SEC360

Note: The text in the right column are the post exam sample answers used to help you compare your answers with. 1 (TCO 1) Security policy contains three kinds of rules as policy clauses. What are they? Preventive, detective, and responsive Prohibitive, permissive, and mandatory Administrative, technical, and physical Management, technical, and operational Roles, responsibilities, and exemptions (Lecture Week 1, page 70 and Appendix C in the text) Controls are implemented using administ...

Question 1. 1. (TCO 1) Information security is a process that protects all of the following except _____. (Points : 5) personal privacy payroll integrity service availability readiness hardware integrity answer:- readiness Question 2. 2. (TCO 2) The _____ of the 17 NIST control _____ can be placed into the 10 IISSCC _____ comprising the common body of knowledge for information security. (Points : 5) technologies, domains, families controls, families, domains domains, families, techno...

Question 1 0 / 5 pts (TCO 1) Which of the following should not be the basis for security policy? Legislation Corporate directives Corporate needs Vendor documentation Situation awareness reporting Lecture, pages 60-70 in the text Question 2 5 / 5 pts (TCO 2) NIST 800-53 is available in several revisions. Which revision is the most current? Revision 1 Revision 5 Revision IV Revision 2 None of the above. (Lecture, Chapter 3 in the text) There are many controls that are grouped int...

SEC 360 Week 8 Final Question 1 5 pts (TCO 1) Which of the following should not be the basis for security policy? Legislation Corporate directives Corporate needs Vendor documentation Situation awareness reporting Lecture, pages 60-70 in the text Question 2 5 pts (TCO 2) The _____ of the 17 NIST control _____ can be placed into the 10 IISSCC _____ comprising the common body of knowledge for information security. technologies, domains, families controls, families, domains domains, f...