ITSY 2341 EXAM 1 QUESTIONS & ANSWERS
Laws, policies, and technical controls are all examples of deterrents. - Answer -True
Critical Success Factors (CSFs) are key areas where an organization must perform well
on a consistent basis to achieve its mission. - Answer -True
Data is transported and stored as organized information. - Answer -False
The Goal Question Metric (GQM) approach is based upon the assumption that for an
organization to measure in a purposeful way it must first specify the goals for itself and
its projects, then it must trace those goals to the data that are intended to define those
goals operationally, and finally provide a framework for interpreting the data with respect
to the stated goals. - Answer -True
Key Goal Indicators (KGI) create practical reference points gauging the extent to which
outcomes are realized. - Answer -True
A good metric will be more than just a number. It will be an indicator of how well an
objective is being met. - Answer -True
Under the Freedom of Information Act (FOIA), some federal agencies, such as the CIA
and FBI, are not required to disclose requests requested in writing. - Answer -False
Family Educational Rights and Privacy Act (FERPA) allows schools to disclose "non-
directory" information such as health records and grades without consent. - Answer -
False
The most important part of any security program is to ensure that it aligns with the
business. - Answer -True
All metrics should be reported, Including metrics from other disciplines and
departments. - Answer -True
US and European privacy laws operate under the same fundamental principle, with only
minor differences in implementation. - Answer -False
Many privacy risks are also cybersecurity risks, which means we should categorize
privacy risks as a subset of cybersecurity risks. - Answer -False
Security metrics provide limited value because they are snapshots of your security
posture and therefore cannot contribute to your strategic planning. - Answer -False
RACI is designed to identify functional areas, key activities and provides management
with decision points where ambiguities exist. - Answer -True
Laws, policies, and technical controls are all examples of deterrents. - Answer -True
Critical Success Factors (CSFs) are key areas where an organization must perform well
on a consistent basis to achieve its mission. - Answer -True
Data is transported and stored as organized information. - Answer -False
The Goal Question Metric (GQM) approach is based upon the assumption that for an
organization to measure in a purposeful way it must first specify the goals for itself and
its projects, then it must trace those goals to the data that are intended to define those
goals operationally, and finally provide a framework for interpreting the data with respect
to the stated goals. - Answer -True
Key Goal Indicators (KGI) create practical reference points gauging the extent to which
outcomes are realized. - Answer -True
A good metric will be more than just a number. It will be an indicator of how well an
objective is being met. - Answer -True
Under the Freedom of Information Act (FOIA), some federal agencies, such as the CIA
and FBI, are not required to disclose requests requested in writing. - Answer -False
Family Educational Rights and Privacy Act (FERPA) allows schools to disclose "non-
directory" information such as health records and grades without consent. - Answer -
False
The most important part of any security program is to ensure that it aligns with the
business. - Answer -True
All metrics should be reported, Including metrics from other disciplines and
departments. - Answer -True
US and European privacy laws operate under the same fundamental principle, with only
minor differences in implementation. - Answer -False
Many privacy risks are also cybersecurity risks, which means we should categorize
privacy risks as a subset of cybersecurity risks. - Answer -False
Security metrics provide limited value because they are snapshots of your security
posture and therefore cannot contribute to your strategic planning. - Answer -False
RACI is designed to identify functional areas, key activities and provides management
with decision points where ambiguities exist. - Answer -True
