Test Bank For Information Security And IT Risk Management 1st Edition by Manish Agrawal

Test Bank For Information Security And IT Risk Management 1st Edition by Manish Agrawal

CHAPTER 5

1. 1. The majority of information security incidents are identified by 
      1. Organizations other than the affected organization
      2. Investigators
      3. The affected organizations
      4. Law enforcement

Answer: (a)

1. 1. The ISO standard for information security is
      1. ISO 9000
      2. ISO 27002
      3. ISO 14000
      4. ISO 3166

Answer: (b)

1. 1. Checklist-based approaches can be used to identify 
      1. Asset priorities
      2. Idiosyncratic assets
      3. General assets
      4. Assets

Answer: (c)

1. 1. Bottom-up and top-down approaches are needed to identify
      1. Asset priorities
      2. General assets
      3. Assets
      4. Idiosyncratic assets

Answer: (d)

1. 1. An example of a top-down approach to asset identification is 
      1. Reading the mission statement of the organization
      2. Talking to co-workers
      3. Reading on-boarding documentation
      4. All of the above

Answer: (a)

1. 1. Information assets are
      1. Software tools needed to accomplish the organization’s mission
      2. Digitally stored content owned by an individual or organization
      3. Employees whose departure could adversely affect the organization
      4. Machinery involved in supporting the business

Answer: (b)

1. 1. Personnel assets are
      1. Software tools needed to accomplish the organization’s mission
      2. Digitally stored content owned by an individual or organization
      3. Employees whose departure could adversely affect the organization
      4. Machinery involved in supporting the business

Answer: (c)

1. 1. Hardware assets are
      1. Software tools needed to accomplish the organization’s mission
      2. Digitally stored content owned by an individual or organization
      3. Employees whose departure could adversely affect the organization
      4. Machinery involved in supporting the business

Answer: (d)

1. 1. Software assets are
      1. Software tools needed to accomplish the organization’s mission
      2. Digitally stored content owned by an individual or organization
      3. Employees whose departure could adversely affect the organization
      4. Machinery involved in supporting the business

Answer: (a)

1. 1. In most organizations, the most important assets from the perspective of information security are
      1. Hardware assets
      2. Information assets
      3. Software assets
      4. Personnel assets

Answer: (b)