Question 1

Describe the position of security manager.

Accepted Answer

A security manager is accountable for th...

Question 2

Briefly describe the classifications of InfoSec positions as defined by Schwartz et al.

Accepted Answer

Definers provide the policies,guidelines...

Question 3

an organization  that developed a series of technical security certifications such as the GIAC

Accepted Answer

A)   Definers
B)   Builders
C)   security manager
D)   security technician
E)   systems programmerF)  ethics officerG)  CISSPH)  SSCPI)  SANSJ)  CCE

Question 4

Which of the following InfoSec positions is responsible for the day-to-day operation of the InfoSec program?

Accepted Answer

A)   CISO
B)   Security manager 
C)   Security officer
D)   Security technician

Question 5

computer forensics certification from ISFCE

Accepted Answer

A)   Definers
B)   Builders
C)   security manager
D)   security technician
E)   systems programmerF)  ethics officerG)  CISSPH)  SSCPI)  SANSJ)  CCE

Question 6

Maintaining a secure environment requires that the information security (InfoSec)department be carefully structured and staffed with appropriately skilled and screened personnel.

Accepted Answer

A) True 
 B)False

Question 7

a member of the general business community having an information security related role

Accepted Answer

A)   Definers
B)   Builders
C)   security manager
D)   security technician
E)   systems programmerF)  ethics officerG)  CISSPH)  SSCPI)  SANSJ)  CCE

Question 8

The most common qualification for a CISO includes the CISSP and CISM certifications.

Accepted Answer

A) True 
 B)False  True

Question 9

It is the responsibility of a _______________________ to develop appropriate InfoSec policies,standards,guidelines,and procedures.

Accepted Answer

The answer of It is the responsibility of a _______________________...

Question 10

Which of the following policies requires that two individuals review and approve each other's work before the task is considered complete?

Accepted Answer

A)   Task rotation
B)   Two-person control 
C)   Separation of duties
D)   Job rotation

Question 11

Which of the following is NOT a task that must be performed if an employee is terminated?

Accepted Answer

A)   Former employee must return all media 
B)   Former employee's home computer must be audited 
C)   Former employee's office computer must be secured 
D)   Former employee should be escorted from the premises

Question 12

InfoSec is a profession with little personnel turnover - most InfoSec professionals stay in their positions for a very long time.

Accepted Answer

A) True 
 B)False  False

Question 13

Temporary hires called contract employees - or simply contractors - should not be allowed to do what?

Accepted Answer

A)   Work on the premises
B)   Wander freely in and out of buildings 
C)   Visit the facility without specific, prior coordination
D)   Compensated by the organization based on hourly rates

Question 14

Which of the following is a responsibility of an InfoSec technician?

Accepted Answer

A)   Developing InfoSec requirements for the organization 
B)   Providing hands-on technical consulting services to teams of technical specialists 
C)   Establishing procedures for the identification of information assets 
D)   Managing the development of InfoSec policies B

Question 15

A technically qualified individual who may configure firewalls and IDPSs, implement security software,diagnose and troubleshoot problems,and coordinate with systems and network administrators to ensure that security technical controls are properly implemented is known as a security architect.

Accepted Answer

A) True 
 B)False

Question 16

According to Schwartz et al.,employees who create and install security solutions fall under which classification of InfoSec positions?

Accepted Answer

A)   Definers
B)   Administers 
C)   Builders
D)   Architects

Question 17

A security manager is accountable for the day-to-day operation of all or part of the InfoSec program.

Accepted Answer

A) True 
 B)False

Question 18

a member of the IT community often responsible for complex operating system programs

Accepted Answer

A)   Definers
B)   Builders
C)   security manager
D)   security technician
E)   systems programmerF)  ethics officerG)  CISSPH)  SSCPI)  SANSJ)  CCE

Question 19

Which of the following is NOT a typical task performed by the security technician?

Accepted Answer

A)   Configure firewalls and IDPSs
B)   Decvelop security policy 
C)   Coordinate with systems and network administrators
D)   Implement advanced security appliances

Question 20

create and install security solutions

Accepted Answer

A)   Definers
B)   Builders
C)   security manager
D)   security technician
E)   systems programmerF)  ethics officerG)  CISSPH)  SSCPI)  SANSJ)  CCE

Exam 11: Personnel and Security

Describe the position of security manager.

Correct AnswerverifiedA security manager is accountable for th...View AnswerShow Answer

Briefly describe the classifications of InfoSec positions as defined by Schwartz et al.

Correct AnswerverifiedDefiners provide the policies,guidelines...View AnswerShow Answer

an organization that developed a series of technical security certifications such as the GIAC

Correct AnswerverifiedShow Answer

Which of the following InfoSec positions is responsible for the day-to-day operation of the InfoSec program?

Correct AnswerverifiedShow Answer

computer forensics certification from ISFCE

Correct AnswerverifiedShow Answer

Maintaining a secure environment requires that the information security (InfoSec)department be carefully structured and staffed with appropriately skilled and screened personnel.

Correct AnswerverifiedShow Answer

a member of the general business community having an information security related role

Correct AnswerverifiedShow Answer

The most common qualification for a CISO includes the CISSP and CISM certifications.

Correct AnswerverifiedTrue

It is the responsibility of a _______________________ to develop appropriate InfoSec policies,standards,guidelines,and procedures.

Correct AnswerverifiedShow Answer

Which of the following policies requires that two individuals review and approve each other's work before the task is considered complete?

Correct AnswerverifiedShow Answer

Which of the following is NOT a task that must be performed if an employee is terminated?

Correct AnswerverifiedShow Answer

InfoSec is a profession with little personnel turnover - most InfoSec professionals stay in their positions for a very long time.

Correct AnswerverifiedFalse

Temporary hires called contract employees - or simply contractors - should not be allowed to do what?

Correct AnswerverifiedShow Answer

Which of the following is a responsibility of an InfoSec technician?

Correct AnswerverifiedB

A technically qualified individual who may configure firewalls and IDPSs, implement security software,diagnose and troubleshoot problems,and coordinate with systems and network administrators to ensure that security technical controls are properly implemented is known as a security architect.

Correct AnswerverifiedShow Answer

According to Schwartz et al.,employees who create and install security solutions fall under which classification of InfoSec positions?

Correct AnswerverifiedShow Answer

A security manager is accountable for the day-to-day operation of all or part of the InfoSec program.

Correct AnswerverifiedShow Answer

a member of the IT community often responsible for complex operating system programs

Correct AnswerverifiedShow Answer

Which of the following is NOT a typical task performed by the security technician?

Correct AnswerverifiedShow Answer

create and install security solutions

Correct AnswerverifiedShow Answer

Correct Answer
verified
A security manager is accountable for th...
View Answer

Correct Answer
verified
Definers provide the policies,guidelines...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
True

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
False

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified