ISA 3300 CH 3 EXAM QUESTIONS WITH
CORRECT ANSWERS
The __________ phase of the SecSDLC, the team studies the documents
| | | | | | | | | |
from earlier and looks at of relevant legal issues that could affect the
| | | | | | | | | | | | | |
design of the security solution. - CORRECT ANSWER✔✔-Analysis
| | | | | | |
The __________ phase of the SecSDLC has team members create and
| | | | | | | | | | |
develop the blueprint for security and develop critical contingency plans
| | | | | | | | |
for incident response. - CORRECT ANSWER✔✔-Justification
| | | | | |
A senior executive who promotes the project and ensures its support,
| | | | | | | | | | |
both financially and administratively, at the highest levels of the
| | | | | | | | | |
organization is needed to fill the role of a(n) ____________ on a
| | | | | | | | | | | |
development team. - CORRECT ANSWER✔✔-Champion | | | |
Individuals who control, and are therefore responsible for, the security
| | | | | | | | | |
and use of a particular set of information are known as ____________. -
| | | | | | | | | | | |
|CORRECT ANSWER✔✔-Data Owners | |
Which of the following should be included in an InfoSec governance
| | | | | | | | | | |
program?
, a) All of these are components of the InfoSec governance program
| | | | | | | | | |
b) An InfoSec project management assessment
| | | | |
c) An InfoSec risk management methodology
| | | | |
d) An InfoSec maintenance methodology - CORRECT ANSWER✔✔-c) An
| | | | | | | | |
InfoSec risk management methodology
| | |
The individual responsible for the assessment, management, and
| | | | | | | |
implementation of information-protection activities in the organization
| | | | | | |
is known as a __________. - CORRECT ANSWER✔✔-CISO
| | | | | | |
Which of the following explicitly declares the business of the
| | | | | | | | | |
organization and its intended areas of operations? - CORRECT
| | | | | | | | |
ANSWER✔✔-Mission statement |
A formal approach to solving a problem based on a structured sequence
| | | | | | | | | | |
|of procedures, the use of which ensures a rigorous process and
| | | | | | | | | | |
increases the likelihood of achieving the desired final objective is known
| | | | | | | | | |
|as a ____________. - CORRECT ANSWER✔✔-Methodology
| | | | |
CORRECT ANSWERS
The __________ phase of the SecSDLC, the team studies the documents
| | | | | | | | | |
from earlier and looks at of relevant legal issues that could affect the
| | | | | | | | | | | | | |
design of the security solution. - CORRECT ANSWER✔✔-Analysis
| | | | | | |
The __________ phase of the SecSDLC has team members create and
| | | | | | | | | | |
develop the blueprint for security and develop critical contingency plans
| | | | | | | | |
for incident response. - CORRECT ANSWER✔✔-Justification
| | | | | |
A senior executive who promotes the project and ensures its support,
| | | | | | | | | | |
both financially and administratively, at the highest levels of the
| | | | | | | | | |
organization is needed to fill the role of a(n) ____________ on a
| | | | | | | | | | | |
development team. - CORRECT ANSWER✔✔-Champion | | | |
Individuals who control, and are therefore responsible for, the security
| | | | | | | | | |
and use of a particular set of information are known as ____________. -
| | | | | | | | | | | |
|CORRECT ANSWER✔✔-Data Owners | |
Which of the following should be included in an InfoSec governance
| | | | | | | | | | |
program?
, a) All of these are components of the InfoSec governance program
| | | | | | | | | |
b) An InfoSec project management assessment
| | | | |
c) An InfoSec risk management methodology
| | | | |
d) An InfoSec maintenance methodology - CORRECT ANSWER✔✔-c) An
| | | | | | | | |
InfoSec risk management methodology
| | |
The individual responsible for the assessment, management, and
| | | | | | | |
implementation of information-protection activities in the organization
| | | | | | |
is known as a __________. - CORRECT ANSWER✔✔-CISO
| | | | | | |
Which of the following explicitly declares the business of the
| | | | | | | | | |
organization and its intended areas of operations? - CORRECT
| | | | | | | | |
ANSWER✔✔-Mission statement |
A formal approach to solving a problem based on a structured sequence
| | | | | | | | | | |
|of procedures, the use of which ensures a rigorous process and
| | | | | | | | | | |
increases the likelihood of achieving the desired final objective is known
| | | | | | | | | |
|as a ____________. - CORRECT ANSWER✔✔-Methodology
| | | | |
