Security Policies and Procedures
Exam Questions
Course Introduction
This course provides a comprehensive exploration of the frameworks, principles, and methodologies necessary to develop, implement, and manage effective security policies and procedures within an organization. Students will examine the purpose and components of security policies, learning how these documents guide organizational behavior, define accepted practices, and support compliance with legal and regulatory requirements. Through case studies and practical exercises, participants will design policy documents, analyze procedural workflows, and assess the impacts of policy enforcement on risk management, incident response, and organizational culture. Emphasis is placed on aligning security policies with business objectives and adapting procedures to evolving threat landscapes.
Recommended Textbook
Corporate Computer Security 4th Edition by Randy J. Boyle
Available Study Resources on Quizplus 11 Chapters
1198 Verified Questions
1198 Flashcards
Source URL: https://quizplus.com/study-set/1400
Page 2
Chapter 1: The Threat Environment
Available Study Resources on Quizplus for this Chatper
103 Verified Questions
103 Flashcards
Source URL: https://quizplus.com/quiz/27878
Sample Questions
Q1) Money mules transfer stolen money for criminals and take a small percentage for themselves.
A)True
B)False
Answer: True
Q2) Downloading pornography can lead to sexual harassment lawsuits.
A)True
B)False
Answer: True
Q3) Confidentiality means that attackers cannot change or destroy information.
A)True
B)False
Answer: False
Q4) Terrorists can use IT to ________.
A) destroy utilities
B) finance their terrorism
C) Both A and B
D) Neither A nor B
Answer: C
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Planning and Policy
Available Study Resources on Quizplus for this Chatper
124 Verified Questions
124 Flashcards
Source URL: https://quizplus.com/quiz/27880
Sample Questions
Q1) ________ specifically addresses data protection requirements at financial institutions.
A) GLBA
B) HIPAA
C) The Revised SEC Act
D) Sarbanes-Oxley
Answer: A
Q2) ________ are descriptions of what the best firms in the industry are doing about security.
A) Best practices
B) Recommended practices
C) Both A and B
D) Neither A nor B
Answer: A
Q3) Which companies do PCI-DSS affect?
A) E-commerce firms
B) Medical firms
C) Government organizations
D) Companies that accept credit card payments
Answer: D
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Cryptography
Available Study Resources on Quizplus for this Chatper
122 Verified Questions
122 Flashcards
Source URL: https://quizplus.com/quiz/27881
Sample Questions
Q1) In cryptographic systems, keying takes place during the second handshaking stage.
A)True
B)False
Answer: False
Q2) ________ occurs when companies believe they have good security because they are using proprietary ciphers that hackers do not know.
A) Security through obscurity
B) Weakest link ignorance
C) Reasonable protection
D) Hidden security
Answer: A
Q3) In public key encryption for authentication, the verifier decrypts the ciphertext with the verifier's public key.
A)True
B)False
Answer: False
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Secure Networks
Available Study Resources on Quizplus for this Chatper
119 Verified Questions
119 Flashcards
Source URL: https://quizplus.com/quiz/27882
Sample Questions
Q1) Wireless 802.11 networks generally have a range of ________.
A) 5 to 10 meters
B) 10 to 30 meters
C) 15 to 45 meters
D) None of the above
Q2) DoS attacks can cause harm by ________.
A) stopping a critical service
B) slowly degrading services over a period of time
C) Both A and B
D) Neither A nor B
Q3) "Death of the perimeter" is a phrase used by network administrators to convey that creating a 100% secure network is impossible.
A)True
B)False
Q4) Eavesdropping usually is more of a concern for ________ LANs than for ________ LANs.
A) wired, wireless
B) wireless, wired
C) about an equal concern for wired and wireless LANs
D) None of the above
Page 6
To view all questions and flashcards with answers, click on the resource link above.
Chapter 5: Access Control
Available Study Resources on Quizplus for this Chatper
124 Verified Questions
124 Flashcards
Source URL: https://quizplus.com/quiz/27883
Sample Questions
Q1) Directory servers can hold information about ________.
A) people
B) computers
C) Both A and B
D) Neither A nor B
Q2) ________ is the process of assessing the identity of each individual claiming to have permission to use a resource.
