Information Security Management
Final Exam Questions
Course Introduction
Information Security Management is a comprehensive course that explores the principles, frameworks, and strategies for protecting information assets within organizations. It covers risk assessment, security policies, governance structures, regulatory compliance, and the implementation of technical and administrative controls to safeguard data. Students will learn about emerging threats, incident response, business continuity planning, and the role of human behavior in maintaining a secure environment. The course equips learners with the knowledge to develop, implement, and manage security programs that align with organizational objectives and regulatory requirements.
Recommended Textbook
Principles of Incident Response and Disaster Recovery 1st Edition by Michael E. Whitman
Available Study Resources on Quizplus
11 Chapters
549 Verified Questions
549 Flashcards
Source URL: https://quizplus.com/study-set/2243 Page 2
Chapter 1: Contingency Planning Within Information Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44623
Sample Questions
Q1) What are the subordinate functions of contingency planning?
Answer: Contingency planning involves four subordinate functions:
Business impact assessment
Incident response planning
Disaster recovery planning
Business continuity planning
Q2) Includes trade secrets,copyrights,trademarks,and patents.
A)Threat agent
B)Intellectual property
C)Hacker
D)Computer viruses
E)Trojan
F)Risk management
G)Likelihood
H)Residual risk
I)Standards
Answer: B
Q3) ____________________ is the process of applying controls to reduce the risks to an organization's data and information systems.
Answer: Risk control
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Planning for Organizational Readiness
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44624
Sample Questions
Q1) The ____ job functions and organizational roles focus on protecting the organization's information systems and stored information from attacks.
A)information technology management and professionals
B)organizational management and professionals
C)information security management and professionals
D)human resource management and professional
Answer: C
Q2) There are three identified communities of interest that have roles and responsibilities in information security.What are the roles fulfilled by each community of interest?
Answer: The roles that are fulfilled by each community of interest are as follows:
1.Managers and practitioners in the field of information security
2.Managers and practitioners in the field of information technology
3.Managers and professionals from the general management of the organizations
Q3) The use of antiquated or outdated technologies is an example of ____________________ obsolescence.
Answer: technological
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Incidence Response: Preparation, Organization, and Prevention
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44625
Sample Questions
Q1) Which of the following is a security quality management service?
A)Announcements
B)Risk analysis
C)Incident handling
D)Alerts and warnings
Answer: B
Q2) Responsible for handling incidents for a particular logical or physical segment of the organization.
A)Distributed incident response teams
B)Teamwork skills
C)Education and awareness
D)IR plan
E)After-action review
F)Full-interruption testing
G)Catalyst
H)Blackhole
I)Semtex
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Incident Response: Detection and Decision Making
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/44626
Sample Questions
Q1) A ____ is a high-interaction honeypot designed to capture extensive information on threats.
A)DNS cache
B)honeypot Farm
C)DNS farm
D)network-based IDS
Q2) A ____ is a type of IDS that is similar to the NIDS,reviews the log files generated by servers,network devices,and even other IDSs.
A)honeypot
B)alarm cluster
C)log file monitor
D)DNS cache
Q3) ____ is an ongoing activity from alarm events that are accurate and noteworthy but not necessarily significant as potentially successful attacks.
A)Alarm compaction
B)Cache poisoning
C)Noise
D)Alarm Clustering
Q4) What are the advantages and disadvantages of NIDS?
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Incidence Response: Reaction, Recovery, and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44627
Sample Questions
Q1) A(n)____ has the first person call certain other people on the roster,who in turn call other people,and so on.
A)sequential roster
B)hierarchical roster
C)alert roster
D)alert message
Q2) Rehearsals that closely match reality are called ____.
A)virtual reality
B)computer games
C)forensics
D)war games
Q3) Everyone should know how to handle an incident,not just the CISO and systems administrators.
A)True
B)False
Q4) The ____________________ entails a detailed examination of the events that occurred from first detection to final recovery.
Q5) What are the steps involved in analyzing evidentiary material?
Q6) Discuss five key steps in the Apprehend and Prosecute reaction strategy.
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Contingency Strategies for Business
Resumption Planning
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44628
Sample Questions
Q1) The contractual documents guaranteeing certain minimum levels of service provided by vendors.
