Sy0-601 Study Test 83 Correctly Answered Questions Latest Update

Which of the following has a cyber security framework (CSF) that focuses exclusively on IT security, rather than IT service provisioning? {Ans: } *National Institute of Standards and Technology (NIST)* International Organization for Standardization (ISO) Control Objectives for Information and Related Technologies (COBIT) Sherwood Applied Business Security Architecture (SABSA)The _____ requires federal agencies to develop security policies for computer systems that process confidential information. {Ans: } Sarbanes-Oxley Act (SOX) *Computer Security Act* Federal information Security Management Act (FISMA) Gramm-Leach-Bliley Act (GLBA)How might the goals of a basic network management not be well-aligned with the goals of security? {Ans: } Management focuses on confidentiality and availability. Management focuses on confidentiality over availability. Management focuses on integrity and confidentiality. *Management focuses on availability over confidentiality.*A company has an annual contract with an outside firm to perform a security audit on their network. The purpose of the annual audit is to determine if the company is in compliance with their internal directives and policies for security control. What broad class of security control that accurately demonstrates the purpose of the audit? {Ans: } *Managerial* Technical Physical CompensatingAny external responsibility for an organization's security lies mainly with which individuals? {Ans: } *The owner* Tech