0 [{"id":3909,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-17 01:00:22","updated_at":"2016-03-12 19:58:58","questionName":"What physical characteristics does a retinal scan biometric device manage?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":10,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":3905,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-17 00:53:56","updated_at":"2016-03-12 19:58:58","questionName":"In a discretionary mode, who has delegation authority to grant access to information?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":6,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":4312,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-17 09:56:14","updated_at":"2016-03-12 19:58:58","questionName":"ABZ Organization is constructing a new secure facility and has elected to install a two-tier access control system, which will consist of proximity badges and biometric devices. The system security professional is tasked with acquiring the access control systems. The only requirement are to keep cost as low as possible and minimize down time. While evaluating the effectiveness of several new devices, the security professional should expect that a biometric device becomes more sensitive when","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":14,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":3900,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-16 18:15:19","updated_at":"2016-03-12 19:58:58","questionName":"International Organization for Standardization (ISO) standard 27002 provides guidance for vendor compliance by outlining","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":2,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":3903,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-16 18:18:47","updated_at":"2016-03-12 19:58:58","questionName":"Important documents that have been soaked in water during fire suppression efforts should be restored by","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":5,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":3908,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-17 00:58:41","updated_at":"2016-03-12 19:58:58","questionName":"The best practice to prevent logging clutter in application security is to","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":9,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":4310,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-17 09:51:40","updated_at":"2016-03-12 19:58:58","questionName":"To support legacy applications that rely on risky protocols (e.g., plain text passwords), which one of the following can be implemented to mitigate the risks on a corporate network?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":12,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":3902,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-16 18:17:46","updated_at":"2016-03-12 19:58:58","questionName":"Which of the following backup processing alternatives describes a computing facility with telecommunications equipment, some systems but minimal data?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":4,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":3907,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-17 00:57:15","updated_at":"2016-03-12 19:58:58","questionName":"What is the purpose of the Encapsulating Security Payload (ESP) in the Internet Protocol (IP) Security Architecture for Internet Protocol Security (IPSec)?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":8,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":3898,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-16 18:12:15","updated_at":"2016-03-12 19:58:58","questionName":"Which one of the following is the MOST effective method for reducing security vulnerabilities associated with building entrances?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":0,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":4309,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-17 09:49:22","updated_at":"2016-03-12 19:58:58","questionName":"Which of the following defines the intent of a system security policy?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":11,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":3906,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-17 00:55:15","updated_at":"2016-03-12 19:58:58","questionName":"Which of the following is an industry specific standard that PRIMARILY deals with privacy matters?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":7,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":4311,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-17 09:52:38","updated_at":"2016-03-12 19:58:58","questionName":"What is the recommended frequency that a system recovery plan be tested in a stable data processing environment?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":13,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":3901,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-16 18:16:40","updated_at":"2016-03-12 19:58:58","questionName":"Which of the following is the MAIN advantage of having an application gateway?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":3,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":3899,"quiz_id":"361","answer_id":null,"answerType_id":"0","created_at":"2015-07-16 18:13:50","updated_at":"2016-03-12 19:58:58","questionName":"Why is projection lighting mounted at the same height as the barbed wire topping of a fence?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":1,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null}]

block

What physical characteristics does a retinal scan biometric device manage?

Select the correct answer(s).  

(0/0)

---

The size, curvature, and shape of the retina

The pattern of blood vessels on the retina

The amount of light reaching the retina

The amount of light reflected by the retina

none

In a discretionary mode, who has delegation authority to grant access to information?

Select the correct answer(s).  

(0/0)

---

Owner

Group leader

Security officer

User

none

ABZ Organization is constructing a new secure facility and has elected to install a two-tier access control system, which will consist of proximity badges and biometric devices. The system security professional is tasked with acquiring the access control systems. The only requirement are to keep cost as low as possible and minimize down time. While evaluating the effectiveness of several new devices, the security professional should expect that a biometric device becomes more sensitive when

Select the correct answer(s).  

(0/0)

---

the FAR increases while the FRR decreases

both the FAR and FRR decrease

the FAR decreases while the FRR increases.

both the False Acceptance Rate (FAR) and False Rejection Rate (FRR) increase.

none

International Organization for Standardization (ISO) standard 27002 provides guidance for vendor compliance by outlining

Select the correct answer(s).  

(0/0)

---

standard best practice for procurement policy

guidelines and practices of security controls

financial soundness and business viability metrics

contract agreement writing standards

none

Important documents that have been soaked in water during fire suppression efforts should be restored by

Select the correct answer(s).  

(0/0)

---

fire department specialists

document recovery specialists

Human Resources personnel

document library personnel

none

The best practice to prevent logging clutter in application security is to

Select the correct answer(s).  

(0/0)

---

log an exception when the exception is wrapped with another exception and propogate

disable debug level logging in a production environment

catch and log exceptions at every level in the software

catch and log exceptions only at points at which exceptions are actually handled

none

To support legacy applications that rely on risky protocols (e.g., plain text passwords), which one of the following can be implemented to mitigate the risks on a corporate network?

Select the correct answer(s).  

(0/0)

---

Implement a Virtual Private Network (VPN) with controls on workstations joining the VPN

Implement strong, centrally-generated passwords to control use of the vulnerable applications.

Use physical access controls to ensure that only authorized, trained users have access to workstations.

Ensure audit logging is enabled on all hosts and applications with frequent log reviews.

none

Which of the following backup processing alternatives describes a computing facility with telecommunications equipment, some systems but minimal data?

Select the correct answer(s).  

(0/0)

---

Company-owned hot site

Cold site

Warm site

Commercial hot site

none

What is the purpose of the Encapsulating Security Payload (ESP) in the Internet Protocol (IP) Security Architecture for Internet Protocol Security (IPSec)?

Select the correct answer(s).  

(0/0)

---

To provide non-repudiation and confidentiality for IP transmissions

To provide integrity and confidentiatlity for IP transmissions

To provide key management and key distribution for IP transmissions

To provide integrity and authentication for IP transmissions

none

Which one of the following is the MOST effective method for reducing security vulnerabilities associated with building entrances?

Select the correct answer(s).  

(0/0)

---

Use solid metal doors and frames

Minimize the number of entrances

install tamperproof hinges and glass

Brightly illuminate the entrances

none

Which of the following defines the intent of a system security policy?

Select the correct answer(s).  

(0/0)

---

A brief high-level statement defining what is and is not permitted in the operation of the system

A description of the settings that will provide the highest level of security

A definition of those items that must be denied on the system

A listing of tools and applications that will be used to protect the system

none

Which of the following is an industry specific standard that PRIMARILY deals with privacy matters?

Select the correct answer(s).  

(0/0)

---

European Union Principles

Control Objectives for Information and Related Technology (COBIT)

The Wassenaar Agreement

International Organization for Standardization (ISO) 9001:2000

none

What is the recommended frequency that a system recovery plan be tested in a stable data processing environment?

Select the correct answer(s).  

(0/0)

---

Once to validate the plan

Quarterly or semiannually

When applications are modified

Prior to all audits

none

Which of the following is the MAIN advantage of having an application gateway?

Select the correct answer(s).  

(0/0)

---

To provide a means for applications to move into production

To audit and approve changes to applications

To performan change control procedures for applications

To log and control incoming and outgoing application traffic

none

Why is projection lighting mounted at the same height as the barbed wire topping of a fence?

Select the correct answer(s).  

(0/0)

---

It makes it easier to observe an intruder climbing over the fence

It lowers the height and cost of observation towers

It blinds the approaching intruders view of the scene.

It increases the field of view for those observing the scene