Question 1

What sort of security does a Public Key Infrastructure (PKI) offer?

AIt provides digital certificates that can be used to digitally sign documents. Such signatures irrefutably determine from whom a document was sent.

BHaving a PKI shows customers that a web-based business is secure.

CBy providing agreements, procedures and an organization structure, a PKI defines which person or which system belongs to which specific public key.

DA PKI ensures that backups of company data are made on a regular basis.

Answer : D

Question 2

Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. What is accomplished if all other reports from this insurance office are also assigned the appropriate grading?

AThe costs for automating are easier to charge to the responsible departments.

BA determination can be made as to which report should be printed first and which ones can wait a little longer.

CEveryone can easily see how sensitive the reports' contents are by consulting the grading label.

DReports can be developed more easily and with fewer errors.

Answer : C

Question 3

Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

AISO/IEC 27001:2005

BIntellectual Property Rights

CISO/IEC 27002:2005

DPersonal data protection legislation

Answer : D

Question 4

The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?

AInformation Security Management System

BThe use of tokens to gain access to information systems

CValidation of input and output data in applications

DEncryption of information

Answer : A

Question 5

Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?

AThe recipient, Rachel

BThe person who drafted the insurance terms and conditions

CThe manager, Linda

DThe sender, Peter