Information Assurance and Security 1

Information Assurance and Security 1
(Final Q1, Q2, FinXam)

Question text

True or False: Identify the security governance involved, including legal frameworks and geographies (enterprises)

Select one:

True

False

Question text

True or False: Business rules regarding handling of data/information assets

Select one:

True

False

Question text

Those who will see change to their capability and work with core units but are otherwise not directly affected

Identify soft enterprise

Answer: 

Question text

True or False:  Identify core enterprise (units) - those who are most affected and achieve most value from the security work

Select one:

True

False

Question text

The ability of the enterprise to function without service interruption or depletion despite abnormal or malicious events.

Select one:

a.

Availability

b.

Authentication

c.

Audit

d.

Assurance

Question text

Changes in security standards are usually less disruptive since the trade-off for their adoption is based on the value of the change. However, standards changes can also be mandated. What phase is that?

Select one:

a.

Phase H: Architecture Change Mana

b.

Phase B: Business Architecture

c.

Phase G: Implementation Governance

d.

Phase A: Architecture Vision

Question text

Those stakeholders who will be affected by security capabilities and who are in groups of communities

Identify communities involved

Answer: 

Question text

Assess the impact of new security measures upon other new components or existing leveraged systems. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase E: Opportunities & Solutions

c.

Phase F: Migration Planning

d.

Phase A: Architecture Vision

Question text

Security architecture has its own discrete security methodology.

Select one:

True

False

Question text

Establish architecture artifact, design, and code reviews and define acceptance criteria for the successful implementation of the findings. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase H: Architecture Change Management

c.

Phase G: Implementation Governance

d.

Phase A: Architecture Vision

Question text

True or False: Identify soft enterprise (units) - those who will see change to their capability and work with core units but are otherwise not directly affected

Select one:

True

False

Question text

Security architecture composes its own discrete views and viewpoints.

Select one:

True

False

Question text

True or False: Codified data/information asset ownership and custody

Select one:

True

False

Question text

Development of the business scenarios and subsequent high-level use-cases of the project concerned will bring to attention the people actors and system actors involved. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase D: Technology Architecture

c.

Phase C: Information System Architecture

d.

Phase A: Architecture Vision

Question text

The protection of information assets from loss or unintended disclosure, and resources from unauthorized and unintended use.

Select one:

a.

Audit

b.

Risk Management

c.

Asset Protection

d.

Administration

Question text

The definition and enforcement of permitted capabilities for a person or entity whose identity has been established.

Select one:

a.

Authentication

b.

Audit

c.

Authorization

d.

Assurance

Question text

Assess and baseline current security-specific technologies. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase D: Technology Architecture

c.

Phase A: Architecture Vision

d.

Phase C: Information System Architecture

Question text

True or False: Risk analysis documentation

Select one:

True

False

Question text

True or False: Written and published security policy

Select one:

True

False

Question text

The substantiation of the identity of a person or entity related to the enterprise or system in some way.

Select one:

a.

Authorization

b.

Authentication

c.

Audit

d.

Assurance

Question text

Changes in security requirements are often more disruptive than a simplification or incremental change. Changes in security policy can be driven by statute, regulation, or something that has gone wrong. What phase is that?

Select one:

a.

Phase H: Architecture Change Management

b.

Phase A: Architecture Vision

c.

Phase G: Implementation Governance

d.

Phase F: Migration Planning

Question text

Assess and baseline current security-specific technologies. What phase is that?

Select one:

a.

Phase A: Architecture Vision

b.

Phase C: Information System Architecture

c.

Phase D: Technology Architecture

d.

Phase B: Business Architecture

Question text

In a phased implementation the new security components are usually part of the infrastructure in which the new system is implemented. The security infrastructure needs to be in a first or early phase to properly support the project. What phase is that?

Select one:

a.

Phase A: Architecture Vision

b.

Phase B: Business Architecture

c.

Phase F: Migration Planning

d.

Phase G: Implementation Governance

Question text

Definition of relevant stakeholders and discovery of their concerns and objectives will require development of a high-level scenario. What phase is that?

Select one:

a.

Phase C: Information Systems Architecture

b.

Phase D: Technology Architecture

c.

