1-course, 3-part(18q)

Once the organization has defined the policies that will guide its security program, the next step is to implement a program known as _____ that is designed to prepare employees to comply with the policy.

• SETA

• STEA

• SecPol

• ETAS

A _____ a recommendation the user may use to help comply with a policy.

• standard

• procedure

• ruleset

• guideline

An attack that attempts to overwhelm a computer target's ability to handle incoming communications is known as _____.

• denial of service

• a virus

• a worm

• spam

A _____ is a set of examples used to illustrate compliance with policy.

• practice

• standard

• guideline

• recomendation

The individual or group that creates or is responsible for a set of information is/are the _____.

• data owners

• data trustees

• data custodians

• data users

The longer the time between vulnerability assesments, _____.

• the more likely new vulnerabilities can be exploited

• the lower the chance older vulberablites will be used

• the more you increase costs for testing

• the easier it is to lower your risk

The category of threat that represents a situation where we mst rely on technology that cannot be easily replaced is known as _____.

• technical hardware failure

• mean time until failure

• technological obsolesence

• technical software failure

In _____ mode, a user's location is set up to communicate with a VPN server.

• tunnel

• hybrid

• transport

• temporary

The category of threat that represents a situation where, for some reason, our programming or operating systems fail is known as _____.

• technical hardware failure

• mean time until failure

• technological obsolesence

• technical software failure

_____ software looks like legitimate software but is either malware in disguise or legitimate software embedded with malware

• loanware

• trojan horse

• open source

• greenware