Organisational Security Quiz

What does the User Account and Password Policy describe?

• Who can administer user accounts

• What websites can be accessed

• How to recover lost files

• How to install software

Which policy describes the rules for accessing physical resources?

• Physical access policy

• User account and password policy

• Internet and email policy

• Software policy

What does the General Data Protection Regulation (GDPR) require?

• Free access to all data

• Consent for handling personal data

• No restrictions on data sharing

• Unlimited data storage

Which ISO standard is a code of practice for information security management?

• ISO 9001

• ISO 27002

• ISO 17799

• ISO 14001

What must be monitored and restricted according to the Physical and Environmental Security Policy?

• Employee performance

• Physical access to premises

• Internet usage

• Software installations

What is required of employees before employment according to the Human Resource Security Policy?

• Participation in a team-building exercise

• Screening and identity verification

• Completion of a training program

• Submission of a project

What should be done with access cards when an employee leaves the company?

• They should be destroyed

• They should be kept by the employee

• They should be returned

• They should be transferred to another employee

What is the purpose of the Access Control Policy?

• To control user access to IT systems

• To enforce software installation

• To monitor internet usage

• To manage employee schedules

How often should privileged access rights be reviewed?

• Every five years

• Twice a year

• Once a year

• Once a month

What is forbidden inside Restricted Areas without prior permission?

• Using mobile phones

• Eating food

• Accessing the internet

• Photography or video recording