INFORMATION SYSTEMS SECURITY -
C845 QUIZZES QUESTIONS AND
ANSWERS WITH VERIFIED
SOLUTIONS 100%CORRECT
Which of the following is either created by a government entity or agreed upon by a
specific industry group?
Standard organization
Proprietary
Regulatory agency
Procedural standard - CORRECT ANSWES -- Regulatory agency
Which of the following organizations examines various products and provides its seal of
approval once they pass rigorous tests?
ISO
ANSI
NIST
SANS - CORRECT ANSWES -- ISO
Which property ensures that the system resources are protected from unauthorized,
unanticipated, or unintentional modifications?
Integrity
Confidentiality
Availability
Accountability - CORRECT ANSWES -- Integrity
Which of the following verifies that a control or process is performed as intended?
Due care
Prudent man
Due diligence
Vulnerability - CORRECT ANSWES -- Due diligence
Which step of the access control process provides strong evidence that an individual or
system is actually who they claim to be?
Accounting
Authentication
Authorization
Identification - CORRECT ANSWES -- Authentication
, Which of the following security techniques ensures that a single person does not have
too much power or control?
Mandatory vacations
Separation of duties
Two-man rule
Least privilege - CORRECT ANSWES -- Separation of duties
Which risk component describes any incident or action, if carried out, could cause harm
or loss of data or an asset?
Vulnerability
Control
Threat
Malware - CORRECT ANSWES -- Threat
Which user awareness training program is designed for audience, vendors, customers,
and senior executives, under exceptional conditions?
Mandatory security training
New hire orientation
Specialty security training
Corporate-wide security training - CORRECT ANSWES -- Specialty security training
Which of the following is an example of logical access control?
Security alarm
Infrared motion detector
Security and exchange commission
Intrusion detection system - CORRECT ANSWES -- Intrusion detection system
Which of the following is referred to as a Type I error?
Crossover error rate
False rejection rate
False acceptance rate - CORRECT ANSWES -- False rejection rate
Which of the following MAC models prohibits conflict of interest within an organization?
Clark-Wilson
Brewer-Nash
Biba
Bell-LaPadula - CORRECT ANSWES -- Brewer-Nash
Which was originally programmed for UNIX systems by Massachusetts Institute of
Technology (MIT)?
Kerberos
Single sign-on
Centralized authentication
Federated access - CORRECT ANSWES -- Kerberos
C845 QUIZZES QUESTIONS AND
ANSWERS WITH VERIFIED
SOLUTIONS 100%CORRECT
Which of the following is either created by a government entity or agreed upon by a
specific industry group?
Standard organization
Proprietary
Regulatory agency
Procedural standard - CORRECT ANSWES -- Regulatory agency
Which of the following organizations examines various products and provides its seal of
approval once they pass rigorous tests?
ISO
ANSI
NIST
SANS - CORRECT ANSWES -- ISO
Which property ensures that the system resources are protected from unauthorized,
unanticipated, or unintentional modifications?
Integrity
Confidentiality
Availability
Accountability - CORRECT ANSWES -- Integrity
Which of the following verifies that a control or process is performed as intended?
Due care
Prudent man
Due diligence
Vulnerability - CORRECT ANSWES -- Due diligence
Which step of the access control process provides strong evidence that an individual or
system is actually who they claim to be?
Accounting
Authentication
Authorization
Identification - CORRECT ANSWES -- Authentication
, Which of the following security techniques ensures that a single person does not have
too much power or control?
Mandatory vacations
Separation of duties
Two-man rule
Least privilege - CORRECT ANSWES -- Separation of duties
Which risk component describes any incident or action, if carried out, could cause harm
or loss of data or an asset?
Vulnerability
Control
Threat
Malware - CORRECT ANSWES -- Threat
Which user awareness training program is designed for audience, vendors, customers,
and senior executives, under exceptional conditions?
Mandatory security training
New hire orientation
Specialty security training
Corporate-wide security training - CORRECT ANSWES -- Specialty security training
Which of the following is an example of logical access control?
Security alarm
Infrared motion detector
Security and exchange commission
Intrusion detection system - CORRECT ANSWES -- Intrusion detection system
Which of the following is referred to as a Type I error?
Crossover error rate
False rejection rate
False acceptance rate - CORRECT ANSWES -- False rejection rate
Which of the following MAC models prohibits conflict of interest within an organization?
Clark-Wilson
Brewer-Nash
Biba
Bell-LaPadula - CORRECT ANSWES -- Brewer-Nash
Which was originally programmed for UNIX systems by Massachusetts Institute of
Technology (MIT)?
Kerberos
Single sign-on
Centralized authentication
Federated access - CORRECT ANSWES -- Kerberos
