In most organizations, access to the computer or the network is granted only after the user has entered a correct username and password. This process consists of 3 steps: identification, authentication and authorization. What is the purpose of the second step, authentication?

• A.In the second step, you make your identity known, which means you are given access to the system.
• B.The authentication step checks the username against a list of users who have access to the system.
• C.The system determines whether access may be granted by determining whether the token used is authentic.
• D.During the authentication step, the system gives you the rights that you need, such as being able to read the data in the system.

Comment: *

Name: *

Email: *

Verification: *

Three characteristics determine the reliability of information. Which characteristics are these?

• A.Availability, Integrity and Confidentiality
• B.Availability, Nonrepudiation and Confidentiality
• C.Availability, Integrity and Correctness

Comment: *

Name: *

Email: *

Verification: *

Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

• A.ISO/IEC 27002:2005
• B.ISO/IEC 27001:2005
• C.Personal data protection legislation
• D.Intellectual Property Rights

Comment: *

Name: *

Email: *

Verification: *

My user profile specifies which network drives I can read and write to. What is the name of the type of logical access management wherein my access and rights are determined centrally?

• A.Discretionary Access Control (DAC)
• B.Public Key Infrastructure (PKI)
• C.Mandatory Access Control (MAC)

Comment: *

Name: *

Email: *

Verification: *

What is the most important reason for applying segregation of duties?

• A.Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.
• B.Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.
• C.Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.
• D.Segregation of duties makes it clear who is responsible for what.

Comment: *

Name: *

Email: *

Verification: *