{"id":19820,"date":"2021-12-02T16:05:07","date_gmt":"2021-12-02T16:05:07","guid":{"rendered":"https:\/\/assignmenttutors.net\/blog\/multiple-choice-information-systems-homework-help\/"},"modified":"2021-12-02T16:05:07","modified_gmt":"2021-12-02T16:05:07","slug":"multiple-choice-information-systems-homework-help","status":"publish","type":"post","link":"https:\/\/assignmenttutors.net\/blog\/multiple-choice-information-systems-homework-help\/","title":{"rendered":"Multiple choice | Information Systems homework help"},"content":{"rendered":"
\n

\u00a0\u00a0<\/p>\n

1. Which of the following elements ensures a policy is enforceable?\u00a0<\/p>\n

Options:<\/p>\n

\u00a0<\/p>\n

A. Compliance can be measured.<\/p>\n

B. Appropriate sanctions are applied when the policy is violated.<\/p>\n

C. Appropriate administrative, technical, and physical controls are put in place to support the policy.<\/p>\n

D. the above.\u00a0<\/p>\n

2. Which of the following is an example of an information asset?<\/p>\n

Options:\u00a0<\/p>\n

A. Business plans<\/p>\n

B. Employee records<\/p>\n

C. Company reputation<\/p>\n

D. All the above<\/p>\n

3. Endorsed is one of the seven policy characteristics. Which of the following statements best describes endorsed?\u00a0<\/p>\n

A. The policy is supported by management.<\/p>\n

B. The policy is accepted by the organization\u2019s employees.<\/p>\n

C. \u00a0The policy is mandatory; compliance is measured; and appropriate sanctions are applied.<\/p>\n

D. \u00a0The policy is regulated by the government.<\/p>\n

4. Which of the following statement about standards and guidelines is true?\u00a0<\/p>\n

A. Standards are mandatory, whereas guidelines are not.<\/p>\n

B. Guidelines are mandatory, whereas standards are not.<\/p>\n

C. \u00a0Both standards and guidelines are mandatory.<\/p>\n

D. \u00a0Neither standards nor guidelines are mandatory.\u00a0<\/p>\n

5. Which of the following grants users and systems a predetermined level of access?\u00a0<\/p>\n

A. Accountability<\/p>\n

B. Authentication<\/p>\n

C. \u00a0Authorization<\/p>\n

D. Assurance \u00a0<\/p>\n

6. What is the purpose of the policy definition section?\u00a0<\/p>\n

A. To explain terms, abbreviations, and acronyms used in the policy\u00a0<\/p>\n

B. To refer the reader to additional information\u00a0<\/p>\n

C. To provide the policy version number<\/p>\n

D. To provide information about policy exceptions\u00a0<\/p>\n

7. Which of the following statement about standards and guidelines is true?\u00a0<\/p>\n

A. Standards are mandatory, whereas guidelines are not.<\/p>\n

B. Guidelines are mandatory, whereas standards are not.<\/p>\n

C. \u00a0Both standards and guidelines are mandatory.<\/p>\n

D. \u00a0Neither standards nor guidelines are mandatory.\u00a0<\/p>\n

8. Which of the following best describes a procedure?\u00a0<\/p>\n

A. Specifications for implementation of a policy<\/p>\n

B. Instructions on how a policy is carried out<\/p>\n

C. \u00a0Aggregate of implementation standards and security controls<\/p>\n

D. \u00a0Teaching tools that help people conform to a policy\u00a0<\/p>\n

9. Which of the following is the topmost object in the policy hierarchy?\u00a0<\/p>\n

A. Standards<\/p>\n

B. Baselines<\/p>\n

C. \u00a0Guidelines<\/p>\n

D. \u00a0Guiding principles\u00a0<\/p>\n

10. Which of the following is a network of the national standards institutes of 146 countries?\u00a0<\/p>\n

A. ISO<\/p>\n

B. NIST<\/p>\n

C. FIPS<\/p>\n

D. IEC<\/p>\n

11. Which of the following is a behavioral control that can be used to safeguard against the loss of integrity?\u00a0<\/p>\n

