S433 Module 3 Exam Study Guide
2026/2027 | Complete Exam Preparation |
Key Concepts, Questions & Answers
Which type of policy is not optional and must be adhered to? - correct answer-
Standard
Which of the following are considered PII that must be secured at all times?
(Choose two.) - correct answer-Driver's license number
Social Security number
What is the first step in creating a security policy? - correct answer-Obtain
management approval and support.
One of the network administrators in the office has been monitoring the proxy
server logs and notices that Bob has visited some inappropriate web sites. What
policy is this in violation of? - correct answer-AUP (Acceptable Use Policy)
The technical team is putting together the firewall solution and needs to know
what type of traffic is permitted to pass through the firewall. What policy can the
technical team use to find out what traffic is permitted to pass through the
firewall? - correct answer-Firewall policy
, The network administrator is configuring the network and wants to put
restrictions on user passwords such as the length of the password, password
complexity, and password history. Where can the administrator find out what the
values of those settings should be set to? - correct answer-Password policy
Jeff is the network administrator for a law firm and has just purchased 20 new
systems for the employees. Jeff has collected all of the old computers from the
employees and has searched through the hard drives and deleted any DOC and
XLS files before
handing the computers over to the local school. What policy may Jeff be in
violation of? - correct answer-Secure disposal of equipment policy
Data classification labels are applied to _______________, while clearance levels
are applied to _______________. - correct answer-information, employees
You are the data owner of a set of data that is considered sensitive to the
organization. If this information is leaked to the public, it could cause damage to
the organization. Which of the following classification labels would you assign to
the data? - correct answer-Private
Bob requires the capabilities to change the system time on the computers, but
instead of adding Bob to the Administrators group
(who can change the time on the computer), you grant Bob the Change System
Time right. This is an example of following which
security principle? - correct answer-Least privilege
2026/2027 | Complete Exam Preparation |
Key Concepts, Questions & Answers
Which type of policy is not optional and must be adhered to? - correct answer-
Standard
Which of the following are considered PII that must be secured at all times?
(Choose two.) - correct answer-Driver's license number
Social Security number
What is the first step in creating a security policy? - correct answer-Obtain
management approval and support.
One of the network administrators in the office has been monitoring the proxy
server logs and notices that Bob has visited some inappropriate web sites. What
policy is this in violation of? - correct answer-AUP (Acceptable Use Policy)
The technical team is putting together the firewall solution and needs to know
what type of traffic is permitted to pass through the firewall. What policy can the
technical team use to find out what traffic is permitted to pass through the
firewall? - correct answer-Firewall policy
, The network administrator is configuring the network and wants to put
restrictions on user passwords such as the length of the password, password
complexity, and password history. Where can the administrator find out what the
values of those settings should be set to? - correct answer-Password policy
Jeff is the network administrator for a law firm and has just purchased 20 new
systems for the employees. Jeff has collected all of the old computers from the
employees and has searched through the hard drives and deleted any DOC and
XLS files before
handing the computers over to the local school. What policy may Jeff be in
violation of? - correct answer-Secure disposal of equipment policy
Data classification labels are applied to _______________, while clearance levels
are applied to _______________. - correct answer-information, employees
You are the data owner of a set of data that is considered sensitive to the
organization. If this information is leaked to the public, it could cause damage to
the organization. Which of the following classification labels would you assign to
the data? - correct answer-Private
Bob requires the capabilities to change the system time on the computers, but
instead of adding Bob to the Administrators group
(who can change the time on the computer), you grant Bob the Change System
Time right. This is an example of following which
security principle? - correct answer-Least privilege
