1. The main advantage of outsourcing security is that the outsourcing firm will have a higher level of expertise than is available in your own company.

   True

   False

10 points

QUESTION 2

1. You should always track every event in your event log, because you never know when that event might be important.

   True

   False

10 points

QUESTION 3

1. Users should be trained on what they should and shouldn't do, but they don't need to know the reasoning behind those instructions and restrictions.

   True

   False

10 points

QUESTION 4

1. A functional security policy with have detailed instructions on how a security control should be applied.

   True

   False

10 points

QUESTION 5

1. Agile development methodology uses a slow controlled series of steps (to reduce the chance of making errors), while the waterfall method consist of developing software quickly and fixing the bugs later.

   True

   False

10 points

QUESTION 6

1. One good way to promote professional ethics is to make sure that any security shortcuts you take are not made available to others.

   True

   False

10 points

QUESTION 7

1. Internal users who are not properly trained and/or have been assigned too many privileges are often the greatest threat to the security of your company.

   True

   False

10 points

QUESTION 8

1. Data should be classified so you and your employer can determine how much time and money should be spent on protecting that data.

   True

   False

10 points

QUESTION 9

1. Fuzzing is testing a program by applying random input data.

   True

   False

10 points

QUESTION 10

1. Policies and procedures are a standard mechanism for documenting how a company's security should be implemented and maintained.

   True

   False