Quiz 100 

 

 

Please note: In order to obtain your CPE certificate for having passed the quiz, you must turn off your pop-up blocker.

Pironti Article
Mookhey Article
Cerullo Article
Bhatia Article
Sarva Article

 

CPE Quiz # 100

Based on Information Systems Control Journal Volume 1, 2005

A passing score of 75 percent qualifies for one (1) hour of CISA/CISM/CGEIT Continuing Professional Education (CPE) Credit

Your results will appear in a new window.

Enter your name below so it displays on the quiz results page:

Name:

Pironti Article

1. The information security program allows an organization to achieve the goal of transforming information security incidents into operational anomalies.
2. Regulations like the Sarbanes-Oxley Act were put in place to maintain a baseline standard for security in organizations, since it was demonstrated that they had not been doing an adequate job of this without regulation.
3. To implement an effective governance structure for the information security program, it is important to identify the roles and key goal indicators (KGIs) for each element of the functional inventory.
4. The threat and vulnerability assessment role provides the business elements of the organization with an educated and analyzed view of the threat analysis methodology to accurately assess the existence, likelihood and business impact of threats to individual solutions within the organization as well as the organization as a whole.
5. In the author's opinion, the program governance function provides the technology and operational functions for the information security organization.

Mookhey Article

6. A fully patched, securely configured server with an actively monitored audit trail can end up being a difficult target for an attacker to fully compromise.
7. Black box or penetration testing is a security evaluation carried out with good knowledge about the internal workings of the system.
8. The security target defines the functional (from part 1) and assurance (from part 2) requirements that the product satisfies.
9. The author states that Common Criteria compliance automatically ensures a high-security product.

Cerullo Article

10. The authors argue that accountants are concerned that the information the firm needs to achieve its financial reporting objectives is reliable; hence, they need not be concerned about security measures in place.
11. Pareto's Law states that a small percentage of the items in a population represents the most significant items in the population.

Bhatia Article

12. Web services are strongly coupled entities and can dynamically locate and interact with other components or services on the Internet to provide a new set of services.
13. The author argues that due to the absence of widely accepted security standards and technologies, implementing those standards and offering a completely scalable web service are not easy.

Sarva Article

14. In the federated identity model, a consumer or business enters its password only once and is able to move to trusted sites without rekeying its identity information.
15. In an identity management implementation, the major source of security risk emanates from creating/deleting a user.
16. The author recommends that organizations adopt a practical path and an integrated approach in identity creation, administration and access benefits.

Your results will appear in a new window.

Please note: This quiz requires a JavaScript-enabled browser. If the quiz is not displayed above, you either do not have a browser which supports JavaScript or JavaScript support has been disabled.