A) Authorizations
B) Authentication
C) Both A and B
D) Neither A nor B
Q3) Which of the following is not one of the devices in RADIUS central authentication?
A) The supplicant
B) The verifier
C) The authenticator
D) The RADIUS central authentication server
Q4) All unattended exits should be locked to bar exit.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Firewalls
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27884
Sample Questions
Q1) If a firewall receives a suspicious packet, the firewall will ________.
A) log the packet
B) drop the packet
C) Both A and B
D) Neither A nor B
Q2) NAT is able to stop ________.
A) scanning probes
B) sniffers from learning anything about the internal IP address of internal hosts
C) Both A and B
D) Neither A nor B
Q3) IDSs need to filter individual packets rather than packet streams.
A)True
B)False
Q4) Attacks other than application level attacks usually fail to get through SPI firewalls.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Host Hardening
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27885
Sample Questions
Q1) To get to the super user account in UNIX, the administrator can use the RunAs command.
A)True
B)False
Q2) ________ is a family of operating systems that share interoperability at the kernel level.
A) UNIX
B) LINUX
C) Both A and B
D) Neither A nor B
Q3) ________ can greatly reduce patching costs.
A) Vulnerability management servers
B) Manual downloads
C) Patch management servers
D) All of the above
Q4) A specific distribution of UNIX comes with multiple user interfaces.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Application Security
Available Study Resources on Quizplus for this Chatper
100 Verified Questions
100 Flashcards
Source URL: https://quizplus.com/quiz/27886
Sample Questions
Q1) JavaScript is a scripted form of Java.
A)True
B)False
Q2) If NAT changes the Layer 3 IP destination addresses, the protocol will still work properly.
A)True
B)False
Q3) Users usually must click on malicious links in order to execute them.
A)True
B)False
Q4) Experts advise firms to turn on most or all applications and then harden them.
A)True
B)False
Q5) Testers have permissions on the ________.
A) development server
B) testing server
C) production server
D) Both A and B
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Data Protection
Available Study Resources on Quizplus for this Chatper
108 Verified Questions
108 Flashcards
Source URL: https://quizplus.com/quiz/27887
Sample Questions
Q1) In relational database, an attribute is the same as a tuple or record.
A)True
B)False
Q2) Full backups are ________.
A) performed on all files and directories
B) slow
C) typically done weekly
D) All of the above
Q3) Backing up data to a second hard drive on a computer is more expensive than backup onto to magnetic tape.
A)True
B)False
Q4) Incremental and full backups must be restored in the order in which they were created.
A)True
B)False
Q5) Most companies conduct full backups on a daily basis.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Incident and Disaster Response
Available Study Resources on Quizplus for this Chatper
107 Verified Questions
107 Flashcards
Source URL: https://quizplus.com/quiz/27879
Sample Questions
Q1) If a defendant has already been prosecuted in a criminal trial, he or she cannot later be tried in a civil trial.
A)True
B)False
Q2) A walkthrough is also called a ________.
A) table-top exercise
B) live test
C) Both A and B
D) Neither A nor B
Q3) A(n) ________ is a professional who is trained to collect and evaluate computer evidence in ways that are likely to be admissible in court.
A) expert witness
B) computer forensics expert
C) Both A and B
D) Neither A nor B
Q4) In a crisis, rigid adherence to plans and processes for recovery is critical.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above.
Page 12
Chapter 11: Module A: Networking Concepts
Available Study Resources on Quizplus for this Chatper
91 Verified Questions
91 Flashcards
Source URL: https://quizplus.com/quiz/27888
Sample Questions
Q1) The organization that funded the creation of the Internet is ________.
A) the IETF
B) ISO
C) DARPA
D) the National Science Foundation
Q2) Ping sends ________ messages and receives replies in the same protocol.
A) DNS
B) DHCP
C) ICMP
D) All of the above.
Q3) An abrupt TCP close takes ________ segments.
A) 2
B) 3
C) 4
D) None of the above.
Q4) If a router receives a packet with a TTL value of 1, what will it do?
A) Increase the TTL value to 2.
B) Keep the TTL value at 1.
C) Drop the packet.
D) None of the above.
To view all questions and flashcards with answers, click on the resource link above. Page 13