Question 1
Which of the following is not a legitimate purpose of an investigation for employee misconduct?
- To determine whether company rules have been violated
- To ascertain whether company policies have been violated
- To catalog information about employees that might be derogatory for future use
- To determine if state laws have been violated
- To determine if federal laws have been violated
Question 2
Security professionals can most effectively convince management of the need for security by:
- quantifying and prioritizing the loss potential.
- emphasizing cost considerations.
- prioritizing the gain potential.
- emphasizing security awareness.
Question 3
The investigation's best approach to questioning relies on the following:
- Most suspects will lie or circumvent the truth.
- A suspect is innocent until proven guilty.
- A key suspect is guilty and evidence must be found.
- A signed statement in the form of a confession must be obtained.
- None of the above.
Question 4
Which of the following programs are used to reduce the incidence of accidental security breaches caused by human error or failure?
- Operationally critical threat, asset, and vulnerability evaluation (OCTAVE)
- Issue-specific security policy (ISSP)
- Security education, training, and awareness (SETA)
- Enterprise information security program (EISP)
Question 5
To be considered a trade secret, information must meet all of the following criteria except:
- the owner must take steps to prevent its unauthorized disclosure.
- persons to whom it is disclosed must know that it is secret.
- it must not be identifiable.
- it must not be available already in the public domain.