FiltersDone

Question type

Essay

Multiple Choice

Short Answer

True False

Matching

Exam 5: Developing the Security Program

Show Answer

Share

---

All types

Filters

Study FlashcardsPractice ExamLearn

Question 31

Multiple Choice

Review LaterAdd Note

Review Later

The purpose of SETA is to enhance security in all but which of the following ways?

A) by building in-depth knowledge
B) by adding barriers
C) by developing skills
D) by improving awareness

E) A) and B)
F) B) and C)

Correct Answer

verified

Show Answer

Question 32

Multiple Choice

Review LaterAdd Note

Review Later

GGG security is commonly used to describe which aspect of security?

A) technical
B) software
C) physical
D) theoretical

E) C) and D)
F) B) and D)

Correct Answer

verified

Show Answer

Question 33

Short Answer

Review LaterAdd Note

An organization's information security program refers to theentire set of activities,resources,personnel,and technologies used by an organization to manage the risks to the information _______ of the organization.

Small organizations spend more per user on security than medium- and large-sized organizations.

In the early stages of planning,the project planner should attempt to specify completion dates only for major employees within the project._________________________

List the steps of the seven-step methodology for implementing training.

Which function needed to implement the information security program includes researching,creating,maintaining,and promoting information security plans?

Which of the following is true about the security staffing,budget,and needs of a medium-sized organization?

Advanced technical training can be selected or developed based on which of the following?

Which of the following is a disadvantage of the one-on-one training method?

Project ____________________is adescription of a project's features,capabilities,functions,and quality level,used as the basis of a project plan.

Which of the following is NOT among the functions typically performed within the InfoSec department as a compliance enforcement obligation?

What is the purpose of a security awareness program?What advantage does an awareness program have for the InfoSec program?

Which of the following variables is the most influential in determining how to structure an information security program?

Which of the following is NOT a step in the process of implementing training?