Question

What factors drive data retention policies?

		Legal requirements
		Business Need for Information
		Historical Need for Information
		All of the above

Which of the following is considered the least expensive method to test a contingency plan?

		Full interruption test
		Parallel Test
		Simulation Text
		Checklist Test

What is the final step in the policy development process?

		Maintenance and review
		Management approval
		Continued awareness activities
		Communication to employees

Which of the following backup sites provides a fully operational backup facility?

		Mirrored site
		Hot site
		Warm site
		Cold Site

Which of the following risk responses eliminates all risk of harm presented by a threat or vulnerability?

		Risk transfer
		Risk mitigation
		Risk acceptance
		Risk avoidance

Which of the following best describes a policy?

		An overall statement of information security scope and direction
		A minimum threshold of information security controls that must be implemented
		A checklist of steps that must be completed to ensure information security
		A technology-dependent statement of best practices

Which of the following is the most senior information technology official in most organizations?

		CFO
		CISO
		CTO
		CIO

What is the main benefit of a qualitative risk assessment?

		Measures the financial cost of a risk
		Scope of the risk can be easily modified
		It is easy to administer
		It provides the most accurate risk assessment

Which law states requirements for federal agency information security governance?

		FISMA
		FERPA
		MIPAA
		FIPPS

What is a valid reason for allowing an information security policy exemption?

		The cost of implementing the security policy is too high.
		The cost of compliance with the policy is more than the cost of noncompliance.
		It is not technically feasible to implement the policy
		End users believe that the policy makes their work harder