Organizational Security and Risk Management
Question Bank
Course Introduction
Organizational Security and Risk Management explores the foundational principles and practices necessary for protecting assets, information, and people within an organization. This course examines key concepts such as risk assessment, threat modeling, policy development, crisis management, and regulatory compliance. Students will analyze various types of risks physical, operational, cyber, and human and learn to design and implement security programs that mitigate vulnerabilities and ensure business continuity. Emphasis is placed on aligning security strategies with organizational goals, fostering a security-conscious culture, and using industry standards to inform decision-making and develop comprehensive risk management plans.
Recommended Textbook
Corporate Computer Security 4th Edition by
Randy J. Boyle
Available Study Resources on Quizplus 11 Chapters
1198 Verified Questions
1198 Flashcards
Source URL: https://quizplus.com/study-set/1400
Page 2
Chapter 1: The Threat Environment
Available Study Resources on Quizplus for this Chatper
103 Verified Questions
103 Flashcards
Source URL: https://quizplus.com/quiz/27878
Sample Questions
Q1) Attackers cannot use IP address spoofing in port scanning attack packets.
A)True
B)False
Answer: True
Q2) Most traditional external attackers were heavily motivated by ________.
A) the thrill of breaking in
B) making money through crime
C) Both A and B
D) Neither A nor B
Answer: A
Q3) Botnets usually have multiple owners over time.
A)True
B)False
Answer: True
Q4) Which of the following is a type of countermeasure?
A) Detective
B) Corrective
C) Both A and B
D) Neither A nor B
Answer: C
Page 3
To view all questions and flashcards with answers, click on the resource link above.
Chapter 2: Planning and Policy
Available Study Resources on Quizplus for this Chatper
124 Verified Questions
124 Flashcards
Source URL: https://quizplus.com/quiz/27880
Sample Questions
Q1) Informing employees that monitoring will be done is a bad idea.
A)True
B)False
Answer: False
Q2) It is mandatory for decision makers to consider guidelines.
A)True
B)False
Answer: True
Q3) The stage of the plan-protect response cycle that consumes the most time is
A) planning
B) protection
C) response
D) each of the above consumes about the same amount of time
Answer: B
Q4) Most IT security analysts recommend placing IT security functions within the IT department.
A)True
B)False
Answer: False
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Cryptography
Available Study Resources on Quizplus for this Chatper
122 Verified Questions
122 Flashcards
Source URL: https://quizplus.com/quiz/27881
Sample Questions
Q1) Packaged sets of cryptographic countermeasures for protecting data transmission are ________.
A) cryptographic standards
B) metacryptographic systems
C) cryptographic systems
D) All of the above
Answer: C
Q2) ________ ciphers move letters around within a message but characters are not substituted.
A) Transposition
B) Substitution
C) Both A and B
D) Neither A nor B
Answer: A
Q3) Which of the following measures do HMACs use?
A) Symmetric key encryption
B) Public key encryption
C) Hashing
D) All of the above
Answer: C
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Secure Networks
Available Study Resources on Quizplus for this Chatper
119 Verified Questions
119 Flashcards
Source URL: https://quizplus.com/quiz/27882
Sample Questions
Q1) An EAP message begins with an ________ message.
A) EAP request
B) EAP accept
C) EAP start
D) EAP response
Q2) The 802.1X protocol created for wired LANs can work in wireless LANs without significant modification.
A)True
B)False
Q3) RTS frames tell other wireless clients that you want to transmit for a given amount of time.
A)True
B)False
Q4) 802.11i offers strong security.
A)True
B)False
Q5) To use an access point, you must know its SSID.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Access Control
Available Study Resources on Quizplus for this Chatper
124 Verified Questions
124 Flashcards
Source URL: https://quizplus.com/quiz/27883
Sample Questions
Q1) Directory servers from different vendors are synchronized through ________.
A) LDAP
B) central authentication servers
C) AD servers
D) None of the above
Q2) In Kerberos, the ________ is sent from the Kerberos server to the supplicant.
