MISY 5325 MIDTERM
COMPLETE QUESTION SET WITH VERIFIED
SOLUTIONS GRADED A+
Question 1.
Which of the following is not true of a qualitative risk assessment?
ANSWER
It provides a cost-benefit analysis (CBA)
Question 2.
The Family Educational Rights and Privacy Act (FERPA) applies to all of the following, except:
ANSWER
a medical center that hired recent nursing graduates.
Question 3.
Rodrigo is a network security specialist. He wants to perform real-time analysis of security data
gathered from networked systems. Which of the following is the best solution for Rodrigo to
implement?
ANSWER
Security information and event management (SIEM)
Question 4.
Which of the following is not something to consider when determining the value of an asset?
A. Departmental ownership
B. System functions
C. Personnel assets
D. Facilities and supplies
ANSWER
Departmental ownership
,Question 5.
Which of the following vulberabilites result in losses
ANSWER
Exploited vulnerabilities result in loses.
Question 6.
According to the World Intellectual Property Organization (WIPO), the two categories of intellectual
property (IP) are _______________ and _______________.
ANSWER
industrial property, copyright
Question 7.
Which of the following is not a vulnerability that might affect the website of an online company?
ANSWER
Loss of Internet connectivity
Question 8.
When should you perform a risk assessment?
ANSWER
Periodically after a control has been implemented
Question 9.
When your bank or credit card company sends you a notification of changes in how it collects or
shares data, it is sending that notification in compliance with:
ANSWER
the Financial Privacy Rule of the Gramm-Leach-Bliley Act (GLBA).
, Question 10.
A technician in a large corporation fixes a printer that was not receiving an IP address automatically by
manually assigning it an address. The address was assigned to a server that was offline and being
upgraded. When the server was brought online, it was no longer accessible. How could this problem
have been avoided?
ANSWER
Through change management
Question 11.
Which of the following is the most accurate statement with respect to creating a risk management
plan?
ANSWER
A risk management plan can help ensure your business is in compliance with important
regulations.
Question 12.
Oscar works for a health insurance company. He is creating a Health Insurance Portability and
Accountability Act (HIPAA) compliance plan. In the section on monitoring, what should Oscar specify to
be continuously monitored for changes?
ANSWER
Regulations and risks
Question 13.
Kyle works for the IT department. He is working in the asset management system. He is assigning the
relevant IT infrastructure domain to each asset. Which is the best domain to assign to elements used
to connect systems and servers together, such as hubs, switches, and routers?
ANSWER
LAN Domain
COMPLETE QUESTION SET WITH VERIFIED
SOLUTIONS GRADED A+
Question 1.
Which of the following is not true of a qualitative risk assessment?
ANSWER
It provides a cost-benefit analysis (CBA)
Question 2.
The Family Educational Rights and Privacy Act (FERPA) applies to all of the following, except:
ANSWER
a medical center that hired recent nursing graduates.
Question 3.
Rodrigo is a network security specialist. He wants to perform real-time analysis of security data
gathered from networked systems. Which of the following is the best solution for Rodrigo to
implement?
ANSWER
Security information and event management (SIEM)
Question 4.
Which of the following is not something to consider when determining the value of an asset?
A. Departmental ownership
B. System functions
C. Personnel assets
D. Facilities and supplies
ANSWER
Departmental ownership
,Question 5.
Which of the following vulberabilites result in losses
ANSWER
Exploited vulnerabilities result in loses.
Question 6.
According to the World Intellectual Property Organization (WIPO), the two categories of intellectual
property (IP) are _______________ and _______________.
ANSWER
industrial property, copyright
Question 7.
Which of the following is not a vulnerability that might affect the website of an online company?
ANSWER
Loss of Internet connectivity
Question 8.
When should you perform a risk assessment?
ANSWER
Periodically after a control has been implemented
Question 9.
When your bank or credit card company sends you a notification of changes in how it collects or
shares data, it is sending that notification in compliance with:
ANSWER
the Financial Privacy Rule of the Gramm-Leach-Bliley Act (GLBA).
, Question 10.
A technician in a large corporation fixes a printer that was not receiving an IP address automatically by
manually assigning it an address. The address was assigned to a server that was offline and being
upgraded. When the server was brought online, it was no longer accessible. How could this problem
have been avoided?
ANSWER
Through change management
Question 11.
Which of the following is the most accurate statement with respect to creating a risk management
plan?
ANSWER
A risk management plan can help ensure your business is in compliance with important
regulations.
Question 12.
Oscar works for a health insurance company. He is creating a Health Insurance Portability and
Accountability Act (HIPAA) compliance plan. In the section on monitoring, what should Oscar specify to
be continuously monitored for changes?
ANSWER
Regulations and risks
Question 13.
Kyle works for the IT department. He is working in the asset management system. He is assigning the
relevant IT infrastructure domain to each asset. Which is the best domain to assign to elements used
to connect systems and servers together, such as hubs, switches, and routers?
ANSWER
LAN Domain
