C845 - INFORMATION SYSTEMS SECURITY UPDATED
ACTUAL QUESTIONS AND CORRECT ANSWERS
Question:
A NON-REGULATORY agency of the United States Department of COMMERCE that offers an
incredible variety of standards
Answer:
A non-regulatory agency of the United States Department of Commerce that offers an incredible variety of
standards
Question:
Internet Engineering Task Force (IETF)
Answer:
Develops and promotes INTERNET standards that may be voluntarily adopted throughout the industry.
At one time supported by the federal government, it now performs a standards development function under
the Internet Society
Question:
Institute of Electrical and Electronics Engineers (IEEE)
Answer:
Professional organization for the advancement of computer engineering and computer science, among
other aspects of electronics and communications. As one of the leading standards organizations, it is
responsible for the 802 group of standards
Question:
American National Standards Institute (ANSI)
Answer:
A NONPROFIT ORGANIZATION that oversees the development of STANDARDS that are approved by
consensus and are applied on a voluntary basis across a given industry.
Manages and maintains the ASCII standard
Question:
World Wide Web Consortium (W3C)
Answer:
Standards organization in which members, staff, and the public collaborate to develop web standards. The
web technologies include the recommended implementation of Cascading Style Sheets and XHTML,
among many other recommendations
Question:
International Organization for Standardization (ISO)
Answer:
A true standards organization. It tests various products and provides its seal of approval once they pass
rigorous tests. The organization administers over 13,000 standards across many industries.
, Question:
Telecommunications Industry Association (TIA)
Answer:
Accredited by the American National Standards Institute (ANSI) to develop voluntary, consensus-based
industry standards for a wide variety of information and communication technologies (ICT) products and
currently represents nearly 400 companies
Question:
SANS Institute
Answer:
A private company formed in 1989 that provides training to the cyber security industry
Question:
Security Triad
Answer:
Confidentiality Availability Integrity
Question:
The Primary Security Categories
Answer:
Prevention Detection Recovery
Question:
Access Control Steps
Answer:
Identification Authentication Authorization Accounting Auditing
Question:
Risk
Answer:
A chance of damage or loss based upon the exposure to a potential hazard or threat.
Question:
Threat Vector
Answer:
A path that an attacker might take to take advantage of a vulnerability and do harm
Question:
Prudent Man Concept
Answer:
Refers to actions that may be REASONABLY TAKEN (or are obvious) to safeguard corporate assets and
data
Question:
Components of Risk
ACTUAL QUESTIONS AND CORRECT ANSWERS
Question:
A NON-REGULATORY agency of the United States Department of COMMERCE that offers an
incredible variety of standards
Answer:
A non-regulatory agency of the United States Department of Commerce that offers an incredible variety of
standards
Question:
Internet Engineering Task Force (IETF)
Answer:
Develops and promotes INTERNET standards that may be voluntarily adopted throughout the industry.
At one time supported by the federal government, it now performs a standards development function under
the Internet Society
Question:
Institute of Electrical and Electronics Engineers (IEEE)
Answer:
Professional organization for the advancement of computer engineering and computer science, among
other aspects of electronics and communications. As one of the leading standards organizations, it is
responsible for the 802 group of standards
Question:
American National Standards Institute (ANSI)
Answer:
A NONPROFIT ORGANIZATION that oversees the development of STANDARDS that are approved by
consensus and are applied on a voluntary basis across a given industry.
Manages and maintains the ASCII standard
Question:
World Wide Web Consortium (W3C)
Answer:
Standards organization in which members, staff, and the public collaborate to develop web standards. The
web technologies include the recommended implementation of Cascading Style Sheets and XHTML,
among many other recommendations
Question:
International Organization for Standardization (ISO)
Answer:
A true standards organization. It tests various products and provides its seal of approval once they pass
rigorous tests. The organization administers over 13,000 standards across many industries.
, Question:
Telecommunications Industry Association (TIA)
Answer:
Accredited by the American National Standards Institute (ANSI) to develop voluntary, consensus-based
industry standards for a wide variety of information and communication technologies (ICT) products and
currently represents nearly 400 companies
Question:
SANS Institute
Answer:
A private company formed in 1989 that provides training to the cyber security industry
Question:
Security Triad
Answer:
Confidentiality Availability Integrity
Question:
The Primary Security Categories
Answer:
Prevention Detection Recovery
Question:
Access Control Steps
Answer:
Identification Authentication Authorization Accounting Auditing
Question:
Risk
Answer:
A chance of damage or loss based upon the exposure to a potential hazard or threat.
Question:
Threat Vector
Answer:
A path that an attacker might take to take advantage of a vulnerability and do harm
Question:
Prudent Man Concept
Answer:
Refers to actions that may be REASONABLY TAKEN (or are obvious) to safeguard corporate assets and
data
Question:
Components of Risk
