风险管理习题集

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

收藏

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 练习进度 0 / 0

随机练习 自定义设置练习量

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

PHK company sells high-end jewellery to retail customers via its website. It then uses DDD,an external courier, to deliver the orders to its customers. Hackers, who wished to steal their customers addresses, inserted malicious code into an unprotected password input box on PHK's website and successful accessed and copied the addresses from PHK's database. This attack on PKH by the hackers is an example of which of the following cyber-risks?

When a new information system is being developed, or an existing system revised,, development should be carefully controlled. Which of the following are examples of system development controls?

X is a multi-site organisation, formed by the recent merger of five organisations. Each site currently uses a different information system for the recording and processing of raw material inventory. It is planned to replace these systems with one new system that will be common to every site . Which of the following system changeover methods may be used?

Flossy Mossy Ltd (FM) have decided to try and capitalise on the growing trend for online orders and home delivery by offering a courier service on top of their other services. They have hired a consultant to help review risks. Which of the following statements made by the consultant are describing cyber risk?

When an organisation undertakes changes as it carries out its business activities it can make changes that could impact its cyber security risks. Which of the following are changes that would necessarily affect cyber security risk management?

Direct changeover is assumed to be the highest risk alternative available. Which Two of the following controls can mitigate the risk of system failure during direct changeover

EU Member States can introduce exemptions from the GDPR's transparency obligations. Identify which of the following are acceptable reasons that member states can have exemptions.

One of the common forms of cyber attack is application attack. Which of the following are forms of applications attacks?

Four Folks Inc (FF) is restaurant chain based in the developed and prosperous country of Usland. FF specialise producing high quality burgers that are both meat and dairy free. FF was established by four friends who went to university together and were all vegan.Frustrated that the fast food industry was dominated by meat options and disappointed by the meat and dairy free alternatives available in the traditional fast food outlets, they decided to open a restaurant in the city of Few Pork when they left university over 15 years ago. The restaurant sells high-quality vegan burgers that are cooked to order and can be eaten in comfortable, good quality surroundings, or taken away. At first FF had modest success, but as awareness of veganism grew, they have expanded rapidly over the last 5 years. They now operate across Usland and have recently opened their first restaurants overseas, expanding into another well developed country, Ukland based in the EU. FF has always been very active on social media, raising awareness of the brand through this, but also monitoring customer feedback. As well as overseas expansion, FF has also embraced technological advancements and launched an application (app) that can be used by customers on smart phones, tablets and computers. To use the app, customers must set up an account by providing basic details(name, age, gender, employment status, address, and email address). Customers can use the app for a variety of purposes, to place an order for a take-away, to book a table for a meal (subject to availability), to pre-order the meal and to provide feedback on the meal. The booking of a table and ordering of a meal must be done at least15 minutes prior to the arrival time. This means that the table and meal can both be ready for the customer as soon as they arrive, leading to better resource management for FF and 3reduced waiting times for the customer. Which of the following statements are true? Select ALL that apply.

Which of the following would be recommended to a business to help reduce cyber risks? Select ALL that apply.

JR has just started working for EWI Plc. As part of EWI's on boarding process they require all new starters to attend a morning session about the purpose, values and principles of the organisation.EWI take cyber risk very seriously and the afternoon is dedicated to cyber security on boarding. Part of the cyber security on boarding includes logging on to their new laptop and setting up their profile, included in this EWI explain password best practice to their new hires JR has chosen the following password: JR1998&EW1. Which of the following statements are correct regarding JR's password? Select ALL that apply.

Montyrubbleis a chocolatier based in the prosperous country of Fraland. They set up in 20x2 and have enjoyed a lot of success since then. Their focus has primarily been on making sales to individual consumers through their ever expanding number of shops, but also through online sales and delivery. At a recent meeting, the senior management decided to start selling to other businesses either for sales in appropriate stores that fitted with their upmarket image, or as for hardworking employees. During the meeting the IT manager suggested that they should work towards ISO27001 compliance. Which of the following are the Most likely reasons for the IT manager suggesting becoming ISO27001 compliant? Select ALL that apply.

BUS Ltd are a training organization based in Gerland, the board are becoming increasingly concerned about cyber threats. The IT manager has proposed that as part of an increased focus on network configurations management the organization could ban the use of USB drives on work computers. The board are reluctant to sanction this because the use of USB drives is widespread by their employees and they feel it will meet with significant resistance from employees. Which of the following statements given by the IT manager about why USB devices should be banned are correct?

CHU company is working to improve its cyber security risk management and wishes to sta..by identifying which of the staff groups within the organisation snoud be tasked wis minimising the company's cyber security risk. Which of the following staff groups should be instructed to work to minimise CHU's cyber security risk?

GHJ company is concerned that the company's systems are at risk of cyber attack. Two specific areas of concern are the on-line payment systems used by customers and the useof remote devices by the company's sales force.Which TWO of the following types of penetration test would be most suitable to assess the vulnerability of GHJ to the cyber risks associated with their two areas of concern?

YWT company has been victim of a malware cyber attack and a forensic analysis is in operation. The company is currently running a system level analysis. Which THREE of the following objectives would be most likely to be included in a system level analysis?

Vera Inc is a cyber security firm that helps with protection techniques, but their main focus is in assisting with specialised responses to cyber security breaches that have occurred.They offer penetration testing and have highly silled employees in their firm. Which TWO of the following statements are correct?

F&T Co is a small family owned business making sandwiches and cakes for sale in their local region. The company has a head office, a small factory and two shops. The four sites while in fairly close proximity are all linked by the company's computer systems to help efficient stock control. This is important as their produce is perishable and they need to avoid wastage. As they have a small seating area in each shop, the two shops offer free customer Wi-Fi.The small board of F&T is meeting to discuss the cyber risks they face. Which of the flowing statements that were made at the meeting are true?

The board of HYN Plc have met recently to discuss cyber risks and think that HYN Plc need to make some improvements to their cyber security processes. Which of the following statements made by the directors of HYN Plc about cyber security are correct?

JZZPlcis dairy business based in Swemark, it supplies dairy products to businesses across th e Eu,and their biggest customers are supermarkets. They work closely with supermarkets to make sure they have fresh supplies arriving regularly throughout the week to their many stores. As such they have integrated ordering systems to enable easy ordering for their customers and prompt delivery to the appropriate outlets across Europe. The company has recently been subject to a SQL injection attack, where a hacker found an unprotected input box and injected malicious code into their database from the unprotected input box. The board are currently reviewing the cyber security processes in place and considering how they could improve their cyber security. Which of the following statements would be appropriate steps to help reduce the likelihood of such attacks in future?

1 6 7 8 9 10 11