Computer and Information Security Handbook, 2nd Edition

Appendix eK

Answers To Review Questions/Exercises, Hands-On Projects, Case Projects And Optional Team Case Project By Chapter

John Vacca

Chapter 1: Building A Secure Organization

Review Questions/Exercises

True/False

1. True

2. False

3. True

4. False

5. True

Multiple Choice

1. E

2. D

3. A

4. D

5. A

Exercise

Solution

The following is a partial exercise solution. The students should be able to expand on the following:

The SAT should examine: Access control policy; procedures addressing access enforcement and dual authorization; security plan; information system design documentation; information system configuration settings and associated documentation; list of privileged commands requiring dual authorization; list of approved authorizations ...