_____ is an example of Trojan horse.

• A) Worm
• B) Dropper
• C) Scanner
• D) Logic Bomb

Which statement is INCORRECT about a BUG?

• A) It can never create a virus in the system.
• B) It is an internal malfunctioning of the system.
• C) It is caused by improper application of programming logic.
• D) It is an unintentional fault in the program.

Which of the following can be used together with access controls to identify and provide information about users suspected of improper modification of data.

• A) Audit control
• B) Audit Trial
• C) Control Trial
• D) Control Log

Which of the following is the process of measuring, or assessing risk and then developing strategies to manage the risk?

• A) None of the given options
• B) Risk Management
• C) Executive management
• D) Audit Trial

Which of the following is NOT true about risk management?

• A) Process of assessing risk
• B) Process of measuring risk
• C) Process of developing strategies to manage risk
• D) Process of logical intrusion

_________ refer to the sudden increase in power supply.

• A) Spikes
• B) Black out
• C) Brown outs
• D) Sags

Which one of the following is not classified as biometrics?

• A) Digital Password
• B) Finger Prints
• C) Sound of your voice
• D) Blood vessels in the retina of your eye

Which of the following is an expression of an intention to inflict pain, injury, evil or punishment, and an indication of impending danger or harm?

• A) Damage
• B) None of these options
• C) Intrusion
• D) Threat

________ site backup is an appropriate choice for organizations if they can bear some downtime.

• A) Cool
• B) Warm
• C) Cold
• D) Hot

What would affect the impact’s scope if a risk does occur?

• A) Risk resources
• B) Risk scope
• C) Risk timing
• D) Risk cost

Damage caused to the software without physical presence is the outcome of _______________ threat.

• A) Privacy
• B) Physical
• C) Logical
• D) Security

The first step after threat attacks the system would be

• A) Threat analysis
• B) Data sensitivity analysis
• C) Control analysis
• D) Impact analysis

An effective risk management strategy will need to address _______

• A) Risk monitoring
• B) Risk avoidance
• C) All of these
• D) Business continuity planning

Management controls are also known as:

• A) Logical controls
• B) Technical controls
• C) Non-technical controls
• D) Scientific controls

Which of the following is in fact the risk mitigation process?

• A) Control recommendations
• B) Risk determination
• C) Control measures
• D) Risk pliability

Impact needs to be measured to

• A) Record thread history
• B) Define the data criticality
• C) Identify threat
• D) Worse scenarios of impact

Determining classification levels along with maintaining accuracy and integrity of the data in the information system is the responsibility of _________.

• A) System auditors
• B) Data owners
• C) Process owners
• D) End users

Which of the following is the study of automated methods for uniquely recognizing humans based upon one or more intrinsic physical or behavioral traits?

• A) Encryption
• B) Decryption
• C) Biometrics
• D) Cryptography

Traversing of a record of every keystroke, often called

• A) Primary Key Monitoring
• B) Logical Key Monitoring
• C) Keystroke Monitoring
• D) Physical Key Monitoring

Which of the following is not phase of risk management?

• A) Threat Identification
• B) Assessing Documentation
• C) Risk Identification
• D) Implementation