Please note: In order to obtain your CPE certificate for having passed the quiz, you must turn off your pop-up blocker.
Micallef Article
Emmett Article
Ramirez Article
Lawton Article
Moseley Article
CPE Quiz #
117
Based on Information Systems Control Journal Volume 6, 2007
A passing score of 75 percent qualifies for one (1) hour of CISA/CISM/CGEIT Continuing Professional Education (CPE) Credit
Your results will appear in a new window.
Enter your name below so it displays on the quiz results page:
Name:
Micallef Article1. Tougher rules and regulations are the way to restore trust in the corporate world and stability in the financial markets.
2. Regulation is not a free commodity and ultimately adds to the cost of every single financial product.
3. Integrated risk management practices and corporate governance disciplines are not regulatory imperatives.
4. A silo-based approach to corporate governance, risk management practices and regulatory compliance (GRC) not only will be insufficient, but also will result in compliance processes layered one upon the other, adding cost and duplication and reducing the overall agility of the business—in effect, increasing risk.
Emmett Article5. A security information management (SIM) solution can be implemented regardless of differences in organizations and technology solutions, as these do not impact the ultimate security management goals and approach.
6. SIM is essentially a parser of aggregated data; getting the maximum amount of relevant data to it will yield the best results and facilitate more comprehensive and accurate audits.
7. If SIM does not see the source data, it cannot analyze the data or use them for correlation with other events it did see.
8. SIMs are perfect, so do not expect to see false positives and false negatives.
Ramirez Article9. Excessive load on the data network affecting the Voiceover Internet Protocol (VoIP) is a typical example of a denial-of-service attack.
10. Session hijacking refers to intruders being able to exploit vulnerabilities on the VoIP environment to impersonate a user, redirect calls to a secondary phone and gather information to support their process.
11. Protection of VoIP calls from unauthorized access will reduce the chances of unauthorized interception or modification of the calls.
12. Physical security is one of the countermeasures required for the VoIP network and applies to the network, data center, hardware and equipment used for the VoIP service.
Lawton Article13. IT professionals are now subject to numerous audits (both internal and external), with a focus on IT internal controls.
14. Change management cannot be used as an opportunity to enhance the process to automatically generate the chain of evidence.
15. Changing the IT culture is one of the simplest challenges facing IT management today.
16. The Control Objectives for Information and related Technology (COBIT) IT metrics can be of great assistance for organizations that have chosen the balanced scorecard approach.
Moseley Article17. Organizations must have a complete understanding of the complicated hierarchies and relationships that exist between them and their stakeholders to deliver the best experience to their stakeholders.
18. Organizations with understanding provided by hierarchical context can improve revenues, decrease costs, meet compliance requirements, mitigate risk and realize many other benefits.
19. The external data provider method has the security risks of placing corporate data beyond the corporate security perimeter.
20. There are many technology solutions that deliver performance and comprehensive features necessary to provide a complete, multidimensional organization view.
|
Your results will appear in a new window.
|
Please note: This quiz requires a JavaScript-enabled browser.
If the quiz is not displayed above, you either do not have a browser which
supports JavaScript or JavaScript support has been disabled.
|
|
|