Online Access Free 156-110 Exam Questions

A(n) _______ is the first step for determining which technical information assets should be protected.

• A.Network diagram
• B.Business Impact Analysis
• C.Firewall
• D.Office floor plan
• E.Intrusion detection system

The items listed below are examples of ___________________ controls.
*Procedures and policies
*Employee security-awareness training
*Employee background checks
*Increasing management security awareness

• A.Administrative
• B.Technical
• C.Role-based
• D.Physical
• E.Mandatory

Which of these strategies can be employed to test training effectiveness? (Choose
THREE.)

• A.Provide feedback forms for employees to rate instruction and training material, immediately after training has ended.
• B.Include auditors before and after the training. This checks to see if the number of security-related incidents is reduced, because of the training.
• C.Give incentives to employees who attend security-awareness training. Perform spot- checks, to see if incentives are displayed.
• D.Create a survey for managers, to see if participants practice behaviors presented during training.
• E.Test employees on security concepts several months after training has ended.

The items listed below are examples of ___________________ controls.
*Smart cards
*Access control lists
*Authentication servers
*Auditing

• A.Administrative
• B.Technical
• C.Role-based
• D.Physical
• E.Mandatory

A(n) ________________ is a one-way mathematical function that maps variable values into smaller values of a fixed length.

• A.Algorithm
• B.Symmetric key
• C.Integrity
• D.Hash function
• E.Back door