A. bypassing management approval B. deleting backup copies without approval C. documented security requirements or accepted practices D. disabling audit logs
Correct Answer: C. documented security requirements or accepted practices
A. deleting backup copies without approval B. sharing passwords publicly C. restoring IT systems after major disruption D. bypassing management approval
Correct Answer: C. restoring IT systems after major disruption
A. sharing passwords publicly B. bypassing management approval C. treating all information as public D. continuing critical business functions during disruption
Correct Answer: D. continuing critical business functions during disruption
A. preparing response and recovery before disruption occurs B. treating all information as public C. using one shared account for everyone D. sharing passwords publicly
Correct Answer: A. preparing response and recovery before disruption occurs
A. bypassing management approval B. sharing passwords publicly C. documenting controls, responsibilities, and protection requirements D. removing all documentation
Correct Answer: C. documenting controls, responsibilities, and protection requirements
A. setting long-term security goals aligned with business priorities B. allowing unlimited anonymous access C. deleting backup copies without approval D. removing all documentation
Correct Answer: A. setting long-term security goals aligned with business priorities
A. treating all information as public B. defining ownership and accountability for security activities C. deleting backup copies without approval D. removing all documentation
Correct Answer: B. defining ownership and accountability for security activities
A. Identify, Protect, Detect, Respond, and Recover B. ignoring risks and controls C. using one shared account for everyone D. choosing office wall colors
Correct Answer: A. Identify, Protect, Detect, Respond, and Recover
A. removing all documentation B. ignoring risks and controls C. coordinating people, process, and technology to reduce risk D. treating all information as public
Correct Answer: C. coordinating people, process, and technology to reduce risk
A. using one shared account for everyone B. managing people-related security risks C. ignoring risks and controls D. allowing unlimited anonymous access
Correct Answer: B. managing people-related security risks
A. assigning roles, duties, and governance responsibilities B. bypassing management approval C. allowing unlimited anonymous access D. choosing office wall colors
Correct Answer: A. assigning roles, duties, and governance responsibilities