Information Security Management
Final Test Solutions
Course Introduction
Information Security Management focuses on the strategies, policies, and procedures involved in protecting an organizations information assets from threats and vulnerabilities. The course covers key principles such as risk assessment, security policies, access control, compliance with laws and regulations, and incident response. Students learn how to identify potential security risks, implement technological and administrative controls, and develop comprehensive security programs tailored to organizational needs. Through case studies and practical exercises, learners gain insights into current challenges in cybersecurity, best practices for information assurance, and the role of management in fostering a security-conscious culture.
Recommended Textbook
Principles of Incident Response and Disaster Recovery 1st Edition by Michael E. Whitman
Available Study Resources on Quizplus
11 Chapters
549 Verified Questions
549 Flashcards
Source URL: https://quizplus.com/study-set/2243 Page 2
Chapter 1: Contingency Planning Within Information Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44623
Sample Questions
Q1) What is the difference between transference and mitigation?
Answer: Transference is the control approach that attempts to shift the risk to other assets,other processes,or other organizations.Mitigation is the control approach that attempts to reduce the impact caused by the exploitation of vulnerability through planning and preparation.
Q2) The ____ has been the industry standard for computer security since the development of the mainframe.
A)disaster recovery plan
B)C.I.A.triangle
C)strategic plan
D)asset classification
Answer: B
Q3) Information has the characteristic of ____________________ when disclosure or exposure to unauthorized individuals or systems is prevented.
Answer: confidentiality
Q4) ____________________ is the process of applying controls to reduce the risks to an organization's data and information systems.
Answer: Risk control
Page 3
To view all questions and flashcards with answers, click on the resource link above.
Chapter 2: Planning for Organizational Readiness
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44624
Sample Questions
Q1) Unauthorized installation of software in violation of its licensing.
A)BIA
B)Attack scenarios
C)Online questionnaire
D)Recovery time objective
E)Use case diagram
F)System log
G)Insurance
H)Act of human error
I)Compromises to intellectual property
Answer: I
Q2) Attacks with a remote chance of occurrence receive more attention than those that occur frequently.
A)True
B)False
Answer: False
Q3) Effective contingency planning begins with effective policy.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Incidence Response: Preparation, Organization, and Prevention
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44625
Sample Questions
Q1) The performance of ____________________ services directly reduces the number of incidents in the future.
Answer: proactive
Q2) A(n)____________________ occurs when an attack (natural or human made)affects information resources and/or assets,causing actual damage or other disruptions.
Answer: incident
Q3) Which of the following is a proactive service?
A)Announcements
B)Risk analysis
C)Incident handling
D)Alerts and warnings
Answer: A
Q4) In an organization,unexpected activities occur periodically;these are referred to as ____.
A)warnings
B)events
C)after-action
D)problems
Answer: B
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Incident Response: Detection and Decision Making
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/44626
Sample Questions
Q1) What are the advantages and disadvantages of HIDS?
Q2) A widely used port scanner.
A)Intrusion detection system
B)HIDS
C)Signature-based IDS
D)Enticement
E)Entrapment
F)Alarm clustering
G)NIDS
H)Nmap
I)Scanning utility
Q3) ____ occurs when valid packets exploit poorly configured DNS servers to inject false information to corrupt the servers' answers to routine DNS queries from other systems on that network.
A)Signature matching
B)DNS cache poisoning
C)Clipping
D)Clustering
Q4) What are the steps involved in monitoring networks for signs of intrusion?
Q5) List five reasons why you would acquire and use an IDS.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Incidence Response: Reaction, Recovery, and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44627
Sample Questions
Q1) AARs are conducted with all participants in attendance.
A)True
B)False
Q2) Once an actual incident has been confirmed and properly classified,the IR team moves from the detection phase to the ____________________ phase.
Q3) ____ is the coherent application of methodical investigatory techniques to solve crime cases.
A)Forensics
B)Alarm Compaction
C)Signature matching
D)Scanning
Q4) The first and most important part of ____ is the identification and collection of evidentiary material without damage or modification of its content.
A)site policy
B)disaster recovery
C)Alarm Compaction
D)computer forensics
Q5) List five incident containment strategies.
Q6) Discuss five key steps in the Apprehend and Prosecute reaction strategy.
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Contingency Strategies for Business
Resumption Planning
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44628
Sample Questions
Q1) Designed to complete the backup in the shortest amount of elapsed time.
