Question Results

Score 1 of 1

Question:

Which of the following have the best CER?

Response:

	Hand scanning
	Badge Scanning
	Iris Scanning
	Finger scanning

Score 0 of 1

Question:

Owner-set permissions are an example of:

Response:

	Clark-Wilson
	role-based access control
	Discretionary access control
	mandatory access control

Score 1 of 1

Question:

Account administration, policies and standards, asset classification and reviews of audit trails are all examples of

Response:

	Both technical and administrative controls
	Technical controls
	Administrative controls
	Physical controls

Score 0 of 1

Question:

Clark-Wilson focuses primarily on:

Response:

	Authentication
	Availability
	Confidentialty
	Accessibility
	Address Integrity

Score 1 of 1

Question:

How many levels are there in the latest (June 2013) OSI model?

Response:

	10
	8
	5
	6
	7

Score 0 of 1

Question:

Work factor is defined as:

Response:

	the amount of effort/time required by an attacker to overcome a protective measure
	the amount of effort/time required by an administrator to establish a reasonable system security plan
	the amount of effort/time required to maintain an established security plan once it has been implemented
	the amount of effort/time required by an algorithm to fully encrypt or decrypt a message

Score 0 of 1

Question:

Which access control includes cameras?

Response:

	Visual
	Technical
	Administrative
	Physical
	Organizational

Score 1 of 1

Question:

Encryption, access control mechanisms, access control lists and remote access authentication protocols are all examples of

Response:

	Physical Controls
	Administrative Controls
	Both Technical and Administrative
	Technical controls

Score 0 of 1

Question:

In MAC the access policy is set by:

Response:

	the system
	network ACL
	the owner
	the role
	the GPO

Score 1 of 1

Question:

Which access control includes asset classification?

Response:

	Technical
	Physical
	Administrative
	Organizational
	Owner

Score 1 of 1

Question:

Which OSI layer includes the LLC and MAC sub-layers?

Response:

	Transport
	Data Link
	Physical
	Session
	Network

Score 1 of 1

Question:

Which of the following is primarily focused on restoring systems and information?

Response:

	Detective
	Preventative
	Corrective
	Compensating
	Recovery

Score 0 of 1

Question:

More key terms from Chapter 2

Response:

Match	User answer	Feedback
Weakness or lack of a countermeasure	Vulnerability
Entity that can exploit a vulnerability	Threat
The danger of having a vulnerability exploited	Threat agent
The probability of a threat being realized	Exposure
Presence of a vulnerability which exposes the organization	Risk

Score 1 of 1

Question:

Biometric authentication is most often hampered by:

Response:

	Initial Registration
	User acceptance
	Cost to implement
	Rings/Weight change

Score 1 of 1

Question:

Which classification of fuel type is grease given?

Response:

	D
	B
	C
	A