论文安全管理习题ppt课件.pptVIP

QUIZ; QUIZ;; QUIZ; QUIZ;5 What is the main purpose of a security policy? A to transfer the responsibility for the information security to all users of the organization B to provide detailed steps for performing specific actions C to provide a common framework for all development activities D to provide the management direction and support for information security;6 Which of the following department managers would be best suited to oversee the development of an information security policy? A Security administration B Human resources C Business operations D Information systems;7 Which of the following is not a responsibility of an information owner? A Running regular backups and periodically testing the validity of the backup data. B Delegate the responsibility of data protection to data custodians. C Periodically review the classification assignments against business needs. D Determine what level of classification the information requires.;8 Which of the following is not a goal of integrity? A Prevention of the modification of information by unauthorized users. B Prevention of the unauthorized or unintentional modification of information by authorized users. C Prevention of the modification of information by authorized users. D Preservation of the internal and external consistency.;9 Why do many organizations require every employee to take a mandatory vacation of a week or more? A To lead to greater productivity through a better quality of life for the employee. B To reduce the opportunity for an employee to commit an improper or illegal act. C To provide proper cross training for another employee. D To allow more employees to have a better understanding of the overall system.;10 Which of the following would best relate to resources being used only for intended purposes? A Availability B Integrity C Reliability D Confidentiality;11 Security of computer-based information systems is which of the followin