SANS Security's Foundation questions with verified
answers
"Something you have" authentication is also Ans✓✓✓ A token you hold in your
hand
A broad, general statement of management intent defines Ans✓✓✓ A policy
AAA Ans✓✓✓ Authentication, Authorization, Accountability
Acceptable Use Policy (AUP) Ans✓✓✓ Dictates what is and is not proper use of
company resources. One of the most common reasons for employee termination.
Accountability Ans✓✓✓ Tracking activity. While we know that Keith is Keith,
what did Keith do?
Administrative Ans✓✓✓ Policy, Procedure, Awareness
All awareness training must be Ans✓✓✓ Documented
An authentic system that requires you to authenticate using a username,
password and PIN number is Ans✓✓✓ Single factor authentication system
Another term for two-factor authentication is Ans✓✓✓ Strong authentication
Authentication Ans✓✓✓ the process of verifying someone's identity. Is Keith
really Keith?
, Authentication is Ans✓✓✓ The process of verifying identity
Authorization Ans✓✓✓ Capability decision process. While we know that Keith is
Keith, what can Keith do?
Cognitive passwords Ans✓✓✓ Ask you to answer a question that you answered
previously
Control AREAS Ans✓✓✓ Administrative, Technical, Physical
Control TYPES Ans✓✓✓ Prevent, Detect, Respond
Detect Ans✓✓✓ Logs, audits, Intrusion Detection
Dual control means Ans✓✓✓ No person can access data alone; it takes two
people
If completed correctly, a Non-Disclosure Agreement (NDA) is a legally binding
contract Ans✓✓✓ True
In court, computer-generated evidence is considered what type of evidence until
a judge rules otherwise? Ans✓✓✓ Hearsay
job rotation Ans✓✓✓ For critical functions (especially those dealing with money),
you periodically rotate someone else through the position.
answers
"Something you have" authentication is also Ans✓✓✓ A token you hold in your
hand
A broad, general statement of management intent defines Ans✓✓✓ A policy
AAA Ans✓✓✓ Authentication, Authorization, Accountability
Acceptable Use Policy (AUP) Ans✓✓✓ Dictates what is and is not proper use of
company resources. One of the most common reasons for employee termination.
Accountability Ans✓✓✓ Tracking activity. While we know that Keith is Keith,
what did Keith do?
Administrative Ans✓✓✓ Policy, Procedure, Awareness
All awareness training must be Ans✓✓✓ Documented
An authentic system that requires you to authenticate using a username,
password and PIN number is Ans✓✓✓ Single factor authentication system
Another term for two-factor authentication is Ans✓✓✓ Strong authentication
Authentication Ans✓✓✓ the process of verifying someone's identity. Is Keith
really Keith?
, Authentication is Ans✓✓✓ The process of verifying identity
Authorization Ans✓✓✓ Capability decision process. While we know that Keith is
Keith, what can Keith do?
Cognitive passwords Ans✓✓✓ Ask you to answer a question that you answered
previously
Control AREAS Ans✓✓✓ Administrative, Technical, Physical
Control TYPES Ans✓✓✓ Prevent, Detect, Respond
Detect Ans✓✓✓ Logs, audits, Intrusion Detection
Dual control means Ans✓✓✓ No person can access data alone; it takes two
people
If completed correctly, a Non-Disclosure Agreement (NDA) is a legally binding
contract Ans✓✓✓ True
In court, computer-generated evidence is considered what type of evidence until
a judge rules otherwise? Ans✓✓✓ Hearsay
job rotation Ans✓✓✓ For critical functions (especially those dealing with money),
you periodically rotate someone else through the position.
