100%(25)25 out of 25 people found this document helpful
This preview shows page 1 - 3 out of 15 pages.
Question 12 out of 2 points___________________ are responsible for the monitoring of activities the pre, middle, and post stages of goal implementation, whereas __________________are responsible for the monitoring of activities following the implementation and are called upon to evaluate whether or not the goals have been achieved.Selected Answer:Management committees, government committeesCorrect Answer:Management committees, government committeesQuestion 22 out of 2 pointsThe Gramm-Leach-Bliley Act (GLBA) was created to protect confidentiality and security of customer information. Thus, under GLBA, organizations are required to inform regulators quickly if any unauthorized access or breach has occurred. Consider this scenario: A bank teller accesses a customer account out of curiosity. What is best course of action following this event?Selected Answer:The bank should notify the regulator based on the threshold set for the how many records can be subject to unauthorized access.Correct Answer:The bank should notify the regulator based on the threshold set for the how many records can be subject to unauthorized access.Question 32 out of 2 pointsThe executive management has the responsibility of connecting many linesof business to bring resolution to strategy business issues. However, their ultimate responsibility is to ___________________________.Selected Answer:enforce policies at the executive and enterprise levelsCorrect Answer:enforce policies at the executive and enterprise levelsQuestion 42 out of 2 pointsWhile there are many valid reasons to monitor users’ computer activities, which of the following is an invalid reason?Selected Answer:detecting whether employees are listening to music that is
inappropriate for the workplaceCorrect Answer:detecting whether employees are listening to music that is inappropriate for the workplaceQuestion 50 out of 2 pointsIt is important that partnership exists between the ___________________, which needs to review the standing legislation that governs their business, and the ____________________, which needs to review all recent or significantpolicy changes.Selected Answer:CISO, legal departmentCorrect Answer:information security team, legal departmentQuestion 62 out of 2 pointsDepending on staffing availability, the complexity of implementation, backlog, and how many approvals are needed, manual access requests cantake weeks or days. Thus, automation can make the process far more efficient and minimize the time required. Which of the following is notone of the areas in which the time required can be reduced through automation?Selected Answer:Employee verifications—automated controls can be put in place to verify information on a employee’s background.Correct Answer:Employee verifications—automated controls can be put in place to verify information on a employee’s background.