MCQ 13. (Choose two options) Post Incident Analysis (PIA) is construction of an incident to assess ______ and ______.

chain of event that took place, the methods used to control the incident

Perform Quantitative Risk Analysis

MCQ-12. Which of the following THREE (3) sectors are NOT Critical Information Infrastructure (CII)?

Pharmaceutical, Oil & Gas, Manufacturing

MCQ-11. Which of the following scenario is NOT an offence under the Computer Misuse Act (CMA)?

Staff access his colleague payslip which was wrongly sent to him via email

MCQ-03: Which is NOT a benefit of performing data classification?

Ensures logging for all access to the data

Feedback that just username and password are not adequate

MCQ-05. Which of the following are duties of the owner of a CII’s computer system?

Carry out regular cybersecurity risk assessment of the CII

studbud

C376 Revision

13 termsStudBud Administration72 plays

test

Flashcards13 cardsFPractice quizPHost liveL

Questions 13

Answers

1
MCQ 13. (Choose two options) Post Incident Analysis (PIA) is construction of an incident to assess ______ and ______.
hahaha
reduction of the impact of a disaster
continuation of critical business functions
chain of event that took place
policies, procedures, and processes on the potentially disruptive event
the methods used to control the incident
2
MCQ-09
Cold site
Warm site
Reciprocal site
Hot site
3
MCQ-07
Perform Quantitative Risk Analysis
Perform identification of risks
Perform Qualitative Risk Analysis
Plan Risk Responses Analysis
4
MCQ-12. Which of the following THREE (3) sectors are NOT Critical Information Infrastructure (CII)?
Water
Healthcare
Pharmaceutical
Oil & Gas
Manufacturing
Land transport
5
MCQ-11. Which of the following scenario is NOT an offence under the Computer Misuse Act (CMA)?
Police Officer without authorisation check his friend criminal records
IT support deleted an error log for the mistake he had committed
Staff access his colleague payslip which was wrongly sent to him via email
Husband accessing his wife’s office network while her laptop was unattended
6
MCQ-01
Retention Limitation Obligation
Transfer Limitation Obligation
Access and Correction Obligation
Accountability Obligation
7
MCQ-04
Transfer the risk
Avoid the risk
Mitigate the risk
Accept the risk
8
MCQ-03: Which is NOT a benefit of performing data classification?
Reduce risk and cost of over- or under-protecting information resources
Defines level of access controls
Ensures logging for all access to the data
Identifies the personnel who should have access
9
MCQ-08
Full interruption
Table-top
Component
Parallel
10
MCQ-02
Feedback that just username and password are not adequate
Recommend to for minimum 8 characters password length
Commend that username and password are sufficient
Gather more information about the customers web portal implementation
11
MCQ-06
20%
1%
10%
50%
12
MCQ-05. Which of the following are duties of the owner of a CII’s computer system?
Ask Commissioner for approval to purchase servers for CII
Carry out regular cybersecurity risk assessment of the CII
Carry out cybersecurity exercises together with the Commissioner
Carry out audits of the CII at the end of the 5 years only
13
MCQ-10. Who should NOT be writing and maintaining the Business Continuity Plan (BCP)?
Customer Service Manager
Building management vendor
Board of Director
Human Resource Manager

C376 Revision Flashcards | StudBud