SEC 360

Week 1 : Security Policy and Controls - Quiz Time Remaining: 1. (TCO 1) Defense-in-depth is a _____. (Points : 5) security requirement security model security strategy security policy security control 2. (TCO 1) Information security is the process of protecting all of the following except _____. (Points : 5) confidentiality of data data integrity availability of data data configuration information system availability 3. (TCO 1) An organization’s security posture is defined and...

. Question : (TCO 1) What are the three kinds of security policy clauses called? Student Answer: Shalls (mandatory), shall nots (prohibitive), and may (permissive) Mandatory, discretionary, and role based Mandatory, tentative, and optional Responsibilities, compliance, and roles Access control, identification, and authentication Instructor Explanation: Policy clauses are mandatory (shall), permissive (may), and prohibitive (shall not). (Week 1 Lecture) Points Received: 0 of 5 Comment...

Question 1 5 / 5 pts (TCO 10) A digital signature provides verification of _____ and _____. sender reliability, message integrity message authenticity, message integrity Correct! message integrity, sender authenticity message authenticity, sender integrity message reliability, message integrity The hash or message digest provides message integrity, and the private key provides sender authenticity. (lecture) Question 2 5 / 5 pts (TCO 10) Which of the following uses symmetric-key or s...

SEC 360 Week 8 Final Exam Multiple Choice Questions Question. (TCO 1) Information security is a process that protects all of the following except _____. Question. (TCO 2) The _____ of the 17 NIST control _____ can be placed into the 10 IISSCC _____ comprising the common body of knowledge for information security. Question. (TCO 2) What are the classes of security controls? Question. (TCO 3) Security policies, regardless of level, should ensure that _____ of assets is distinguished, ___ of peo...