Question Details

An employee in an organization is requesting access to more
information than is required.




1. An employee in an organization is requesting access to more
information than is required. This request should be denied on the basis of
which principle:
a. Separation of duties
b. Least privilege
c. Need to know
d. Job rotation


2. Two separate employees are required to open a safe containing
sensitive information. One employee has part of the safe combination, and
a second employee has another part of the safe combination. This
arrangement follows the principle of:
a. Split custody
b. Segregation of duties
c. Need to know
d. Least privilege


3. The information security officer in an organization has assigned various
accounting department employees to various roles in the organization-
financial system, taking care to assign roles with the fewest possible
functions. Roles have been assigned according to the principle of:
a. Need to know
b. Segregation of duties
c. Split custody
d. Least privilege


4. An organization has in its possession many types of business records
that vary in sensitivity and handling requirements. No policy exists that
defines how any of these records should be protected. This organization
lacks:
a. Storage and handling procedures
b. Separation of duties
c. Data classification policy
d. Information security policy


5. The purpose of a periodic review of user access rights is:
a. To check whether employees have logged in to the system
b. To check for active accounts that belong to terminated employees
c. To determine password quality and expiration
d. To determine whether access control systems still function properly





Computer Science Assignment Help, Computer Science Homework help, Computer Science Study Help, Computer Science Course Help