EA Program Security and Privacy Quiz 2

Why is it important to include IT security in an EA program and the documentation of EA components?

• To increase the cost of the enterprise

• To complicate the operational processes

• To ensure the protection of IT resources and information

• To slow down the technological advancements

What are the basic areas of an Security and Privacy Program?

• Financial Security, Legal Security, Data Security, Network Security

• Information Security, Personnel Security, Operational Security, Physical Security

• Software Security, Hardware Security, Cloud Security, Mobile Security

• Social Security, Health Security, Environmental Security, Educational Security

What are the Physical Security issues that should be reflected in the IT Security Plan?

• Software Security, Hardware Security, Cloud Security, Mobile Security

• Network Operation Centers, Server Rooms, Wiring Closets, Cable Plants

• Building Security, Cable Plants, Software Security, Network Security

• Building Security, Network Operation Centers, Server Rooms, Wiring Closets

What are the Personnel Security issues that should be reflected in the IT Security Plan?

• Building Security, Network Operation Centers, Server Rooms, Wiring Closets

• User Authentication, Awareness Training, Procedures Training

• Design, Assurance, Authentication, Access

• Risk Assessment, Testing and Evaluation, Vulnerability Remediation, Disaster Recovery

What are the Information Security issues that should be reflected in the IT Security Plan?

• Building Security, Network Operation Centers, Server Rooms, Wiring Closets

• Risk Assessment, Testing and Evaluation, Vulnerability Remediation, Disaster Recovery

• Design, Assurance, Authentication, Access

• User Authentication, Awareness Training, Procedures Training

What are the Operational Security issues that should be reflected in the IT Security Plan?

• User Authentication, Awareness Training, Procedures Training

• Design, Assurance, Authentication, Access

• Standard Operating Procedures, Component Security Testing and Evaluation, Vulnerability Remediation

• Risk Assessment, Testing and Evaluation, Vulnerability Remediation, Disaster Recovery

Why are there no 100 percent fool-proof IT Security solutions?

• Because IT security is too expensive

• Because IT security is not important

• Because IT components are designed and managed by humans

• Because IT security is not effective

How can the EA Management Program help to promote effective IT security solutions?

• By outsourcing IT security to external agencies

• By reducing the budget allocated for IT security

• By including IT security in the planning, design, and implementation of EA components

• By ignoring IT security completely

What is the difference between a Disaster Recovery Plan and a Continuity of Operations Plan?

• There is no difference, they are the same

• Disaster Recovery Plan focuses on natural disasters, while Continuity of Operations Plan focuses on man-made disasters

• Disaster Recovery Plan focuses on recovery after a disaster, while Continuity of Operations Plan focuses on maintaining operations during a disaster

• Disaster Recovery Plan is for small enterprises, while Continuity of Operations Plan is for large enterprises

Describe how IT security functions at each level of the EA3 framework.

• IT security functions at all levels of the EA3 framework

• IT security functions only at the Strategic level of the EA3 framework

• IT security is not relevant at any level of the EA3 framework

• IT security functions only at the Technology Infrastructure level of the EA3 framework