Microsoft SC-900 Day 5 & 6

Who approves the incident response policy?

• (ISC)²

• Senior management

• The security manager

• Investor

True of False? Business continuity planning is a reactive procedure that restores business operations after a disruption occurs.

• True

• False

Which of the following is likely to be included in the business continuity plan?

• Alternate work areas for personnel affected by a natural disaster

• The organization’s strategic security approach

• Last year’s budge information

• Log data from all systems

Tekila works for a government agency. All data in the agency is assigned a particular sensitivity level, called a "classification." Every person in the agency is assigned a "clearance" level, which determines the classification of data each person can access. What is the access control model being implemented in Tekila's agency?

• MAC (mandatory access control)

• DAC (discretionary access control)

• RBAC (role-based access control)

• FAC (formal access control)

In order for a biometric security to function properly, an authorized person's physiological data must be ______.

• Broadcast

• Stored

• Deleted

• Modified

Handel is a senior manager at Triffid, Inc., and is in charge of implementing a new access control scheme for the company. Handel wants to ensure that operational managers have the utmost personal choice in determining which employees get access to which systems/data. Which method should Handel select?

• Role-based access control (RBAC)

• Mandatory access control (MAC)

• Discretionary access control (DAC)

• Security policy

Which of the following roles does not typically require privileged account access?

• Security administrator

• Data entry professional

• System administrator

• Help Desk technician

A human guard monitoring a hidden camera could be considered a ______ control.

• Detective

• Preventive

• Deterrent

• Logical

A _____ is a record of something that has occurred.

• Biometric

• Law

• Log

• Firewall

All of the following are typically perceived as drawbacks to biometric systems, except:

• Lack of accuracy

• Potential privacy concerns

• Retention of physiological data past the point of employment

• Legality