LEARN MORE...

Home
Documents
March 2021
7
Quiz 4 docx

Quiz 4 docx

Content type

User Generated

Uploaded By

wjevgrsbew7

Pages

Showing Page:

1/6

Question 1

What would be a valid reason to assign a "1 - CRITICAL" risk factor to a found vulnerability?

It was determined that the vulnerability could cause employees to open emails with a possible virus.

It was determined that the vulnerability could impact the time it would take to stock incoming parts in the

warehouse.

It was determined that the vulnerability could be the greatest risk to the organization

It was determined that the vulnerability could close the factory for a couple of hours.

Question 2

A young woman waits in a local deli to hear the coffee order come in by phone from the law firm close by. The law

firm places the same order every morning. A delivery boy sets out to deliver the coffee but is met outside by the

woman near the front of the firm's building. The woman smiles and claims she is one of the lawyers; she offers to

bring the coffee upstairs for him and gives him a generous $10 tip. The boy shrugs, takes the money, gives her the

coffee order, and heads back to the deli.

The woman enters the firm's lobby and tells the two security guards that she is the delivery girl from the deli and has

the coffee order. She chats casually with one guard while she covertly peers over the shoulder of the 2nd guard and

watches him enter the security codes to access the elevators on the lobby computer. The first guard takes the coffee

and gives her a $2 tip. She gives them a big, friendly smile, says thank you, waves goodbye, and leaves the building.

10 days later she returns to the law firm at night, breaks into the building, accesses the elevators using the lobby

computer, and breaks into the offices upstairs to steal vital case information.

Which domain was exploited by the woman perpetrator?

The LAN domain

The User domain and the Remote Access domain

The Workstation domain

The System/Application domain

Question 3

Which of the threats below is primarily a risk to the Systems/Application domain?

A fire destroys the primary data center

There is a major network outage

A hacker accesses the internal network from a public Internet cafe.

None of the above

Question 4

Three vulnerabilities were determined for an organization:

Showing Page:

2/6

• Employee Productivity

• Compliance shortcomings

• Vulnerability in protecting Intellectual Property

You are about to assign Risk factors "1" , "2" , and "3" to these vulnerabilities to present to management. How

would you prioritize these risks?

1- Keeping Employee Productivity up is the most serious risk, then 2-Compliance, then 3- Intellectual Property

1- Protecting Intellectual Property is the most serious risk, then 2-Employee Productivity, then 3- Compliance

1-Compliance is the most serious risk, then 2-Intellectual Property, then 3-Employee Productivity

All three are equally important and should have equal rating factors.

Question 5

A pharmaceutical sales person has a route of doctor's offices that he visits to see if they need to replenish any of the

drug supplies in the offices. He carries with him a tablet with a cellular data plan from which he can place orders.

The transactions are processed in real-time via secure browser over the Internet to access the sales-order entry

system. Which of the seven domains would have the primary focus of secure communications?

The User domain and Systems/Application domain

The WAN domain and the Systems/Application domain

The LAN-to-WAN doman

The Remote Access domain

Question 6

Match the risk mitigation tool or technique to the vulnerability: 3 wrong

User opens

unknown

attachment

Operating

system has

known

vulnerability

High

volume

employee

Internet

traffic

degrades

network

performance

Implement IDS system

Email filtering and quarantine

Implement VPN with secure encrypted

communication

Install web filtering

Make sure security patches are up to date

Showing Page:

3/6

End of Preview - Want to read all 6 pages?

Access Now

Unformatted Attachment Preview

Question 1 What would be a valid reason to assign a "1 - CRITICAL" risk factor to a found vulnerability? It was determined that the vulnerability could cause employees to open emails with a possible virus. It was determined that the vulnerability could impact the time it would take to stock incoming parts in the warehouse. It was determined that the vulnerability could be the greatest risk to the organization It was determined that the vulnerability could close the factory for a couple of hours. Question 2 A young woman waits in a local deli to hear the coffee order come in by phone from the law firm close by. The law firm places the same order every morning. A delivery boy sets out to deliver the coffee but is met outside by the woman near the front of the firm's building. The woman smiles and claims she is one of the lawyers; she offers to bring the coffee upstairs for him and gives him a generous $10 tip. The boy shrugs, takes the money, gives her the coffee order, and heads back to the deli. The woman enters the firm's lobby and tells the two security guards that she is the delivery girl from the deli and has the coffee order. She chats casually with one guard while she covertly peers over the shoulder of the 2nd guard and watches him enter the security codes to access the elevators on the lobby computer. The first guard takes the coffee and gives her a $2 tip. She gives them a big, friendly smile, says thank you, waves goodbye, and leaves the building. 10 days later she ...
Purchase document to see full attachment