MIS 416 Exam 2 FinalXX (A+ Guaranteed)

True correct answers The principle of limiting users' access privileges to the specific information required to perform their assigned tasks is known as need-to-know. ____________ Mitigating correct answers Which of the following is NOT a category of access control? InfoSec Governance correct answers The COSO framework is built on five interrelated components. Which of the following is NOT one of them? Nondiscretionary correct answers Which type of access controls can be role-based or task-based? Need to know correct answers The ____________________ principle is based on the requirement that people are not allowed to view data simply because it falls within their level of clearance. Deterrent correct answers Which control category discourages an incipient incident? Least Privilege correct answers Which access control principle specifies that no unnecessary access to data exists by regulating members so they can perform only the minimum data manipulation necessary? False correct answers The data access principle that ensures no unnecessary access to data exists by regulating members so they can perform only the minimum data manipulation necessary is known as minimal privilege. ____________ Security Model correct answers To design a security program, an organization can use a(n) ____________________, which is a generic outline of the more thorough and organization-specific blueprint offered by a service organization. TCSEC correct answers Which security architecture model is part of a larger series of standards collectively referred to as the "Rainbow Series"? COBIT correct answers Which of the following provides advice about the implementation of sound controls and control objectives for InfoSec, and was created by ISACA and the IT Governance Institute? Reference Monitor correct answers Which piece of the Trusted Computing Base's security system manages access controls? Temporal Isolation correct answers A time-release safe is an example of which type of access control? Access Control List correct answers Under lattice-based access controls, the column of attributes associated with a particular object (such as a printer) is referred to as which of the following?