Skip to main content

Information Security Management Pre-Test Questions - 251 Verified Questions

Page 1


Information Security Management

Pre-Test Questions

Course Introduction

Information Security Management focuses on the strategies, policies, and procedures used to protect an organizations information assets from threats and vulnerabilities. This course covers fundamental concepts including risk management, security frameworks, regulatory compliance, incident response, and the role of leadership in creating a security-conscious culture. Students will explore real-world case studies, learn about best practices in aligning information security with business objectives, and develop skills in designing and implementing effective security management programs.

Recommended Textbook

Disaster Recovery Principles and Practices 1st Edition by April Wells

Available Study Resources on Quizplus

9 Chapters

251 Verified Questions

251 Flashcards

Source URL: https://quizplus.com/study-set/2239

2

Chapter 1: Introduction to Disaster Recovery

Available Study Resources on Quizplus for this Chatper

23 Verified Questions

23 Flashcards

Source URL: https://quizplus.com/quiz/44514

Sample Questions

Q1) Disaster recovery is __________ an information technology (IT)problem.

A)mostly

B)only

C)not just

D)not

Answer: C

Q2) __________ may gain a competitive advantage as customers seek products and services the affected company can no longer provide.

Answer: Competitors

Q3) Disaster recovery is the ability of a company to recover from a(n)__________ and get back to business as usual.

Answer: catastrophe

Q4) What is one of the leading causes of system loss seen by organizations?

A)Lack of a sprinkler system

B)Lack of security in a computer system

C)Lack of a tornado shelter

D)Lack of qualified employees

Answer: B

To view all questions and flashcards with answers, click on the resource link above. Page 3

Chapter 2: Preparing to Develop the Disaster Recovery Plan

Available Study Resources on Quizplus for this Chatper

41 Verified Questions

41 Flashcards

Source URL: https://quizplus.com/quiz/44515

Sample Questions

Q1) It is often difficult to get complete management buy-in to a disaster recovery plan because the ______________________ associated with the cost of developing the plan and securing the necessary resources is rarely realized.

Answer: return on investment

Q2) User Support Team

A) maintains shipping

B) first responders

C) physically secures backup materials

D) provides assistance to end-users

E) ensures interests of the

Answer: D

Q3) Which two disaster recovery sub-teams are likely to be manned by the same people?

A)Facilities Support Team/Damage Assessment Team

B)Departmental Recovery Team/Business Recovery Team

C)Logistics Support Team/ Facilities Support Team

D)Computer Backup Team/Computer Recovery Ream

Answer: D

To view all questions and flashcards with answers, click on the resource link above. Page 4

Chapter 3: Assessing Risk and Impact

Available Study Resources on Quizplus for this Chatper

43 Verified Questions

43 Flashcards

Source URL: https://quizplus.com/quiz/44516

Sample Questions

Q1) For each asset that the company identifies,it needs to identify all the __________ that could impact each of the assets.

Answer: events or disasters

Q2) OCTAVE,a highly flexible assessment strategy,can be tailored to nearly any organization and can be very effective in identifying __________.

A)costs associated with disaster recovery

B)areas where the organization is most likely to be affected by a disaster recovery

C)areas where the organization is most likely to be affected by a disaster situation

D)areas where the organization is most likely to be affected by backup procedures

Answer: C

Q3) Why must a disaster plan be continually revisited and updated?

A)Threats change

B)Assets change

C)Processes and abilities within the organization change

D)All of the above

Answer: D

To view all questions and flashcards with answers, click on the resource link above. Page 5

Chapter 4: Prioritizing Systems and Functions for Recovery

Available Study Resources on Quizplus for this Chatper

21 Verified Questions

21 Flashcards

Source URL: https://quizplus.com/quiz/44517

Sample Questions

Q1) The difference between a situation that may simply be an inconvenience and one that is an actual disaster often depends on __________.

A)the severity of the situation

B)the point of view of those affected

C)the point of view of those responsible for declaring the disaster

D)All of the above

Q2) Conducting a(n)__________ of the disaster recovery documentation for accuracy should be a standard practice for the organization.

A)weekly audit

B)daily check

C)annual review

D)restructuring

Q3) What is as important as generating an organization's assets?

A)accounting for an organization's assets

B)evaluating an organization's assets

C)inventorying an organization's assets

D)protecting an organization's assets

Q4) Tier ________ is a set of functions and processes that an organization can do without for more than a week to 10 days.

To view all questions and flashcards with answers, click on the resource link above. Page 6

Chapter 5: Identify Data Storage and Recovery Sites

Available Study Resources on Quizplus for this Chatper

23 Verified Questions

23 Flashcards

Source URL: https://quizplus.com/quiz/44518

Sample Questions

Q1) The restore time is __________ for tape than for disk-stored recovery.

