Re-Quiz : Developing Your Security Policy (Chapter 2)

Why you should update your staff regarding the security policy? Choose all that apply.

• New security threats pop-up.

• Database are created and destroyed.

• People come and go.

• A security policy is a static document because the

  network itself is never evolving.

What does it mean by IDENTIFY YOUR RISKS? Choose all that apply.

• Identify information that should be restricted.

• Identify the level of security for your organization.

• What are your risks from inappropriate use?

• Keep staff informed about security policy.

Which of the following are the examples of tools for enforcing security policies?

• Identity and Access

  Management (IAM)

• Microsoft Security Compliance

  Toolkit

• Firewall

• Data Loss Prevention (DLP)

• McAfee ePolicy Orchestrator

What are the steps to a successful Security Policy?

Choose all that apply.

• Learn from others.

• Uninstall the tool that you need.

• Include staff in policy development.

• Train your employees.

What does the following statement refers to?

"A set of guidelines and rules that outlines the measures and procedures that an organization should follow to protect its assets, including data, people, and property, from various threats such as theft, damage, or unauthorized access."

• Security Policy

• Counter Measures

• Policy Vulnerabilities

• Standardize Software

Identify the tips on how to respond to cyber attack.

• Notifies Authority

• Secure Human Resource (HR) system

• Launch Backup

• Identify vulnerabilities

Which of the following best describes Non-Physical Vulnerabilities?

• Involve staff and administrator.

• Involve security policy.

• Involve hardware and data.

• Involve software and data.

Why you should not overprotect your network?

• Staff will getting bored with the rules.

• Network with haphazard compliance is almost as

  bad as no policy at all.

• It will exposed to a threat.

• Too much security can be as bad as too little.

________ is an example of network security threats in threat environment.

"It is a weakness or flaw in software, hardware, or organizational processes, which when exposed to a threat, can result in a security breach."

The above statement refers to....

• Ransomware

• Security Threat

• Vulnerabilities

• Malware