In the organization where you work, information of a very sensitive nature is processed.
Management is legally obliged to implement the highest-level security measures. What is this kind of risk strategy called?

• A.Risk neutral
• B.Risk avoiding
• C.Risk bearing

Comment: *

Name: *

Email: *

Verification: *

What is the greatest risk for an organization if no information security policy has been defined?

• A.Too many measures are implemented.
• B.Information security activities are carried out by only a few people.
• C.It is not possible for an organization to implement information security in a consistent manner.
• D.If everyone works with the same account, it is impossible to find out who worked on what.

Comment: *

Name: *

Email: *

Verification: *

You are the first to arrive at work in the morning and notice that the CD ROM on which you saved contracts yesterday has disappeared. You were the last to leave yesterday. When should you report this information security incident?

• A.You should first investigate this incident yourself and try to limit the damage.
• B.This incident should be reported immediately.
• C.You should wait a few days before reporting this incident. The CD ROM can still reappear and, in that case, you will have made a fuss for nothing.

Comment: *

Name: *

Email: *

Verification: *

Who is authorized to change the classification of a document?

• A.The administrator of the document
• B.The owner of the document
• C.The author of the document
• D.The manager of the owner of the document

Comment: *

Name: *

Email: *

Verification: *

A company moves into a new building. A few weeks after the move, a visitor appears unannounced in the office of the director. An investigation shows that visitors passes grant the same access as the passes of the companys staff. Which kind of security measure could have prevented this?

• A.A physical security measure
• B.An organizational security measure
• C.A technical security measure

Comment: *

Name: *

Email: *

Verification: *