LIBERTY UNIVERSITY CSIS 340 FINAL EXAM 2024 EXAM 3 LATEST VE
SIONS 150 QUESTIONS & CORRECT ANSWERS|A+ GUARANTEED
Study online at https://quizlet.com/_fvzs0j
1. Once an organization clearly defines its IP, the secu- label, classify
rity policies should specify how to ___________ doc-
uments with marks or comments, and ____________
the data, which determines in what location the sen-
sitive file should be placed.
2. Which of the following is not one of the four domains evaluate, assess,
that collectively represent a conceptual information and perform
systems security management life cycle?
3. The COBIT Monitor, Evaluate, and Assess domain audits
looks at specific business requirements and strate-
gic direction, and determines if the system still
meets these objectives. To ensure requirements
are being met, independent assessments known
as________________ take place.
4. In business, intellectual property (IP) is a term applied HR policies
broadly to any company information that is thought and employment
to bring an advantage. Protecting IP through security agreements about
policies starts with human resources (HR). Which of IP may or may
the following is a challenge concerning HR policies not be enforce-
about IP? able, depending
on current law and
location.
5. Which statement most clearly contrasts the differ- Policies are re-
ence between policies and procedures? quirements placed
on processes,
whereas proce-
dures are the tech-
nical steps taken
to achieve those
policy goals.
6. The COBIT Align, Plan, and Organize domain includes What do you want
basic details of an organization's requirements and to do?
goals; this domain answers which of the following
questions?
, LIBERTY UNIVERSITY CSIS 340 FINAL EXAM 2024 EXAM 3 LATEST VE
SIONS 150 QUESTIONS & CORRECT ANSWERS|A+ GUARANTEED
Study online at https://quizlet.com/_fvzs0j
7. There are a number of classifications that can be preventive control
applied to security controls. Which of the following is
not one the classifications?
8. When writing a ____________________ one could service level
state how often a supplier will provide a service or agreement
how quickly a firm will respond. For managed ser-
vices, this document often covers system availability
and acceptable performance measures.
9. Which of the following is not one of the "five pillars Assurance
of the IA model"
10. If human action is required, the control is considered manual
_______________.
11. ___________________ is the act of protecting infor- Information sys-
mation and the systems that store and process it. tems security
12. ___________________________are formal written Acceptable use
policies describing employee behavior when using policies
company computer and network systems.
13. Which of the following statement states the differ- Business liability
ence between business liability and a business's le- occurs when a
gal obligation? company fails to
meet its obliga-
tion to its employ-
ees and commu-
nity. A business's
legal obligation is
an action that it
is required to take
in compliance with
the law.
14. Although it is impossible to eliminate all business regulation
risks, a good policy can reduce the likelihood of risk
, LIBERTY UNIVERSITY CSIS 340 FINAL EXAM 2024 EXAM 3 LATEST VE
SIONS 150 QUESTIONS & CORRECT ANSWERS|A+ GUARANTEED
Study online at https://quizlet.com/_fvzs0j
occurring or reduce its impact. A business must find
a way to balance a number of competing drivers.
Which of the following is not one of these drivers?
15. In 2013 the national retailer Target Corporation suf- security policy
fered a major data breach that put at risk the financial
information of an estimated 40 million customers. In
2009, the health care provider BlueCross BlueShield
of Tennessee suffered a theft of hard drives when
it reported 57 hard drives stolen. Both these cases
resulted from a (n) ________________ failure.
16. When trying to achieve operational consistency, review
which of following oversight phases performs the
function of periodically assessing to ensure desired
results are achieved?
17. Which of the following domains addresses schedules Build, Acquire,
and deliverables? and Implement
18. A security awareness program gains credibility when relevance
the business sees a reduction of risk, and there are
multiple benefits that come with a security awareness
program that emphasizes the business risk. Which of
the following is not one of the benefits?
19. Which of the following situations best illustrates the A website sets
process of authentication? users' passwords
to expire every 90
days
20. A security awareness program can be implemented repetition, on-
in many ways. Which of the following is the list of boarding, support,
generally accepted principles for implementing a pro- relevance, metrics
gram?