Phase A: Architecture Vision

d.

Phase B: Business Architecture

Question text

Definition of relevant stakeholders and discovery of their concerns and objectives will require development of a high-level scenario. What phase is that?

Select one:

a.

Phase C: Information Systems Architecture

b.

Phase D: Technology Architecture

c.

Phase A: Architecture Vision

d.

Phase B: Business Architecture

Question text

Security architecture introduces unique, single-purpose components in the design.

Select one:

True

False

Question text

True or False: Identify communities involved (enterprises) - those stakeholders who will be affected by security capabilities and who are in groups of communities

Select one:

True

False

Question text

Identify existing security services available for re-use

Select one:

a.

Phase A: Architecture Vision

b.

Phase E: Opportunities & Solutions

c.

Phase D: Technology Architecture

d.

Phase F: Migration Planning

Question text

Those units outside the scoped enterprise who will need to enhance their security architecture for interoperability purposes

Identify extended enterprise

Answer: 

Question text

True or False: Identify extended enterprise (units) - those units outside the scoped enterprise who will need to enhance their security architecture for interoperability purposes

Select one:

True

False

Question text

True or False: Data classification policy documentation

Select one:

True

False

Question text

The ability to test and prove that the enterprise architecture has the security attributes required to uphold the stated security policies.

Select one:

a.

Authentication

b.

Audit

c.

Assurance

d.

Authorization

Question text

Those who are most affected and achieve most value from the security work

Identify core enterpise

Answer: 

Question text

Definition of relevant stakeholders and discovery of their concerns and objectives will require development of a high-level scenario. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase D: Technology Architecture

c.

Phase A: Architecture Vision

d.

Phase C: Information Systems Architecture

Question text

Revisit assumptions regarding interconnecting systems beyond project control, Identify and evaluate applicable recognized guidelines and standards and Identify methods to regulate consumption of resources. What phase is that?

Select one:

a.

Phase A: Architecture Vision

b.

Phase B: Business Architecture

c.

Phase D: Technology Architecture

d.

Phase E: Opportunities & Solutions

Question text

The ability to provide forensic data attesting that the systems have been used in accordance with stated security policies.

Select one:

a.

Authentication

b.

Audit

c.

Assurance

d.

Authorization

Question text

Security architecture addresses non-normative flows through systems and among applications.

Select one:

True

False

Question text

Determine who are the legitimate actors who will interact with the product/service/process. What phase is that?

Select one:

a.

Phase C: Information Systems Architecture

b.

Phase B: Business Architecture

c.

Phase A: Architecture Vision

d.

Phase D: Technology Architecture

Question text

Security architecture calls for its own unique set of skills and competencies of the enterprise and IT architects.

Select one:

True

False

Question text

Many security vulnerabilities originate as design or code errors and the simplest and least expensive method to locate and find such errors is generally an early review by experienced peers in the craft. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase A: Architecture Vision

c.

Phase G: Implementation Governance

d.

Phase H: Architecture Change Management

Question text

The organization's attitude and tolerance for risk.

Select one:

a.

Assurance

b.

Assurance

c.

Audit

d.

Risk Management

Question text

The following security specifics appropriate to the security architecture must be addressed within each phase in addition to the generic phase activities. What phase is that?

Select one:

a.

Phase D: Technology Architecture

b.

Phase C: Information Systems Architecture

c.

Phase B: Business Architecture

d.

Phase A: Architecture Vision

Question text

Are applicable to ensuring that security requirements are addressed in subsequent phases of the ADM

Select one:

a.

Phase D: Technology Architecture

b.

Phase A: Architecture Vision

c.

Phase C: Information Systems Architecture

d.

Phase B: Business Architecture

Question text

Every system will rely upon resources that may be depleted in cases that may or may not be anticipated at the point of system design. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase A: Architecture Vision

c.

Phase C: Information System Architecture

d.

Phase D: Technology Architecture

Question text

The ability to add and change security policies, add or change how policies are implemented in the enterprise, and add or change the persons or entities related to the systems.

Select one:

a.

Administration

b.

Audit

c.

Assurance

d.

Risk Management

Question text

Security architecture introduces its own normative flows through systems and among applications.

