MTA: 988-367 Lesson 1 Knowledge Assessment

Which of the following are valid risk responses? (Choose all that apply.)

• Mitigation

• Transfer

• Investment

• Avoidance

1. Which of the following are considered removable devices or drives? (Choose all that apply.)

• iPod

• Netbook

• USB flash drive

• Burnable DVD drive

Which of the following would be considered appropriate security measures for a building’s external security perimeter? (Choose all that apply.)

• Motion detector

• Parking lot lights

• Turnstile

• Guard patrols

When traveling on business and headed out to dinner with a client, which of the following should be done to secure a laptop? (Choose the best answer.)

• Lock it in the car trunk

• Store it out of sight in a dresser drawer

• Secure it a piece of furniture with a laptop security cable

• Check it at the Front Desk

Which of the following refers to the process of eliminating a risk by choosing to not engage in an action or activity?

• mitigation

• residual risk

• avoidance

• acceptance

1. Which of the following technologies could be used to help ensure the confidentiality of proprietary manufacturing techniques for an auto parts manufacturing business? (Choose all that apply.)

• Strong encryption

• guard patrols

• a laptop safe

• strong authentication

The information security acronym CIA stands for which of the following?

• Confidentiality, Identity, Access Control

• Confidentiality, Integrity, Access Control

• Confidentiality, Integrity, Availability

• Control, Identity, Access Control

Which of the following statements best describes the concept of core security principles?

• Core security principles refer to the internal security perimeter when setting up a layered physical security environment.

• Core security principles refer to the principles of confidentiality, availability, and integrity.

• Core security principles refer to leveraging security best practices.

• Core security principles refer to the four methods of addressing risk.

As the Chief Security Officer for a small medical records processing company, you have just finished setting up the physical security for your new office. You have made sure that the parking lot is illuminated, that you have guards at the door as well as doing periodic patrols, and you have badge readers throughout the building at key locations. You also have put biometric access technology on the data center door. And of course, you have cameras in the parking lot, building entrances, and the data center entrances.

This type of implementation is known as: (Choose the best answer)

• Access control

• Core security principles

• Security best practices

• Defense in depth

Which of the following refers to the process of disabling unneeded services and ports to make the system more secure?

• Reducing the attack surface area

• Mitigating a trojan horse

• Security avoidance

• Defense in depth