1. Basic objectives of information
security include: confidentiality, integrity and accessibility of information.
⚪ A.
True
⚫ B.
False
2. Security vulnerability is occurred
naturally, and is not affected by human factors.
⚪ A.
True
⚫ B.
False
3. We need to verify the identity of the
external service providers, before allowing them to access confidential
information or systems.
⚫ A.
True
⚪ B.
False
4. Which of the following would MOST
effectively reduce social engineering incidents?
⚫ A.
Security awareness training
⚪ B.
Increased physical security measures
⚪ C.
Email monitoring policy
⚪ D.
Intrusion detection / prevention systems
5. Which one of the following should NOT
be used as an information security objective?
⚪ A.
Zero occurence of improper handling of sensitive information
⚫ B.
Notify affected customer of information leakage 90 days after incident
⚪ C.
98% or above of staff received and passed information security awareness
training
⚪ D.
Zero occurence of incorrect access right assignment
6. Which one of the following is NOT
recommended when terminating an employee?
⚪ A.
Delete all physical access privileges
⚪ B.
Organize an exit interview
⚫ C.
Escort the employee to leave the building before offboarding clearance
⚪ D.
Disable all logon accounts by last date of employment
7. Which one of the followings is NOT
acceptable?
⚪ A.
Assign unique reference numbers to customer access requests
⚫ B.
Pack equipment of different customers together to save storage spaces
⚪ C.
Verify equipment brand name and serial number during move-out
⚪ D.
Allow customer to bring and install additional power bars in their racks
8. The BEST way to ensure that
security settings on each platform are in compliance with information security
policies and procedures is to:
⚪ A.
Perform penetration testing
⚫ B.
Establish security baselines
⚪ C.
Implement vendor default settings
⚪ D.
Link policies to an independent standard
9. The FIRST priority when
responding to an information security incident is:
⚪ A.
Documentation
⚪ B.
Monitoring
⚪ C.
Restoration
⚫ D.
Containment
10. When an emergency security
patch is received via electronic mail, the patch should FIRST be:
⚪ A.
Loaded onto an isolated test machine
⚪ B.
Decompiled to check for mailicious code
⚫ C.
Validated to ensure its authenticity
⚪ D.
Copied onto write-once media to prevent tampering