A)RAID level 2
B)Remote journaling
C)NAS
D)Cold site
E)Mutual agreement
F)Service agreement
G)BC plan
H)Incremental backup
I)Differential backup
Q2) The ____ method of backup uses five media sets <i>per week </i>and allows recovery of data for the previous three weeks.
A)Towers of Hanoi
B)six-tape rotation
C)Grandfather-Father-Son
D)six-day rotation
Q3) What are the disadvantages of a time-share?
Q4) A variation of mirroring is called ____________________.
Page 8
Q5) What are the advantages and disadvantages of the six-tape rotation method?
Q6) Discuss the sixteen step process of the Grandfather-Father-Son backup method.
To view all questions and flashcards with answers, click on the resource link above.
Page 9
Chapter 7: Disaster Recovery: Preparation and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44629
Sample Questions
Q1) The disaster response,like incident response,usually begins with a(n)____________________.
Q2) ____ are highly probable when infected machines are brought back online or when other infected computers that may have been offline at the time of the attack are brought back up.
A)Follow-on incidents
B)War games
C)Black bag operations
D)Blue bag operations
Q3) This group may also interface with the data management group to restore data from backups to their storage areas.
A)Disaster management team
B)Business interface team
C)Actions after
D)Network recovery team
E)Storage recovery team
F)Data management team
G)Vendor contact team.
H)Logistics team.
I)Business interface team.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 8: Disaster Recovery: Operation and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44630
Sample Questions
Q1) The ____ team is responsible for reestablishing connectivity between systems and to the Internet (if applicable).
A)applications recovery
B)system recovery
C)storage recovery
D)network recovery
Q2) ____ means making an organization ready for possible contingencies that escalate to disaster.
A)Preparation
B)Mitigation of impact
C)War gaming
D)Crisis management
Q3) ____________________ testing can come from standardization boards or consultants (for example,ISO 9000),certification or accreditation groups,or a group selected by the organization's management from a sister company.
Q4) What are some of the key points that the CP team must build into the DR plan?
Q5) What is the purpose of the disaster management team?
Q6) What is the difference between the business interface team and the logistics team?
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 9: Business Continuity Preparation and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44631
Sample Questions
Q1) Installs wireless networks in the short term to provide immediate connectivity,unless wired services can be brought online quickly.
A)Disaster recovery
B)Business continuity
C)Hot site
D)Cold site
E)Service contracts
F)Remote journaling
G)System recovery team
H)Network team
I)Logistics team
Q2) What are the responsibilities of the applications recovery team,the data management team,and the logistics team?
Q3) The ____ is the point in the past to which the recovered applications and data at the alternate infrastructure will be restored.
A)recovery point objective
B)relocation point objective
C)simulation point objective
D)warm site objective
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 10: Business Continuity Operations and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44632
Sample Questions
Q1) The ____ team works with the hardware and OS teams to get internal and external services up and running to begin supporting business functions.
A)applications recovery
B)OS
C)computer setup team
D)network recovery team
Q2) When implementing any BC strategy at an alternate site,the IT staff involved must sustain the backup strategies and practices used at the primary site.
A)True
B)False
Q3) Implementation of the _________________________ plan occurs when the organization experiences a circumstance in which it cannot reasonably expect to return to normal operations at the primary site.
Q4) The ____________________ provide valuable ideas for the improvement of the BC plan.
Q5) What is the difference between the system recovery team and the network recovery team?
Page 13
Q6) What are some of the options available for BC training?
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Crisis Management and Human Factors
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44633
Sample Questions
Q1) In a(n)______________________________ employees are given a general scenario,a sequence of several unfolding events or "injections" and asked to describe how they would respond.
Q2) A recent trend in corporate settings is to provide each employee with a disaster recovery identification card.
A)True
B)False
Q3) ____________________ is the process that enables an organization to cope with any loss of personnel with a minimum degree of disruption to the functionality of the organization.
Q4) A(n)____ is an area where individuals should gather in the event of a specific type of emergency to facilitate quick head count.
A)assembly area
B)emergency area
C)disaster area
D)gathering spot
Q5) What is the purpose of a crisis management identification card?
Q6) What are some of the expenses that may arise during or after a crisis?
Q7) What is the difference between management and leadership?
Page 14
To view all questions and flashcards with answers, click on the resource link above.