Question

7. Ann is creating a template for the configuration of Windows servers in her organization. It includes the basic security settings that should apply to all systems What type of document should she create? 

A. Baseline B. Policy C. Guideline D. Procedure 

8. Aditya is attempting to classify information regarding a new project that hi organization will undertake in secret. Which characteristic is NOT normally used to make these type of classification decisions? 

A. Value B. Sensitivity C. Criticatity D. Threat 

9. Marguerite is creating a budget for a software development project. What phase of the system life cycle is she undertaking? 

A. Project initiation and planning B. Functional requirements and definition C. System design specification D. Operations and maintenance 

Answer 1

Q7.) (c) Guideline Document

Written guidelines are instructions which provide broad advise in following a procedure or process, instead of providing a set of precise requirements or standards to be executed. In this case basic security settings have to be applied to all the systems,which is kind of a guideline to be performed for every system.

Q8.) (d) Threat

Value of information (VOI) is defined as the amount a decision maker would be/is willing to pay for the information prior to making a decision regarding that information.

Criticality of Information means understanding data criticality. Data criticality reflects that how vital data is to the Institutions missions and processes. Criticality of information is a combination of data integrity and availability.

Information sensitivity is defined as the control of access to the information or knowledge that is important and might result in loss of an advantage or loss of level of security if disclosed to others.

Q9.) (a) Project Initiation and Planning

Planning is the second stage. Here the project is divided into smaller and easily achievable tasks. This is an important and crucial phase of the project lifecycle of a project. In this phase each task to be executed through the end of the project is identified. In this phase the stakeholders along with consensus on frequency of reporting and chosen channels are identified. Risk Analysis is also performed in this stage. The efficiency of planning and initiation influences the level of quality of results in terms of the outcome and resource consumption.

Objectives of the Planning Phase are:

1. Business requirements and
2. Identifying costs, schedules and resource consumption