A) ticket granting ticket
B) service ticket
C) Both A and B
D) Neither A nor B
Q3) A Microsoft domain can have multiple domain controllers.
A)True
B)False
Q4) ________ is the centralized policy based management of all information required for access to corporate systems by people, machines, programs, or other resources.
A) Directory service
B) Meta-directory service
C) Identity management
D) Meta-identity management
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Firewalls
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27884
Sample Questions
Q1) What type of filtering do IDSs do?
A) Deep packet inspection
B) SPI filtering
C) Both A and B
D) Neither A nor B
Q2) Both TCP and UDP can be used by an application .
A)True
B)False
Q3) Creating ACLs is the most time-consuming part of firewall management.
A)True
B)False
Q4) In ingress and egress filtering, an SPI firewall always considers its ACL rules when a new packet arrives that attempts to open a connection.
A)True
B)False
Q5) It is easier to create appropriate ACL rules for server host firewalls than for border firewalls.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Host Hardening
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27885
Sample Questions
Q1) To how many accounts and groups can different permissions be applied in Windows?
A) 3
B) 6
C) 100
D) almost an unlimited number
Q2) It is very important for testers to get permission before running a password cracking program on their company's computers to check for weak passwords even if such testing is in their job definitions.
A)True
B)False
Q3) To get to the super user account in UNIX, the administrator should use the ________ command.
A) RunAs
B) su
C) rlogin
D) None of the above
Q4) CLI shells use more system resources than GUIs.
A)True
B)False
Page 9
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: Application Security
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27886
Sample Questions
Q1) H.323 uses Ports 1719 and 1720
A)True
B)False
Q2) On a compromised computer, if you mistype the name of a URL, you may be taken to a malicious website even if you set your browser security to high.
A)True
B)False
Q3) Compared to full programming languages, scripts are ________ in what they can do.
A) more limited
B) less limited
C) about as limited (but easier to use)
D) not limited at all
Q4) If NAT changes the Layer 3 IP destination addresses, the protocol will still work properly.
A)True
B)False
Q5) NAT adds latency to VoIP packets.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Data Protection
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/27887
Sample Questions
Q1) DRM usually is difficult to enforce.
A)True
B)False
Q2) Incremental and full backups may be restored out of order in which they were created.
A)True
B)False
Q3) Retaining data can be ________.
A) expensive
B) susceptible to discovery of damaging information
C) A only
D) Both A and B
Q4) Wiped data can be read.
A)True
B)False
Q5) Shredding is the best approach to destroying media.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Incident and Disaster Response
Available Study Resources on Quizplus for this Chatper
107 Verified Questions
107 Flashcards
Source URL: https://quizplus.com/quiz/27879
Sample Questions
Q1) Plaintiffs initiate legal proceedings in ________ cases.
A) civil
B) criminal
C) Both A and B
D) Neither A nor B
Q2) In an IDS, ________ means that the IDS should report all attacks events and report as few false alarms as possible.
A) precision
B) event correlation
C) Both A and B
D) Neither A nor B
Q3) ________ punishments may result in fines.
A) Criminal
B) Civil
C) Both A and B
D) Neither A nor B
Q4) Total software reinstallation effectively addresses data loss.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Module A: Networking Concepts
Available Study Resources on Quizplus for this Chatper
91 Verified Questions
91 Flashcards
Source URL: https://quizplus.com/quiz/27888
Sample Questions
Q1) TCP/IP's internet layer supervisory protocol is ________.
A) DNS
B) DHCP
C) ICMP
D) All of the above.
Q2) A one-bit field is called a ________ field.
A) binary
B) singlet
C) TCP
D) flag
Q3) Client usually get ________.
A) static IP addresses
B) ephemeral IP addresses
C) dynamic IP addresses
D) None of the above.
Q4) Intercepting wireless LAN transmissions is difficult.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above.
Page 13