Q59. All are prohibited in acceptable use of information assets, except:

Q60. A scenario wherein the city or location where the building(s) reside is / are not accessible.

Q61. Integrity of data means

Q62. Backup media is kept in the same secure area as the servers. What risk may the organisation be exposed to?

Q63. Information or data that are classified as ______ do not require labeling.

Q64. Who is authorized to change the classification of a document?

Q65. A fire breaks out in a branch office of a health insurance company. The personnel are transferred to neighboring branches to continue their work.
Where in the incident cycle is moving to a stand-by arrangements found?

Q66. There was a fire in a branch of the company Midwest Insurance. The fire department quickly arrived at the scene and could extinguish the fire before it spread and burned down the entire premises. The server, however, was destroyed in the fire. The backup tapes kept in another room had melted and many other documents were lost for good.
What is an example of the indirect damage caused by this fire?

Q67. A decent visitor is roaming around without visitor’s ID. As an employee you should do the following, except:

Q68. In the event of an Information security incident, system users’ roles and responsibilities are to be observed, except:

Q69. What is an example of a human threat?

Q70. What type of system ensures a coherent Information Security organisation?

Q71. A planning process that introduced the concept of planning as a cycle that forms the basis for continuous improvement is called:

Q72. The following are purposes of Information Security, except:

Q73. You are the lead auditor of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks.
What is this risk strategy called?

Q74. CMM stands for?

Q75. How are data and information related?

Q76. An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.

Q77. Access Control System, CCTV and security guards are form of:

Q78. CEO sends a mail giving his views on the status of the company and the company’s future strategy and the CEO’s vision and the employee’s part in it. The mail should be classified as

Q79. Information Security is a matter of building and maintaining ________ .

Q80. Four types of Data Classification (Choose two)

Q81. In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?

Q82. What type of compliancy standard, regulation or legislation provides a code of practice for information security?

Q83. What type of measure involves the stopping of possible consequences of security incidents?