A. Rotation of duties<\/p>\n

B. Log analysis<\/p>\n

C. \u00a0Code testing<\/p>\n

D. \u00a0Digital signatures<\/p>\n

12. Which of the following is a characteristic of the parallel approach to information security?\u00a0<\/p>\n

A. Compliance is discretionary.<\/p>\n

B. Security is the responsibility of the IT department.<\/p>\n

C. \u00a0Little or no organizational accountability exists.<\/p>\n

D. \u00a0All the above.<\/p>\n

13. Which of the following is the objective of risk assessment?\u00a0<\/p>\n

A. Identify the inherent risk.<\/p>\n

B. Determine the impact of a threat.\u00a0<\/p>\n

C. \u00a0Calculate the likelihood of a threat occurrence.\u00a0<\/p>\n

D. \u00a0All the above.<\/p>\n

14. Which of the following statements best describes strategic risk?\u00a0<\/p>\n

A. Risk that relates to monetary loss<\/p>\n

B. Risk that relates to adverse business decisions<\/p>\n

C. \u00a0Risk that relates to a loss from failed or inadequate systems and processes<\/p>\n

D. \u00a0Risk that relates to violation of laws, regulations, or policy<\/p>\n

15. Which of the following statements best describes the Biba security model?\u00a0<\/p>\n

A. No read up and write up<\/p>\n

B. No write up and no write down<\/p>\n

C. No read up and no write down<\/p>\n

D. No read down and no write up<\/p>\n

16. : Which of the following is the heist classification level under the private sector classification system?\u00a0<\/p>\n

A. Secret<\/p>\n

B. Protected<\/p>\n

C. \u00a0Confidential<\/p>\n

D. \u00a0Top secret<\/p>\n

17. Which of the following best describes the purpose of security awareness?\u00a0<\/p>\n

A. To teach skills that would allow a person to perform a certain function<\/p>\n

B. To focus attention on security<\/p>\n

C. \u00a0To integrate all the security skills and competencies into a common body of knowledge<\/p>\n

D. \u00a0To involve management in the process<\/p>\n

18. \u00a0Which of the following regulations explicitly specifies the topics that should be covered in a security awareness training?\u00a0<\/p>\n

A. FACTA<\/p>\n

B. HIPAA<\/p>\n

C. \u00a0FCRA<\/p>\n

D. \u00a0DPPA<\/p>\n

19. : Which of the following is a type of access control that is defined by a policy and cannot be changed by the information owner? \u00a0<\/p>\n

A. Mandatory access control<\/p>\n

B. Discretionary access control\u00a0<\/p>\n

C. Role-based access control<\/p>\n

D. Rule-based access control\u00a0<\/p>\n

20. : Which of the following is an access control that is based on a specific job roles or functions?\u00a0<\/p>\n

A. Mandatory access control<\/p>\n

B. Discretionary access control\u00a0<\/p>\n

C. \u00a0Role-based access control<\/p>\n

D. \u00a0Rule-based access control\u00a0<\/p>\n

21. : Which of the following is used to associate a public key with an identity?\u00a0<\/p>\n

A. Encryption<\/p>\n

B. Digital hash<\/p>\n

C. \u00a0Digital certificate<\/p>\n

D. \u00a0Digital signature<\/p>\n

22. : Identification of compliance requirements is done during which of the following phases of the SDLC?\u00a0<\/p>\n

A. Initiation<\/p>\n

B. Development\u00a0<\/p>\n

C. \u00a0Implementation<\/p>\n

D. \u00a0Operational\u00a0<\/p>\n

23. Which of the following is the most common web application vulnerability?\u00a0<\/p>\n

A. Failure to validate output<\/p>\n

B. Failure to validate input<\/p>\n

C. \u00a0Dynamic data validation<\/p>\n

D. \u00a0Static data validation\u00a0<\/p>\n

24. Which of the following are components of PKI?\u00a0<\/p>\n

A. Certification Authority<\/p>\n

B. Registration Authority<\/p>\n

C. \u00a0Client nodes<\/p>\n

D. \u00a0All the above<\/p>\n

25. : Which of the following best describes the purpose of the detection and investigation portion of the incident response plan?\u00a0<\/p>\n

A. To describe the steps that need to be taken to prevent the incident from spreading<\/p>\n

B. To establish processes and knowledge base to accurately detect and assess precursors and indicators<\/p>\n

C. To describe incident declaration and notification<\/p>\n

D. To describe the steps to eliminate the components of the incident<\/p>\n

26. : Which of the following is the total length of time an essential business function can be unavailable without causing significant harm to the organization?\u00a0<\/p>\n

A. Maximum tolerable downtime<\/p>\n

B. Maximum tolerable uptime<\/p>\n

C. \u00a0Recovery time objective<\/p>\n

D. \u00a0Recovery point objective\u00a0<\/p>\n

27. Which of the following plans focuses on the initial response and includes plan activation, notification, evacuation, and communication?\u00a0<\/p>\n

