CompTIA Security+ (SY0-501) Multiple
Choice Exam Questions And Answers 100%
Pass.
You're the chief security contact for MTS. One of your Primary tasks is to document everything
related to security and create a manual that can be used to manage the company in your absence.
Which documents shoul...
You're the chief security contact for MTS. One of your Primary tasks is to document everything
related to security and create a manual that can be used to manage the company in your absence.
Which documents should be referenced in your manual as the ones that identify the methods
used to accomplish a given task?
A. Policies
B. Standards
C. Guidelines
D. BIA - answer✔C. Guidelines help clarify processes to maintain standards. Guidelines tend to
be less formal than policies or standards.
Consider the following scenario: The asset value of your company's primary servers is $2
million. Tornadoes in this part of the country are not uncommon, and it is estimated that one will
level the building every 60 years. Which of the following is the SLE for the scenario?
A. $2 million
B. $1 million
C. $500,000
D. $33,333.33
E. $16,666.67 - answer✔A. SLE = Single Lost Expectancy so just the one item.
Refer to the scenario in question 2. Which of the following amounts is the ALE for this scenario?
A. $2 million
B. $1 million
C. $500,000
D. $33,333.33
E. $16,666.67 - answer✔D. ALE (annual loss expectancy) is equal to the SLE times the
annualized rate of occurrence. In this case, the SLE is $2 million and the ARO is 1/60.
Refer to the scenario in question 2. Which of the following amounts is the ARO for this
scenario?
A. 0.0167
B. 1
C. 5
D. 16.7
E. 60 - answer✔A. ARO (annualized rate of occurrence) is the frequency (in number of years)
that an event can be expected to happen. In this case, ARO is 1/60, or 0.0167.
Which of the following strategies involves identifying a risk and making the decisions to
discontinue engaging in the action?
A. Risk acceptance
B. Risk avoidance
C. Risk deterrence
D. Risk mitigation
E. Risk transference - answer✔B. Risk avoidance involves identifying a risk and making the
decision to no longer engage in the actions associated with that risk.
Which of the following policy statements may include an escalation contact in the event that the
person dealing with the situation needs to know who to contact?
D. Accountability - answer✔B. The exception policy statement may include an escalation
contact in the event that the person dealing with with a situation needs to know whom to contact.
Which of the following policies are designed to reduce the risk of fraud and prevent other losses
in the organization?
A. Separation of duties
B. Acceptable use
C. Least privilege
D. Physical access control - answer✔A. A separation of duties policy is designed to reduce the
risk of fraud and to prevent other losses in an organization.
What is the term used for events that were mistakenly flagged although they weren't truly events
about which to be concerned?
A. Fool's gold
B. Non-incidents
C. Error flags
D. False positives - answer✔D. False positives are events that were mistakenly flagged and aren't
truly events to be concerned about.
Which of the following is the structured approach that is followed to secure a company's assets?
A. Audit management
B. Incident management
C. Change management
D. Skill management - answer✔C. Change management is the structured approach that is
followed to secure a company's assets.
Which pf the following strategies involves sharing some of the risk burden with someone else,
such as an insurance company?
A. Risk acceptance
B. Risk avoidance
C. Risk deterrence
D. Risk mitigation
E. Risk transference - answer✔E. Risk transference involves sharing some of the risk burden
with someone else, such as an insurance company.
The risk-assessment component, in conjunction with the ________, provides the organization
with an accurate picture of the situation facing it.
A. RAC
B. ALE
C. BIA
D. RMG - answer✔C. The risk-assessment component, in conjunction with the business impact
analysis (BIA), provides an organization with an accurate picture of this situation it faces.
Which of the following policy statements should address who is responsible for ensuring that the
policy is enforced?
A. Scope
B. Exception
C. Overview
D. Accountability - answer✔D. The accountability policy statement should address who is
responsible for ensuring that the policy is enforced.
Which of the following strategies as accomplished any time you take steps to reduce risk?
A. Risk acceptance
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Brightstars. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $12.49. You're not tied to anything after your purchase.
