BCS Practitioner Certificate in Information Assurance Architecture

0/10 checked

Q_01 domain/d1 · medium single discuss →

An architect must explain why controlling IT assets is fundamentally harder than controlling the physical assets that auditors have overseen for thousands of years. Which characteristic of IT best explains this challenge?

A The important things in IT — data, software and network traffic — tend to be invisible and cannot be seen or touched
B IT assets change ownership more frequently than physical assets
C Physical controls have never been proven effective
D Auditing techniques for physical assets cannot be applied to any electronic system

Q_02 domain/d1 · medium multi discuss →

An organisation has invested heavily in firewalls but keeps suffering breaches. An architect is asked to design a more effective approach. Which set of measures best reflects the holistic, multi-layered defence recommended, rather than a perimeter-only patchwork?

A Regular security awareness training tailored to employees' roles
B Enforcing policies with technology controls such as role-based access, encryption and auditing tools
C Establishing an incident response and reporting policy
D Concentrating protective effort exclusively on the network perimeter against outside attackers
E Making employees feel foolish for reporting suspicious activity to discourage false alarms