1.5 - Understand Governance Processes CC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why do organizations document procedures for routine security tasks?

   • ATo satisfy legal requirements that mandate procedures
   • BTo allow employees to improvise based on experience
   • CTo replace the need for policies
   • DTo ensure tasks are executed consistently and correctly
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   How do laws and regulations affect an organization's security governance?

   • AThey impose mandatory requirements that the organization must comply with
   • BThey only apply to organizations that handle government data
   • CThey are optional recommendations that organizations may choose to follow
   • DThey are superseded by organizational policies
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A healthcare organization must comply with a regulation that mandates the use of strong authentication for remote access to patient records. The security team is defining the technical controls. They need to specify the exact authentication methods and minimum password complexity rules. Which governance document should they create?

   • AA standard that defines the approved authentication methods and password complexity parameters.
   • BA procedure that describes how to configure the remote access VPN.
   • CA regulation that mandates the use of multi-factor authentication.
   • DA policy that states 'strong authentication must be used for remote access.'
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which document is the primary source of high-level governance direction and rules for an organization's security program?

   • ACompliance checklist
   • BTechnical standard
   • CStandard operating procedure
   • DSecurity policy
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A small business has a policy that requires all employees to change their passwords every 90 days. However, employees often forget their passwords and need to reset them frequently. The security team wants to improve the process. What should they do?

   • ARevise the policy to remove the password change requirement.
   • BCreate a procedure that outlines the steps for password changes and resets.
   • CImplement a new regulation that mandates password changes.
   • DCreate a standard that specifies the password complexity requirements.
   Reveal Solution Discussion Select an answer first