A. Response plans<\/p>\n

B. Contingency plans<\/p>\n

C. \u00a0Recovery plans\u00a0<\/p>\n

D. \u00a0Resumption plans\u00a0<\/p>\n

28. : Which of the following agencies regulates financial institutions not covered by other agencies?\u00a0<\/p>\n

A. Federal Trade Commission (FTC)<\/p>\n

B. Commodity Futures Trading Commission (CFTC)<\/p>\n

C. \u00a0National Credit Union Administration (NCUA)<\/p>\n

D. \u00a0Federal Deposit Insurance Corporation (FDIC)<\/p>\n

29. The Federal Reserve Board is responsible for regulating which of the following?<\/p>\n

A. Bank holding companies and member banks of the Federal Reserve System<\/p>\n

B. National banks, federal saving associations, and federal branches of foreign banks<\/p>\n

C. Federally charted credit unions<\/p>\n

D. State-chartered banks\u00a0<\/p>\n

30. : Which of the following statements best describes a healthcare clearing house?<\/p>\n

A. A person or organization that provides patient or medical services<\/p>\n

B. An entity that provides payment for medical services<\/p>\n

C. \u00a0An entity that processes nonstandard health information it receives from another entity<\/p>\n

D. \u00a0A person or entity that creates, receives, maintains, transmits, accesses, or has the potential to access ePHI\u00a0<\/p>\n

31. Which of the following best describes HIPAA administrative safeguards?\u00a0<\/p>\n

A. Retention, availability, and update requirements related to supporting documentation<\/p>\n

B. The use of technical security measures to protect ePHI data<\/p>\n

C. \u00a0Standards for business associate contracts and other arrangement<\/p>\n

D. \u00a0Documented policies and procedures for managing day-to-day operations and access to ePHI<\/p>\n

32. : Which of the following statements best describes the HIPAA breach notification rules?\u00a0<\/p>\n

A. Covered entities are required to notify individuals for any ePHI breach within 60 days after the discovery of the breach.<\/p>\n

B. Covered entities are required to notify individuals for breach of unsecured ePHI within 60 days after the discovery of the breach.<\/p>\n

C. \u00a0Covered entities are required to notify individuals for any ePHI breach within 30 days after the discovery of the breach.<\/p>\n

D. \u00a0Covered entities are required to notify individuals for breach of unsecured ePHI within 30 days after the discovery of the breach.<\/p>\n

33. : Which of the following is the goal of integrity control standard?\u00a0<\/p>\n

A. Implementing technical controls that protect ePHI from improper alteration or destruction<\/p>\n

B. Restrict access to ePHI only to users and processes that have been specifically authorized<\/p>\n

C. Implementing of hardware, software, and mechanisms that record and examine activity in information systems that contain ePHI<\/p>\n

D. Verification that a person or process seeking to access ePHI is the one claimed<\/p>\n

34. Which of the following is not one of the classification levels for national security information?\u00a0<\/p>\n

A. Secret<\/p>\n

B. Protected<\/p>\n

C. \u00a0Confidential<\/p>\n

D. \u00a0Sensitive but Unclassified<\/p>\n

35. Which of the following is an evidence-based examination that compares current practices against internal or external criteria?\u00a0<\/p>\n

A. Testing<\/p>\n

B. Audit<\/p>\n

C. \u00a0Assurance<\/p>\n

D. \u00a0Assessment\u00a0<\/p>\n

\u00a0<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

\u00a0\u00a0 1. Which of the following elements ensures a policy is enforceable?\u00a0 Options: \u00a0 A. Compliance can be measured. B. Appropriate sanctions are applied when the policy is violated. C. Appropriate administrative, technical, and physical controls are put in place to support the policy. D. the above.\u00a0 2. Which of the following is an example […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-19820","post","type-post","status-publish","format-standard","hentry","category-homework-help"],"_links":{"self":[{"href":"https:\/\/assignmenttutors.net\/blog\/wp-json\/wp\/v2\/posts\/19820","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/assignmenttutors.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/assignmenttutors.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/assignmenttutors.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/assignmenttutors.net\/blog\/wp-json\/wp\/v2\/comments?post=19820"}],"version-history":[{"count":0,"href":"https:\/\/assignmenttutors.net\/blog\/wp-json\/wp\/v2\/posts\/19820\/revisions"}],"wp:attachment":[{"href":"https:\/\/assignmenttutors.net\/blog\/wp-json\/wp\/v2\/media?parent=19820"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/assignmenttutors.net\/blog\/wp-json\/wp\/v2\/categories?post=19820"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/assignmenttutors.net\/blog\/wp-json\/wp\/v2\/tags?post=19820"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}