IAS2-NW3A

Which of the following interpret requirements and apply them to specific situations?

• Policies

• Standards

• Guidelines

• Procedure

Business continuity plans (BCPs) associated with organizational information systems should be developed primarily on the basis of:

• Available Resources

• Business needs

• Levels of Effort

• Projected Costs

Which cybersecurity principle is most important when attempting to trace the source of malicious activity?

• Availability

• Nonrepudiation

• Integrity

• Confidentiality

Outsourcing poses the greatest risk to an organization when it involves:

• Business Support Services

• Core Business Functions

• Technology Infrastructure

• Cybersecurity Capabilies

Risk assessments should be performed:

• At the start of a program

• On a regular basis

• When an asset changes

• When a vulnerability is discovered

During which phase of the system development lifecycle (SDLC) should security first be considered?

• Analysis

• Planning

• Design

• Implementation

Who has the greatest influence over access security in a password authentication environment?

• System Administrators

• Users

• Business Executives

• Security Manager

A cybersecurity architecture designed around the concept of a perimeter is said to be:

• Data-centric

• System-centric

• User-centric

• Integrated

Which two factors are used to calculate the likelihood of an event?

• Vulnerability and Asset Value

• Threat and Vulnerability

• Asset Count and Asset Value

• Threat and Asset Value

 _______________- includes security processes such as conducting risk management exercises, security awareness programs, policy development, and compliance efforts with laws and regulations.

• Tactical Management

• Strategic Management

• Operational Management

• Level of Controls