Question 1 (1 point)

Why shouldn't information about specific systems be included in a job description?

Question 1 options:

	To protect against social engineering and other attacks
	To get as many candidates as possible
	To get more knowledgeable candidates
	To make sure candidates know all systems

Question 2 (1 point)

During what step of the employee life cycle are employees added to the organization's benefit system?

Question 2 options:

	Recruitment
	Onboarding
	User provisioning
	Orientation

Question 3 (1 point)

Which of the following is part of the user provisioning phase of the employee life cycle?

Question 3 options:

	A background check is conducted for the employee.
	The employee is added to the organization's payroll.
	The employee expectations of privacy are determined.
	The employee is provided with a username or smart card.

Question 4 (1 point)

Which of the following steps of the employee life cycle is considered the most dangerous?

Question 4 options:

	Termination
	Recruitment
	Onboarding
	User provisioning

Question 5 (1 point)

Which of the following best describes the purpose of security awareness?

Question 5 options:

	To focus attention on security
	To involve management in the process
	To integrate all the security skills and competencies into a common body of knowledge
	To teach skills that would allow a person to perform a certain function

Question 6 (1 point)

Which of the following best describes the purpose of security training?

Question 6 options:

	To focus attention on security
	To involve management in the process
	To teach skills that would allow a person to perform a certain function
	To integrate all the security skills and competencies into a common body of knowledge

Question 7 (1 point)

Which of the following statements about security awareness is not true?

Question 7 options:

	Awareness is training.
	The purpose of security awareness is to focus attention on security.
	Security awareness programs are designed to remind users of appropriate behaviors.
	A poster reminding users not to write their password down is an example of an awareness program.

Question 8 (1 point)

During what stage of the employee life cycle are user accounts disabled?

Question 8 options:

	Onboarding
	Career development
	Termination
	User provisioning

Question 9 (1 point)

Which of the following sections of the Acceptable Use Agreement dictates how information must be stored, transmitted, and communicated?

Question 9 options:

	Introduction
	Data classification
	Handling standards
	Applicable policy statements

Question 10 (1 point)

SETA is short for which of the following?

Question 10 options:

	Social Education, Training, and Awareness
	Security Education, Training, and Awareness
	Social Education, Training, and Application
	Security Education, Training, and Application