21. ISS policies ensure the consistent protection of infor- compliance con-
mation flowing through the entire system. Which of trols for legal man-
dates
SIONS 150 QUESTIONS & CORRECT ANSWERS|A+ GUARANTEED
Study online at https://quizlet.com/_fvzs0j
1. Once an organization clearly defines its IP, the secu- label, classify
rity policies should specify how to ___________ doc-
uments with marks or comments, and ____________
the data, which determines in what location the sen-
sitive file should be placed.
2. Which of the following is not one of the four domains evaluate, assess,
that collectively represent a conceptual information and perform
systems security management life cycle?
3. The COBIT Monitor, Evaluate, and Assess domain audits
looks at specific business requirements and strate-
gic direction, and determines if the system still
meets these objectives. To ensure requirements
are being met, independent assessments known
as________________ take place.
4. In business, intellectual property (IP) is a term applied HR policies
broadly to any company information that is thought and employment
to bring an advantage. Protecting IP through security agreements about
policies starts with human resources (HR). Which of IP may or may
the following is a challenge concerning HR policies not be enforce-
about IP? able, depending
on current law and
location.
5. Which statement most clearly contrasts the differ- Policies are re-
ence between policies and procedures? quirements placed
on processes,
whereas proce-
dures are the tech-
nical steps taken
to achieve those
policy goals.
6. The COBIT Align, Plan, and Organize domain includes What do you want
basic details of an organization's requirements and to do?
goals; this domain answers which of the following
questions?
, LIBERTY UNIVERSITY CSIS 340 FINAL EXAM 2024 EXAM 3 LATEST VE
SIONS 150 QUESTIONS & CORRECT ANSWERS|A+ GUARANTEED
Study online at https://quizlet.com/_fvzs0j
7. There are a number of classifications that can be preventive control
applied to security controls. Which of the following is
not one the classifications?
8. When writing a ____________________ one could service level
state how often a supplier will provide a service or agreement
how quickly a firm will respond. For managed ser-
vices, this document often covers system availability
and acceptable performance measures.
9. Which of the following is not one of the "five pillars Assurance
of the IA model"
10. If human action is required, the control is considered manual
_______________.
11. ___________________ is the act of protecting infor- Information sys-
mation and the systems that store and process it. tems security
12. ___________________________are formal written Acceptable use
policies describing employee behavior when using policies
company computer and network systems.
13. Which of the following statement states the differ- Business liability
ence between business liability and a business's le- occurs when a
gal obligation? company fails to
meet its obliga-
tion to its employ-
ees and commu-
nity. A business's
legal obligation is
an action that it
is required to take
in compliance with
the law.
14. Although it is impossible to eliminate all business regulation
risks, a good policy can reduce the likelihood of risk
, LIBERTY UNIVERSITY CSIS 340 FINAL EXAM 2024 EXAM 3 LATEST VE
SIONS 150 QUESTIONS & CORRECT ANSWERS|A+ GUARANTEED
Study online at https://quizlet.com/_fvzs0j
occurring or reduce its impact. A business must find
a way to balance a number of competing drivers.
Which of the following is not one of these drivers?
15. In 2013 the national retailer Target Corporation suf- security policy
fered a major data breach that put at risk the financial
information of an estimated 40 million customers. In
2009, the health care provider BlueCross BlueShield
of Tennessee suffered a theft of hard drives when
it reported 57 hard drives stolen. Both these cases
resulted from a (n) ________________ failure.
16. When trying to achieve operational consistency, review
which of following oversight phases performs the
function of periodically assessing to ensure desired
results are achieved?
17. Which of the following domains addresses schedules Build, Acquire,
and deliverables? and Implement
18. A security awareness program gains credibility when relevance
the business sees a reduction of risk, and there are
multiple benefits that come with a security awareness
program that emphasizes the business risk. Which of
the following is not one of the benefits?
19. Which of the following situations best illustrates the A website sets
process of authentication? users' passwords
to expire every 90
days
20. A security awareness program can be implemented repetition, on-
in many ways. Which of the following is the list of boarding, support,
generally accepted principles for implementing a pro- relevance, metrics
gram?
21. ISS policies ensure the consistent protection of infor- compliance con-
mation flowing through the entire system. Which of trols for legal man-
dates