Select one:

True

False

Question text

From the Baseline Security Architecture and the Enterprise Continuum, there will be existing security infrastructure and security building blocks that can be applied to the requirements derived from this architecture development engagement. What phase is that?

Select one:

a.

Phase D: Technology Architecture

b.

Phase A: Architecture Vision

c.

Phase B: Business Architecture

d.

Phase E: Opportunities & Solutions

Question text

Definition of relevant stakeholders and discovery of their concerns and objectives will require development of a high-level scenario. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase D: Technology Architecture

c.

Phase A: Architecture Vision

d.

Phase C: Information Systems Architecture

Question text

Every system will rely upon resources that may be depleted in cases that may or may not be anticipated at the point of system design. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase A: Architecture Vision

c.

Phase D: Technology Architecture

d.

Phase C: Information System Architecture

Question text

Determine who are the legitimate actors who will interact with the product/service/process. What phase is that?

Select one:

a.

Phase C: Information Systems Architecture

b.

Phase B: Business Architecture

c.

Phase D: Technology Architecture

d.

Phase A: Architecture Vision

Question text

Revisit assumptions regarding interconnecting systems beyond project control, Identify and evaluate applicable recognized guidelines and standards and Identify methods to regulate consumption of resources. What phase is that?

Select one:

a.

Phase D: Technology Architecture

b.

Phase A: Architecture Vision

c.

Phase E: Opportunities & Solutions

d.

Phase B: Business Architecture

Question text

Development of the business scenarios and subsequent high-level use-cases of the project concerned will bring to attention the people actors and system actors involved. What phase is that?

Select one:

a.

Phase D: Technology Architecture

b.

Phase B: Business Architecture

c.

Phase C: Information System Architecture

d.

Phase A: Architecture Vision

Question text

Definition of relevant stakeholders and discovery of their concerns and objectives will require development of a high-level scenario. What phase is that?

Select one:

a.

Phase D: Technology Architecture

b.

Phase A: Architecture Vision

c.

Phase B: Business Architecture

d.

Phase C: Information Systems Architecture

Question text

In a phased implementation the new security components are usually part of the infrastructure in which the new system is implemented. The security infrastructure needs to be in a first or early phase to properly support the project. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase F: Migration Planning

c.

Phase G: Implementation Governance

d.

Phase A: Architecture Vision

Question text

Assess the impact of new security measures upon other new components or existing leveraged systems. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase E: Opportunities & Solutions

c.

Phase A: Architecture Vision

d.

Phase F: Migration Planning

Question text

Changes in security requirements are often more disruptive than a simplification or incremental change. Changes in security policy can be driven by statute, regulation, or something that has gone wrong. What phase is that?

Select one:

a.

Phase F: Migration Planning

b.

Phase A: Architecture Vision

c.

Phase G: Implementation Governance

d.

Phase H: Architecture Change Management

Question text

Changes in security standards are usually less disruptive since the trade-off for their adoption is based on the value of the change. However, standards changes can also be mandated. What phase is that?

Select one:

a.

Phase G: Implementation Governance

b.

Phase H: Architecture Change Mana

c.

Phase A: Architecture Vision

d.

Phase B: Business Architecture

Question text

Assess and baseline current security-specific architecture elements. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase C: Information System Architecture

c.

Phase D: Technology Architecture

d.

Phase A: Architecture Vision

Question text

Are applicable to ensuring that security requirements are addressed in subsequent phases of the ADM. What phase is that?

Select one:

a.

Phase B: Business Architecture

b.

Phase A: Architecture Vision

c.

Phase D: Technology Architecture

d.

Phase C: Information Systems Architecture

Question text

A full inventory of architecture elements that implement security services must be compiled in preparation for a gap analysis. What phase is that?

Select one:

a.

Phase D: Technology Architecture

b.

Phase A: Architecture Vision

c.

Phase C: Information System Architecture

d.

Phase B: Business Architecture

Question text

Assess and baseline current security-specific technologies. What phase is that?

Select one:

a.

Phase C: Information System Architecture

b.

Phase A: Architecture Vision

c.

Phase D: Technology Architecture

d.

