156-110

156-110 practice questions, page 4 of 4, with answer review and explanations.

Question 16

A new U.S. Federal Information Processing Standard specifies a cryptographic algorithm. This algorithm is used by U.S. government organizations to protect sensitive, but unclassified, information. What is the name of this Standard?

  1. Triple DES
  2. Blowfish
  3. AES
  4. CAST
  5. RSA

Question 17

Which of the following is likely in a small-business environment?

  1. Most small businesses employ a full-time information-technology staff.
  2. Resources are available as needed.
  3. Small businesses have security personnel on staff.
  4. Most employees have experience with information security.
  5. Security budgets are very small.

Question 18

When attempting to identify OPSEC indicators, information-security professionals must: (Choose THREE.)

  1. Discover the information daily activities yield.
  2. Meet with adversaries.
  3. Perform business impact analysis surveys.
  4. Scrutinize their organizations' daily activities.
  5. Analyze indicators, to determine the information an adversary can glean both from routine and nonroutine activities.

Question 19

Why should each system user and administrator have individual accounts? (Choose TWO.)

  1. Using generic user names and passwords increases system security and reliability.
  2. Using separate accounts for each user reduces resource consumption, particularly disk space.
  3. By using individual login names and passwords, user actions can be traced.
  4. If users do not have individual login names, processes can automatically run with root/administrator access.
  5. A generic user name and password for users and security administrators provides anonymity, which prevents useful logging and auditing.

Question 20

Organizations____________ risk, when they convince another entity to assume the risk for them.

  1. Elevate
  2. Assume
  3. Deny
  4. Transfer
  5. Mitigate