A)RAID level 2
B)Remote journaling
C)NAS
D)Cold site
E)Mutual agreement
F)Service agreement
G)BC plan
H)Incremental backup
I)Differential backup
Q2) ____ is commonly a single device or server that attaches to a network,and uses common communications methods,such as Windows file sharing,NFS,CIFS,HTTP directories,or FTP,to provide an online storage environment.
A)An electronic vault
B)Network-Attached Storage
C)TCP/IP
D)A hot site
Q3) What are the advantages and disadvantages of the Grandfather-Father-Son rotation method?
Page 8
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Disaster Recovery: Preparation and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44629
Sample Questions
Q1) List five practices for Web site contingency planning.
Q2) ____ may be caused by earthquakes,floods,storm winds,tornadoes,or mud flows.
A)Slow onset disasters
B)Communication disasters
C)Rapid onset disasters
D)Data disasters
Q3) List five strategies that should be considered for distributed systems.
Q4) Web site ____ solutions should ensure the reliability and availability of the Web site and its resources.
A)security
B)contingency
C)maintenance
D)cache
Q5) Before returning to routine duties,the IR team must also conduct a(n)____.
A)chain of custody
B)after-action review
C)war game
D)Alarm Compaction
To view all questions and flashcards with answers, click on the resource link above. Page 9
Q6) List five practices that should be considered when addressing server vulnerabilities.
Chapter 8: Disaster Recovery: Operation and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44630
Sample Questions
Q1) ____ is a set of focused steps that deal primarily with the safety and state of the people from the organization who are involved in the disaster.
A)War gaming
B)Business continuity
C)Crisis management
D)Application recovery
Q2) When implementing the procedures contained in the disaster recovery plan,how should the recovery efforts be prioritized?
Q3) Commonly tested at least quarterly.
A)Storage recovery team
B)Vendor relationships
C)Testing
D)Alert roster
E)Sequential roster
F)Recovery phase
G)Resumption phase
H)Restoration phase
I)Data-management practices
Q4) What are some of the key points that the CP team must build into the DR plan?
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Business Continuity Preparation and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44631
Sample Questions
Q1) The ____ is the point in the past to which the recovered applications and data at the alternate infrastructure will be restored.
A)recovery point objective
B)relocation point objective
C)simulation point objective
D)warm site objective
Q2) The ____ is the group responsible for initiating the occupation of the alternate facility.
A)advance party
B)disaster recovery team
C)applications development team
D)forensic team
Q3) What are the disadvantages of a time-share?
Q4) It requires several hours,perhaps days,to make a warm site fully functional.
A)True
B)False
Q5) Discuss five tips for effective BC planning.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Q6) What are the responsibilities of the applications recovery team,the data management team,and the logistics team?
Chapter 10: Business Continuity Operations and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44632
Sample Questions
Q1) With respect to the continuity planning process,define prioritization and discuss its importance.
Q2) What are the requirements for the CBCP certification?
Q3) Inevitably pays off in efficiency of the operation once the business continuity plan is implemented.
A)Trigger point
B)Preparation undertaken by an organization
C)Network recovery team
D)Security
E)Insurance
F)BC plan
G)BC review
H)Information systems security control
I)Plan
Q4) The best time to develop the business continuity plan is while activating the critical business functions in response to a disaster.
A)True
B)False
Q5) What are some of the options available for BC training?
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Crisis Management and Human Factors
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44633
Sample Questions
Q1) A psychiatric disorder that can occur following the experience or witnessing of life-threatening events such as military combat,natural disasters,terrorist incidents,serious accidents,or violent personal assaults like rape.
A)Crisis management team
B)Head-counts
C)Critical success factors
D)The plan
E)First-level priority objectives
F)Alert roster tests
G)Tabletop exercise
H)PTSD
I)EAPs
Q2) ____ is the process of ensuring that every employee is trained to perform at least part of the job of another employee.
A)Job rotation
B)Task rotation
C)Computer training
D)Cross-training
Q3) List four typical causes of a crisis.
To view all questions and flashcards with answers, click on the resource link above.
Page 13