Phase B: Business Architecture

Question text

From the Baseline Security Architecture and the Enterprise Continuum, there will be existing security infrastructure and security building blocks that can be applied to the requirements derived from this architecture development engagement. What phase is that?

Select one:

a.

Phase E: Opportunities & Solutions

b.

Phase B: Business Architecture

c.

Phase A: Architecture Vision

d.

Phase D: Technology Architecture

Question text

Assess and baseline current security-specific technologies. What phase is that?

Select one:

a.

Phase C: Information System Architecture

b.

Phase D: Technology Architecture

c.

Phase A: Architecture Vision

d.

Phase B: Business Architecture

Question text

Establish architecture artifact, design, and code reviews and define acceptance criteria for the successful implementation of the findings. What phase is that?

Select one:

a.

Phase G: Implementation Governance

b.

Phase A: Architecture Vision

c.

Phase B: Business Architecture

d.

Phase H: Architecture Change Management

Question text

Many security vulnerabilities originate as design or code errors and the simplest and least expensive method to locate and find such errors is generally an early review by experienced peers in the craft. What phase is that?

Select one:

a.

Phase G: Implementation Governance

b.

Phase A: Architecture Vision

c.

Phase H: Architecture Change Management

d.

Phase B: Business Architecture

Question text

Identify existing security services available for re-use. What phase is that?

Select one:

a.

Phase A: Architecture Vision

b.

Phase F: Migration Planning

c.

Phase D: Technology Architecture

d.

Phase E: Opportunities & Solutions

Question text

The following security specifics appropriate to the security architecture must be addressed within each phase in addition to the generic phase activities. What phase is that?

Select one:

a.

Phase C: Information Systems Architecture

b.

Phase D: Technology Architecture

c.

Phase B: Business Architecture

d.

Phase A: Architecture Vision

Question text

The organization's attitude and tolerance for risk.

Select one:

a.

Assurance

b.

Risk Management

c.

Assurance

d.

Audit

Question text

The definition and enforcement of permitted capabilities for a person or entity whose identity has been established.

Select one:

a.

Authorization

b.

Authentication

c.

Assurance

d.

Audit

Question text

The ability of the enterprise to function without service interruption or depletion despite abnormal or malicious events.

Select one:

a.

Authentication

b.

Audit

c.

Assurance

d.

Availability

Question text

The ability to add and change security policies, add or change how policies are implemented in the enterprise, and add or change the persons or entities related to the systems.

Select one:

a.

Audit

b.

Administration

c.

Risk Management

d.

Assurance

Question text

Security architecture introduces unique, single-purpose components in the design.

Select one:

True

False

Question text

Security architecture introduces its own normative flows through systems and among applications.

Select one:

True

False

Question text

The protection of information assets from loss or unintended disclosure, and resources from unauthorized and unintended use.

Select one:

a.

Audit

b.

Risk Management

c.

Administration

d.

Asset Protection

Question text

The ability to test and prove that the enterprise architecture has the security attributes required to uphold the stated security policies.

Select one:

a.

Authentication

b.

Authorization

c.

Audit

d.

Assurance

Question text

Security architecture has its own discrete security methodology.

Select one:

True

False

Question text

Security architecture calls for its own unique set of skills and competencies of the enterprise and IT architects.

Select one:

True

False

Question text

The substantiation of the identity of a person or entity related to the enterprise or system in some way.

Select one:

a.

Assurance

b.

Authentication

c.

Audit

d.

Authorization

Question text

Security architecture addresses non-normative flows through systems and among applications.

Select one:

True

False

Question text

Those who will see change to their capability and work with core units but are otherwise not directly affected

Answer: 

Question text

Security architecture composes its own discrete views and viewpoints.

Select one:

True

False

Question text

The ability to provide forensic data attesting that the systems have been used in accordance with stated security policies.

Select one:

a.

Authentication

b.

Assurance

c.

Authorization

d.

Audit

Question text

Those stakeholders who will be affected by security capabilities and who are in groups of communities

Identify communities involved

Answer: 

Question text

Those who are most affected and achieve most value from the security work

Identify core enterprise

Answer: 

Question text

Those units outside the scoped enterprise who will need to enhance their security architecture for interoperability purposes

Identify extended enterprise

Answer: