Question

MCQ's:

1.Which of the following is not a major benefit of SETA (Security, Education and Awareness) programs?

A) They enable the organization to hold employees accountable B) They can inform members of the organization about where to report policy violations C) They can improve the configuration rule security for the organization D) They can improve employee behaviour.

2.When using the U.S. military classification scheme, which classification indicates that disclosure of contained information could cause minor or moderate damage to national security?

A) Confidential data B) Sensitive but unclassified data C) Top secret data D) Unclassified data

3.What term below is used to describe security efforts that are considered among the best in an industry?

A) Standard of due care B) Standard of due diligence C) Recommended business practices D) Best security practices

4.Which of the following is an example of a covert channel for communications that may exist within a computer system? -

. A) Diffie-Hellman key exchange B) Steganography C) Intrusion detection and prevention system D) Spoofing

Answer 1

1.C) They can improve the configuration rule security for the organization

• SETA (Security, Education, and Awareness) programs increase the awareness of the employees in the organization about the importance of keeping their systems and resources secured.
• Configuration rules are created by the organizations according to their parameters and hence SETA training doesn't improve them

2.A) Confidential data

• National Security Information is classified at three levels and Confidential data is one of them

3.D) Best security practices

• Best security practices are used to describe security efforts that are considered among the best in industry.

4.B) Steganography

• A covert channel is a method of communication that enables the transfer of communication through a forbidden method by using a covering or hiding the actual data in any other piece of data.
• Steganography is an example where the data is attached to any other object like an image file, video file or any other form of information in a concealed manner.