Which of the following are disadvantages to server virtualization? - ANSWER A
compromise of the host system might affect multiple servers
Which of the following are disadvantages to server virtualization? - ANSWER A failure
in one hardware component could affect multiple servers
You have configured a NIDS to monitor network traffic. Which of the following describes an
attack that is not detected by the NIDS device? - ANSWER False negative
You have configured a NIDS to monitor network traffic. Which of the following describes
harmless traffic that has been identified as a potential attack by the NIDS device? -
ANSWER False positive
Which of the following is not a valid response to a risk discovered during a risk analysis? -
ANSWER Denial
Which of the following best defines Single Loss Expectancy (SLE)? - ANSWER The total
monetary loss associated with a single occurrence of a threat
What is the average number of times that a specific risk is likely to be realized? -
ANSWER Annualized Rate of Occurrence
Your company has developed and implemented countermeasures for the greatest risks to
their
1
,assets. However, there is still some risk left. What is the remaining risk called? -
ANSWER Residual risk
When analyzing assets, which analysis method assigns financial values to assets? -
ANSWER Quantitative
Which of the following statements is true in regards to risk analysis? (Select two.) -
ANSWER Don't implement a countermeasure if the cost is greater than loss.
Annualized Rate of Occurrence (ARO) identifies how often in a single year the
successful threat attack will occur
When would choosing to do nothing about an identified risk be acceptable? -
ANSWER When the cost of protecting the asset is greater than the potential loss
Which of the following is not an example of a service level agreement? -
ANSWER Security policy design
Which of the following is defined as a contract which prescribes the technical support or
business parameters that a provider will bestow to its client? - ANSWER Service level
agreement
If an organization shows sufficient due care, which burden is eliminated in the event of a
security breach? - ANSWER Negligence
HIPAA is a set of federal regulations that define security guidelines that enforce the
protection of
what? - ANSWER Privacy
2
, What is a service level agreement (SLA)? - ANSWER A guarantee of a specific level of
service
A Service Level Agreement (SLA) defines the relationship between, and the contractual
responsibilities of, providers and recipients of services. Which of the following characteristics
are
most important when designing an SLA? (Select two.) - ANSWER Detailed provider
responsibilities for all continuity and disaster recovery mechanisms.
Clear and detailed descriptions of penalties if the level of service is not provided.
Which of the following policies specifically protects PII? - ANSWER Privacy
Which of the following is a policy that defines appropriate and inappropriate activities and
usage
for company resources, assets, and communications? - ANSWER Acceptable use policy
Which of the following defines an acceptable use agreement? - ANSWER An
agreement which identifies the employee's rights to use company property such as
Internet access and computer equipment for personal use.
Which of the following describes a false positive when using an IPS device? -
ANSWER Legitimate traffic being flagged as malicious
What is the primary purpose of forcing employees to take mandatory one week minimum
vacations every year? - ANSWER To check for evidence of fraud
You have conducted a risk analysis to protect a key company asset. You identify the following
values:
• Asset value = 400
3
compromise of the host system might affect multiple servers
Which of the following are disadvantages to server virtualization? - ANSWER A failure
in one hardware component could affect multiple servers
You have configured a NIDS to monitor network traffic. Which of the following describes an
attack that is not detected by the NIDS device? - ANSWER False negative
You have configured a NIDS to monitor network traffic. Which of the following describes
harmless traffic that has been identified as a potential attack by the NIDS device? -
ANSWER False positive
Which of the following is not a valid response to a risk discovered during a risk analysis? -
ANSWER Denial
Which of the following best defines Single Loss Expectancy (SLE)? - ANSWER The total
monetary loss associated with a single occurrence of a threat
What is the average number of times that a specific risk is likely to be realized? -
ANSWER Annualized Rate of Occurrence
Your company has developed and implemented countermeasures for the greatest risks to
their
1
,assets. However, there is still some risk left. What is the remaining risk called? -
ANSWER Residual risk
When analyzing assets, which analysis method assigns financial values to assets? -
ANSWER Quantitative
Which of the following statements is true in regards to risk analysis? (Select two.) -
ANSWER Don't implement a countermeasure if the cost is greater than loss.
Annualized Rate of Occurrence (ARO) identifies how often in a single year the
successful threat attack will occur
When would choosing to do nothing about an identified risk be acceptable? -
ANSWER When the cost of protecting the asset is greater than the potential loss
Which of the following is not an example of a service level agreement? -
ANSWER Security policy design
Which of the following is defined as a contract which prescribes the technical support or
business parameters that a provider will bestow to its client? - ANSWER Service level
agreement
If an organization shows sufficient due care, which burden is eliminated in the event of a
security breach? - ANSWER Negligence
HIPAA is a set of federal regulations that define security guidelines that enforce the
protection of
what? - ANSWER Privacy
2
, What is a service level agreement (SLA)? - ANSWER A guarantee of a specific level of
service
A Service Level Agreement (SLA) defines the relationship between, and the contractual
responsibilities of, providers and recipients of services. Which of the following characteristics
are
most important when designing an SLA? (Select two.) - ANSWER Detailed provider
responsibilities for all continuity and disaster recovery mechanisms.
Clear and detailed descriptions of penalties if the level of service is not provided.
Which of the following policies specifically protects PII? - ANSWER Privacy
Which of the following is a policy that defines appropriate and inappropriate activities and
usage
for company resources, assets, and communications? - ANSWER Acceptable use policy
Which of the following defines an acceptable use agreement? - ANSWER An
agreement which identifies the employee's rights to use company property such as
Internet access and computer equipment for personal use.
Which of the following describes a false positive when using an IPS device? -
ANSWER Legitimate traffic being flagged as malicious
What is the primary purpose of forcing employees to take mandatory one week minimum
vacations every year? - ANSWER To check for evidence of fraud
You have conducted a risk analysis to protect a key company asset. You identify the following
values:
• Asset value = 400
3
