Level 5 - OSP Quiz

What is the primary purpose of separation of duties in mitigating employee-related security vulnerabilities?

• To simplify job responsibilities for employees

• To increase the number of tasks assigned to each employee

• To overcome the need for mandatory vacations

• To prevent fraud by dividing tasks among multiple employees

What is the primary goal of onboarding documentation such as the Non-disclosure agreement (NDA) and Non-compete agreement?

• To provide a detailed job description

• To establish trust between employees and the organization

• To outline the organization's acceptable use policy (AUP)

• To define terms and conditions related to confidentiality and competition

Which concept involves using games to help teach, practice, and retain information in security awareness training?

• Phishing simulations

• Computer-based training (CBT)

• Gamification

• Role-based training

What is the main purpose of mandatory vacations as a daily operational policy?

• To encourage employees to take time off

• To catch irregularities that could arise when one person is unsupervised

• To ensure employees rotate between different job roles

• To provide a grace period for expired certificates

What is the significance of an exit interview during the offboarding process?

• To discuss potential lawsuits related to employee termination

• To provide an opportunity for employees to return company assets

• To disable the user account and physical access

• To recognize the reason for termination and obtain agreement

What is the purpose of an Interoperability Agreement (IA) in the onboarding phase of a third-party relationship?

• To determine data ownership

• To specify services, performance levels, and dispute resolution

• To conduct periodic vulnerability assessments

• To reset passwords used by the third party

What document outlines the measurements used for determining the quality and effectiveness of services provided by a third party?

• Service Level Agreement (SLA)

• Blanket Purchase Order (BPO)

• Measurement System Analysis (MSA)

• Memorandum of Understanding (MOU)

What is the purpose of an End of Life (EOL) document in the offboarding phase of a third-party relationship?

• To review the purpose of the original contract and obligations related to termination

• To reset configurations for VPN, firewall, router, or switch

• To disable user and group accounts used by the third party

• To regularly verify compliance with IA documents

What is the main focus during the ongoing operations phase of a third-party relationship?

• Creating an Interconnection Security Agreement (ISA)

• Onboarding procedures

• Regularly verifying compliance with IA documents

• Identifying risks associated with the relationship

What is the primary purpose of conducting regular security audits during the ongoing operations phase of a third-party relationship?

• To disable any domain trust relationships

• To create an End of Service (EOS) letter

• To ensure parties follow security-related aspects of the IA documents

• To identify risks associated with entering the relationship