CSIS 340

CSIS 340 Final Exam 1. The _____ domain connects an organizations private network to the Internet? 2. To promote cultural change, the goal should be to make security policies _____? 3. Without _____ sponsorship, users will be less likely to eagerly participate in awareness training. 4. What needs do organizations have to classify data? 5. The Security Compliance Committee _____? 6. Web Services policies would be an example of _____ domain. 7. Production data should be _____ before being u...

CSIS 340 Midterm Exam 1. Which of the following is not a type of security control? 2. The key to determining if a business will implement any policy is? 3. _____ is a promise not to disclose to any third party information covered by the agreement. 4. A _____ is a term that refers to a network that limits what and how computers are able to talk to each other. 5. Which of the following are control objectives for PCI DSS? 6. Which of the following does a policy change control board do? 7. Ho...