EA Program Security and Privacy Quiz

Why is it important to include IT security in an EA program and the documentation of EA components?

• To slow down the enterprise's strategic initiatives

• To ensure foolproof security solutions

• To increase the cost of implementing EA components

• To protect IT resources from unauthorized access and use

What are the basic areas of an Security and Privacy Program?

• Financial Security, Customer Security, Data Security, Network Security

• Social Security, Health Security, Environmental Security, Political Security

• Information Security, Personnel Security, Operational Security, Physical Security

• Software Security, Hardware Security, Cloud Security, Mobile Security

What are the Physical Security issues that should be reflected in the IT Security Plan?

• Network Security, Personnel Security, Information Security, Operations Security

• Building Security, Cable Plants, Software Security, Data Centers

• Hardware Security, Access Control, Disaster Recovery, Biometric Scans

• Building Security, Network Operation Centers, Cable Plants, Server Rooms

What are the Personnel Security issues that should be reflected in the IT Security Plan?

• User Authentication, Awareness Training, Procedures Training

• Building Security, Network Operation Centers, Cable Plants, Server Rooms

• Risk Assessment, Testing and Evaluation, Vulnerability Remediation

• Disaster Recovery, Continuity of Operations, Standard Operating Procedures

What are the Information Security issues that should be reflected in the IT Security Plan?

• Building Security, Cable Plants, Software Security, Data Centers

• Design, Assurance, Authentication, Access

• Risk Assessment, Testing and Evaluation, Vulnerability Remediation

• Disaster Recovery, Continuity of Operations, Standard Operating Procedures

What are the Operational Security issues that should be reflected in the IT Security Plan?

• User Authentication, Awareness Training, Procedures Training

• Component Certification and Accreditation, Standard Operating Procedures, Disaster Recovery

• Building Security, Network Operation Centers, Cable Plants, Server Rooms

• Risk Assessment, Testing and Evaluation, Vulnerability Remediation

Why are there no 100 percent fool-proof IT Security solutions?

• Because IT security is too expensive to implement

• Because IT security is not important

• Because IT security is always perfect

• Because insider threats can compromise security solutions

How can the EA Management Program help to promote effective IT security solutions?

• By integrating IT security into the planning and design of EA components

• By ignoring IT security completely

• By reducing the budget allocated for IT security

• By outsourcing IT security to external providers

What is the difference between a Disaster Recovery Plan and a Continuity of Operations Plan?

• There is no difference, they are the same

• Disaster Recovery is for IT systems, while Continuity of Operations is for business operations

• Disaster Recovery focuses on natural disasters, while Continuity of Operations focuses on man-made disasters

• Disaster Recovery is for short-term disruptions, while Continuity of Operations is for long-term disruptions

Describe how IT security functions at each level of the EA3 framework.

• IT security is not necessary at any level of the framework

• IT security is only relevant at the Strategic level

• IT security is integrated into the planning, design, and operation of every EA component

• IT security is only considered for physical security measures