stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CIS2218 Module 7 Flashcards | StudBud
Explore
/
CIS2218 Module 7
CIS2218 Module 7
20 terms
·
StudBud Administration
·
7 plays
Imported from external platform
Flashcards
20 cards
F
Practice quiz
P
Host live
L
Questions
20
Answers
1
The requirement that all critical tasks can be performed by multiple employees.
Task rotation
Divide and Conquer
Separation of Duties
Two person Control
2
The information security function can be placed within the
All of the Above
insurance and risk management function
administrative services function
legal department
3
Many large organizations place the information security department within the
Physical Security Department
Cybersecurity Department
Information Technology Department
Human Resources Department
4
The principle that requires significant tasks to be split up so that more than one employee is required to complete them
Separation of Duties
Two person Control
Task rotation
Divide and Conquer
5
When the CISO is responsible for physical security or report to a security manager the position is referred to as
CSO
CPSO
CSA
CIO
6
The data access principle that ensures no unnecessary access to data exist
Task rotation
Separation of Duties
Need to Know
Least Privilege
7
Cybersecurity Analyst+ is an intermediate certification with both knowledge-based and performance-based assessment from
EC Council
CompTIA
SANS
ISACA
8
The organization of a task or process so that at least two employees must work together to complete it.
Two-person Control
Least Privilege
Task Rotation
Separation of Duties
9
Which of the following certifications requires the applicant to first complete a written practical assignment
CGEIT
GIAC
Security +
CISSP
10
The principle of limiting users’ access privileges to the specific information required to perform their assigned tasks.
Two person Control
Separation of Duties
Task rotation
Need to Know
11
The objectives identified by the CISO are accomplished the
Security Technician
Security Analyst
Security Manager
Security Guard
12
Interview done upon separation to remind the employee of contractual obligations, such as nondisclosure agreements
Exit
On boarding
termination
Promotion
13
The position of security analyst can be an entry-level position.
False
True
14
When should an organization conduct a behavioral feasibility study on a new program before it is
Introduced
implemented
considered
planned
15
Which of the following information security roles does the daily operation of the information security program
security analyst
Security Manager
CSO
CISO
16
ISACA cert that contains many information security systems’ auditing components but is not a security cert
CISM
CRISC
CISA
CGEIT
17
In Friendly Departure it is more challenging to maintain control over employee's access and information usage.
True
False
18
"Administrators" provide the policies, guidelines, and standards in the Schwartz classification
True
False
19
SSCP certification is more applicable to
Security Manager
Security Guard
Security Analyst
Security Technician
20
CompTIA offers a vendor-specific certifications
False
True