CS205 Quiz 4 by Tanveer Online Academy

CS205 Quiz 4 File by Tanveer Online Academy

Under the continual improvement cycle proposed in this

module, corrective actions are taken by.

All it users in the

Which of the following statements are true?

Principles of risk management and frameworks are closely related Guidelines should be:

Complied in letter and spirit

Standards are:

Required by regulators An information security policy can best be described as:

Formal statements produced and supported by senior management, reflecting objectives for the

information security program

Which of the following come at the center of risk management

process?

Risk assessment and risk treatment With how many time sources the clocks of all relevant

information processing systems should be synchronized to

record events and generate evidence?

At least three time sources · Which of the following activity should be performed to test · organizational readiness to identify and stop attacks or to

respond quickly and effectively?

Periodic red team exercise

In a large-sized security organization in Pakistan, it is likely

Over 50

How can an organization ensure protection of assets that are

accessible by suppliers?

By addressing information security requirements within supplier agreement What was the old name of iso27002:2013 standard?

ISO 17799 · The total numbers of discretionary controls in appendix a5 · through a18 are:

The 4-layer security transformation model.

Is adapted to solve Pakistan’s security posture challenges while being practical

not to waste time on security governance in the absence of solid underlying security controls

In process review stage of incident management what

questions or points should be reviewed?

What has occurred?

When a flaw in infrastructure related to services needs to be

addressed immediately, this would be a?

Emergency change

Which devices are to be maintained in systems inventory?

Each system connected to organization’s public and private network At which phase of information systems life cycle information