EMT Practice Test

1. Question Content...

---

Question1: The following are definitions of Information, except:

Question2: What type of legislation requires a proper controlled purchase process?

Question3: What controls can you do to protect sensitive data in your computer when you go out for lunch?

Question4: In which order is an Information Security Management System set up?

Question5: Which of the following is a technical security measure?

Question6: Which reliability aspect of information is compromised when a staff member denies having sent a message?

Question7: Who is responsible for Initial asset allocation to the user/custodian of the assets?

Question8: Which of the following does an Asset Register contain? (Choose two)

Question9: You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password.
What kind of threat is this?

Question10: Who are allowed to access highly confidential files?

Question11: After a devastating office fire, all staff are moved to other branches of the company. At what moment in the incident management process is this measure effectuated?

Question12: Which of the following statements are correct for Clean Desk Policy?

Question13: The following are the guidelines to protect your password, except:

Question14: What type of system ensures a coherent Information Security organisation?

Question15: You have a hard copy of a customer design document that you want to dispose off. What would you do

Question16: What is the difference between a restricted and confidential document?

Question17: There was a fire in a branch of the company Midwest Insurance. The fire department quickly arrived at the scene and could extinguish the fire before it spread and burned down the entire premises. The server, however, was destroyed in the fire. The backup tapes kept in another room had melted and many other documents were lost for good.
What is an example of the indirect damage caused by this fire?

Question18: Which of the following does a lack of adequate security controls represent?

Question19: What is the goal of classification of information?

Question20: -------------------------is an asset like other important business assets has value to an organization and consequently needs to be protected.

Question21: What is the relationship between data and information?

Question22: Information Security is a matter of building and maintaining ________ .

Question23: An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.

Question24: Stages of Information

Question25: What is a reason for the classification of information?

Question26: A fire breaks out in a branch office of a health insurance company. The personnel are transferred to neighboring branches to continue their work.
Where in the incident cycle is moving to a stand-by arrangements found?

Question27: Changes to the information processing facilities shall be done in controlled manner.

Question28: There is a scheduled fire drill in your facility. What should you do?

Question29: What is the worst possible action that an employee may receive for sharing his or her password or access with others?

Question30: A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company's information is worth more and more and gone are the days when you could keep control yourself.
You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?

Question31: A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?

Question32: A property of Information that has the ability to prove occurrence of a claimed event.

Question33: A member of staff denies sending a particular message.
Which reliability aspect of information is in danger here?

Question34: All are prohibited in acceptable use of information assets, except: