A. documented security requirements or accepted practices B. choosing office wall colors C. sharing passwords publicly D. using one shared account for everyone
Correct Answer: A. documented security requirements or accepted practices
A. allowing unlimited anonymous access B. choosing office wall colors C. treating all information as public D. mandatory legal obligations for protecting information
Correct Answer: D. mandatory legal obligations for protecting information
A. continuing critical business functions during disruption B. treating all information as public C. using one shared account for everyone D. disabling audit logs
Correct Answer: A. continuing critical business functions during disruption
A. using one shared account for everyone B. ignoring risks and controls C. sharing passwords publicly D. preparing response and recovery before disruption occurs
Correct Answer: D. preparing response and recovery before disruption occurs
A. choosing office wall colors B. bypassing management approval C. documenting controls, responsibilities, and protection requirements D. using one shared account for everyone
Correct Answer: C. documenting controls, responsibilities, and protection requirements
A. setting long-term security goals aligned with business priorities B. deleting backup copies without approval C. ignoring risks and controls D. disabling audit logs
Correct Answer: A. setting long-term security goals aligned with business priorities
A. bypassing management approval B. using one shared account for everyone C. removing all documentation D. defining ownership and accountability for security activities
Correct Answer: D. defining ownership and accountability for security activities
A. allowing unlimited anonymous access B. coordinating people, process, and technology to reduce risk C. sharing passwords publicly D. ignoring risks and controls
Correct Answer: B. coordinating people, process, and technology to reduce risk
A. choosing office wall colors B. bypassing management approval C. assigning roles, duties, and governance responsibilities D. treating all information as public
Correct Answer: C. assigning roles, duties, and governance responsibilities