CISM -DOMAIN 1-INFOSEC GOVERNANCE WITH
COMPLETE SOLUTIONS
Correct
Incorrect
1 of 85
Definition
Controllers create and manage sensitive data in the org., Processors
manage the data for controllers (e.g. outsourced payroll)
Give this one a try later!
Administrative (personnel) security
System and data integrity controls
controls
Data controllers and processors Data/information owner
Don't know?
2 of 85
,Definition
These are technical hands-on employees who do the backups,
restores, patches, system config. They follow directions of the data
owner.
Give this one a try later!
Security administrator Data custodian
Mission/business owner User
Don't know?
3 of 85
Definition
Protects invention for 20yrs (normally), cryptography algorithms can
be patented. Inventions must be: novel (new idea), useful, nonobvious
(inventive work involved).
Give this one a try later!
Trademarks Trade Secrets
Digital Certificates Patents
, Don't know?
4 of 85
Definition
A method of developing software in which the software developer
writes and implements a program in segments instead of waiting until
the entire program is completed.
* Puts emphasis on adaptability
* Prototypes are often used
* GUI builders are considered RAD tools
* High level of customer involvement
Give this one a try later!
Software development
ANN (Artificial Neural Networks)
methodologies
RAD (Rapid Application
Projects, programs & portfolios
Development)
Don't know?
5 of 85
Definition
, Providing only the minimum amount of privileges necessary to perform
a job or function.
Give this one a try later!
Least Privilege Least Astonishment
Administrator Privilege Least Common Mechanism
Don't know?
6 of 85
Definition
Provides practical advice on how to implement security controls. From
BS 7799. Security controls based on industry best practices*.
Give this one a try later!
ISO 27001 ISO 27002
ISO 27004 ISO 27005
Don't know?
7 of 85
COMPLETE SOLUTIONS
Correct
Incorrect
1 of 85
Definition
Controllers create and manage sensitive data in the org., Processors
manage the data for controllers (e.g. outsourced payroll)
Give this one a try later!
Administrative (personnel) security
System and data integrity controls
controls
Data controllers and processors Data/information owner
Don't know?
2 of 85
,Definition
These are technical hands-on employees who do the backups,
restores, patches, system config. They follow directions of the data
owner.
Give this one a try later!
Security administrator Data custodian
Mission/business owner User
Don't know?
3 of 85
Definition
Protects invention for 20yrs (normally), cryptography algorithms can
be patented. Inventions must be: novel (new idea), useful, nonobvious
(inventive work involved).
Give this one a try later!
Trademarks Trade Secrets
Digital Certificates Patents
, Don't know?
4 of 85
Definition
A method of developing software in which the software developer
writes and implements a program in segments instead of waiting until
the entire program is completed.
* Puts emphasis on adaptability
* Prototypes are often used
* GUI builders are considered RAD tools
* High level of customer involvement
Give this one a try later!
Software development
ANN (Artificial Neural Networks)
methodologies
RAD (Rapid Application
Projects, programs & portfolios
Development)
Don't know?
5 of 85
Definition
, Providing only the minimum amount of privileges necessary to perform
a job or function.
Give this one a try later!
Least Privilege Least Astonishment
Administrator Privilege Least Common Mechanism
Don't know?
6 of 85
Definition
Provides practical advice on how to implement security controls. From
BS 7799. Security controls based on industry best practices*.
Give this one a try later!
ISO 27001 ISO 27002
ISO 27004 ISO 27005
Don't know?
7 of 85
