SSCP - Chapter 2 Exam Questions With All Correct Detailed Answers A+ Pass

SSCP - Chapter 2 Exam Questions With All Correct Detailed Answers A+ Pass How do you turn data into knowledge? - Answer- You use lots of data to observe general ideas and then test those ideas with more data you observe, until you can finally make broad, general conclusions. These conclusions are what called knowledge. Which is more important to a business - its information or its information technology? - Answer- The information is more important, because all that the information technology does it make the information available to people to make decisions with. As the IT security directory, Paul does not have anybody looking at systems monitoring or event logging data. Which set of responsibilities is Paul in violation of? - Answer- Due diligence Explain the relationship between confidentiality and privacy, if any? - Answer- Confidentiality is about keeping information secret so that we retain advantage or do not come to harm; privacy is about choosing who can enter into one's life or property. Jayne discovers that someone in the company's HR department has been modifying employee performance appraisals. If done without proper authorization, this would be what kind of violation? - Answer- Integrity At a job interview, Fred is asked by the interviewer about activities, pictures, and statements he's made by posting things on his Facebook and LinkedIn pages. This question by the interviewer: - Answer- Is a legitimate one, since these pages are published by Fred, and therefore they are speech he has made in public places. A thunderstorm knocks out the commercial electric power to your company's datacenter, shutting down everything. This impacts which aspect of information security? - Answer- Availability Business logic is: - Answer- The design of processes to achieve an objective within the rules and constraints the business must operate within. How does business logic relate to information security? - Answer- Business logic represents decisions the company has made and may give it a competitive advantage over others in the marketplace; it needs to be protected from unauthorized disclosure or unauthorized change. Processes that implemented the business logic need to be available to be run or used when needed. Thus, confidentiality, integrity, and availability apply. Your company uses computer-controlled machine tools on the factory floor as part of its assembly line. This morning, you've discovered that somebody erased a key set of machine control parameter files, and the backups you have will need to be updated and verified before you can use them. This may take most of the day to accomplish. What information security attribute is involved here? - Answer- Integrity Protection of intellectual property (IP) is an example of what kind of information security need? - Answer- Confidentiality John works as the chief information security officer for a medium-sized chemical processing firm. Which of the following groups of people would not be stakeholders in the ongoing operation of this business? - Answer- State and local tax authorities When you compare safety to security for information systems, which of the following statements are correct? (Choose all the apply) - Answer- AC Why is the preamble to (ISC)^2 Code of Ethics important to us as SSCPs? - Answer- It is vital to understand the code because it sets purpose and intentions; it's our mission statement as professionals. Due diligence means: - Answer- Making sure that actions you've taken to fulfill your responsibilities are working correctly and completely