A)shorter

B)longer

C)safer

D)more risky

Q2) A(n)__________ is more formalized and longer lasting than the reciprocal agreement.

Q3) A disaster recovery site is a(n)__________ location so that you can keep from having the business close while the long-term solution can be accomplished.

A)permanent

B)new

C)expanded

D)stopgap

Q4) Why is it important to have the availability of more than one recovery location?

A)A single disaster may affect more than one location

B)Different disasters may happen in different locations at the same time

C)More than one location can mean that you have choices in the event of a declared disaster

D)All of the above

To view all questions and flashcards with answers, click on the resource link above. Page 7

Chapter 6: Developing Plans, Procedures, and Relationships

Available Study Resources on Quizplus for this Chatper

23 Verified Questions

23 Flashcards

Source URL: https://quizplus.com/quiz/44519

Sample Questions

Q1) It is important that all discussions and interviews be __________ so that they can be incorporated into what will evolve into the disaster recovery plan.

Q2) It is often the case that software is licensed for a particular __________ configuration.

Q3) An organization's plan to maintain its profitability is only as good as its supply chain's ability to __________.

Q4) Which backup allows very large amounts of data to be backed up in a matter of seconds or just a few minutes?

A)full backups

B)incremental backups

C)split-mirror backups

D)none of the above

Q5) Which backups are particularly good for organizations that have a significant amount of data,much of which remains unchanged?

A)full backups

B)incremental backups

C)split-mirror backups

D)none of the above

To view all questions and flashcards with answers, click on the resource link above. Page 8

Chapter 7: Developing Procedures for Special Circumstances

Available Study Resources on Quizplus for this Chatper

20 Verified Questions

20 Flashcards

Source URL: https://quizplus.com/quiz/44520

Sample Questions

Q1) It is important to have a(n)_________ for just about any contingency that might arise in an organization.

Q2) What is the best way to handle SLAs if a secondary emergency occurs during an emergency situation?

A)The SLAs are made null and void.

B)SLAs should be written such that this secondary situation causes the clock to be reset.

C)It is unavoidable that the SLAs will be violated.

D)Try to renegotiate the SLA when the second disaster is declareD.

Q3) __________ can happen at any time,even when you're already in the midst of one.

Q4) Where should you keep disaster recovery documents?

A)In a safety deposit box in another city

B)With every set of backups that the organization maintains for the eventuality of a disaster recovery

C)With the organization under contract

D)All of the above

Q5) It is possible to word __________ in such a way as to make sure that the organization is covered in the eventuality that an emergency within an emergency should present itself.

To view all questions and flashcards with answers, click on the resource link above. Page 9

Chapter 8: Testing the Disaster Recovery Plan

Available Study Resources on Quizplus for this Chatper

25 Verified Questions

25 Flashcards

Source URL: https://quizplus.com/quiz/44521

Sample Questions

Q1) What is a benefit of written testing scenarios?

A)remembering to test the special processing situations

B)the need to rely on people's memory

C)functional units will be thrilled with the prospect of creating the scenarios

D)All of the above

Q2) With change control in place,changes usually have to pass through __________.

A)the disaster recovery team

B)upper management

C)the change control board

D)IT

Q3) How often should the disaster recovery team have scheduled meetings?

A)weekly

B)monthly

C)semiannually

D)annually

Q4) The disaster recovery test needs to have a set of __________so everyone knows whether the plan and the team have passed.

Q5) Typically,there are times when pieces of the recovery plan are __________ from the change control process.

To view all questions and flashcards with answers, click on the resource link above. Page 10

Chapter 9: Continued Assessment of Needs, Threats, and Solutions

Available Study Resources on Quizplus for this Chatper

21 Verified Questions

21 Flashcards

Source URL: https://quizplus.com/quiz/44522

Sample Questions

Q1) Which of the following is a diagram showing a hierarchy of threats or vulnerabilities?

A)Threat tree

B)Spoofing

C)Denial of Service

D)Repudiation

Q2) What usually follows the fact-finding meetings which follow a recovery,whether drill or real?

A)changes to the recovery plan

B)a completely new recovery plan

C)blame for failure is assigned as needed

D)a walk-through test

Q3) It is important that the meetings conducted after a test not become a place to judge either processes or people but to __________.

A)determine success or failure

B)develop a test plan

C)determine what needs to be backed up

D)find facts

To view all questions and flashcards with answers, click on the resource link above. Page 11

Turn static files into dynamic content formats.

Create a flipbook
Information Security Management Pre-Test Questions - 251 Verified Questions by Quizplus - Issuu