Saint COM510 Chapter 3 Module Quiz Latest 2020

Ch. 3 - Module Quiz

Question 1

A statement explicitly declaring the business of the organization and its intended areas of operations is a ____________.

             Values statement

             Mission statement

             Vision statement

             Business statement

The individual responsible for the assessment, management, and implementation of information-protection activities in the organization is known as a(n).

             chief technology officer

             security technician

             chief information security officer

             security manager

The type of planning that is used to organize the ongoing, day-to-day performance of tasks is ____________?

             Strategic

             Operational

             Organizational

             Tactical

Which of these is a systems development approach that incorporates teams of representatives from multiple constituencies, including users, management, and IT, each with a vested interest in the project's success?

             sequence-driven policies

             software engineering

             joint application design

             event-driven procedures

Internal and external stakeholders such as customers, suppliers, or employees who interact with the information in support of their organization's planning and operations are known as ____________.

             data users

             data generators

             data owners

             data custodians

A senior executive who promotes the project and ensures its support, both financially and administratively, at the highest levels of the organization is needed to fill the role of a(n)____________on a development team.

             team leader

             champion

             policy developer

             end user

A set of security tests and evaluations that simulate attacks by a malicious external source is known as

____________.

             penetration testing

             safeguard neutralization

             vulnerability assessment

             exploit identification

The process of identifying and documenting specific and provable flaws in the organization's information asset environment is known as.

             safeguard neutralization

             penetration testing

             vulnerability assessment

             exploit identification

Individuals who control, and are therefore responsible for, the security and use of a particular set of information are known as ____________.

             data generators

             data custodians

             data owners

             data users

Which model of SecSDLC does the work product from each phase fall into the next phase to serve as its starting point?

             traditional waterfall

             time-boxed circular

             modular continuous

             elementary cyclical