiring, what should be conducted to ensure a quality hire?

A collection of suggestions that should be implemented is referred to as a:

All are security policies highlighted in sections of the text except:

Which of the following refers to the start-up relationship between partners?

What major retailer was talked about in the text as a subject of a security event?

Providing security awareness and training to users is sometimes called what?

A written document stating an organization's plans to protect IT assets is called what?

What type of learner sits in the middle of class & learns best through lectures & discussions?

What does the acronym MTTR stand for?