CIS 502 MENTOR Education is Power/cis502mentor.com CIS 502 MENTOR Education is Power/cis502mentor.co | Page 21

several segregation of duties issues that were related to IT support of the application . What does this mean ?

• 2 A security manager is developing a data classification policy . What elements need to be in the policy ?

• 3 An organization employs hundreds of office workers that use computers to perform their tasks . What is the best plan for informing employees about security issues ?

• 4 An organization suffered a virus outbreak when malware was download by an employee in a spam message . This outbreak might not have happened had the organization followed what security principle :

• 5 A security manager is performing a quantitative risk assessment on a particular asset . The security manager wants to estimate the yearly loss based on a particular threat . The correct way to calculate this is ::

• 6 A qualitative risk assessment is used to identify :

several segregation of duties issues that were related to IT support of the application . What does this mean ?

• 2 A security manager is developing a data classification policy . What elements need to be in the policy ?

• 3 An organization employs hundreds of office workers that use computers to perform their tasks . What is the best plan for informing employees about security issues ?

• 4 An organization suffered a virus outbreak when malware was download by an employee in a spam message . This outbreak might not have happened had the organization followed what security principle :

• 5 A security manager is performing a quantitative risk assessment on a particular asset . The security manager wants to estimate the yearly loss based on a particular threat . The correct way to calculate this is ::

• 6 A qualitative risk assessment is used to identify :