SAINT LEO COM540 MODULE 4 MID TERM EXAM (40 QUESTIONS) 
 
SAINT LEO COM540 MODULE 4 MID TERM EXAM (40 QUESTIONS) 
 
Question 1. Question : 
The ____ is the point in time by which systems and data must be recovered after an outage as determined by the business unit. 
training objective 
recovery time objective 
dependency objective 
recovery point objective 
Question 2. Question : 
The ____ contains the rules and configuration guidelines governing the implementation and operation of IDSs within the organization. 
security policy 
log file 
honeypot 
site policy 
Question 3. Question : 
____ services are triggered by an event or request, such as a report of a compromised host, wide-spreading malicious code, software vulnerability, or something that was identified by an intrusion detection or logging system. 
Reactive 
Forensic 
Security 
Proactive 
Question 4. Question : 
A(n) ____ is a document containing contact information for the individuals that need to be notified in the event of an actual incident. 
root roster 
alert roster 
hierarchical roster 
sequential roster 
Question 5. Question : 
____ is the control approach that attempts to shift the risk to other assets, other processes, or other organizations. 
Acceptance 
Transference 
Mitigation 
Avoidance 
Question 6. Question : 
A ____ deals with the preparation for and recovery from a disaster, whether natural or man-made. 
risk assessment 
mitigation plan 
risk management 
disaster recovery plan 
Question 7. Question : 
Which of the following is a proactive service? 
Incident handling 
Risk analysis 
Announcements 
Alerts and warnings 
Question 8. Question : 
A favorite pastime of information security professionals is ____, which is realistic, head-to-head attack and defend information, security attacks, and incident response methods. 
parallel testing 
war gaming 
simulation 
structured walk-through 
Question 9. Question : 
In an organization, unexpected activities occur periodically; these are referred to as ____. 
warnings 
problems 
after-action 
events 
Question 10. Question : 
The ____ job functions focus more on costs of system creation and operation, ease of use for system users, and timeliness of system creation, as well as transaction response time. 
organizational management and professionals 
information technology management and professionals 
human resource management and professional 
information security management and professionals 
Question 11. Question : 
____ is the control approach that attempts to reduce the impact caused by the exploitation of vulnerability through planning and preparation. 
Acceptance 
Avoidance 
Transference 
Mitigation 
Question 12. Question : 
____ occurs when valid packets exploit poorly configured DNS servers to inject false information to corrupt the servers’ answers to routine DNS queries from other systems on that network. 
DNS cache poisoning 
Clipping 
Signature matching 
Clustering 
Question 13. Question : 
____ is a common approach used in the discipline of systems analysis and design. 
Database diagramming 
Network diagramming 
Application diagramming 
Systems diagramming 
Question 14. Question : 
A ____ is a document that expresses how an organization ensures that critical business functions continue at an alternate location while the organization recovers its ability to function at the primary site if a catastrophic incident or disaster occurs. 
risk assessment plan 
worm 
Trojan horse 
business continuity plan 
Question 15. Question : 
____ are important when team members are preparing advisories and procedures. 
Writing skills 
Forensic skills 
Medical skills 
Mathematical skills 
Question 16. Question : 
____ is an IDS’s ability to dynamically modify its site policies in reaction or response to environmental activity. 
Alarm Compaction 
True Attack Stimulus 
Confidence Value 
Site policy awareness 
Question 17. Question : 
A(n) ____ is any clearly identified attack on the organization’s information assets that wo

Saint Leo Com540 Module 4 Mid Term Exam (40 Questions) PDF

The list of books you might like