11.5.7 Organization Policies

In business continuity planning, what is the primary focus of the scope?

Business processes Business processes are the primary focus of the scope within business continuity planning (BCP)

Which of the following provides a layout of all electrical, plumbing, HVAC, and networking wiring and components?

Floor plan A floor plan provides a layout of all electrical, plumbing, HVAC, and networking wiring and components.

Which of the following pieces of information are you MOST likely to find in a policy document?

A requirement for using encrypted communications for web transactions A policy is a document that describes the overall goals and requirements for a network. A policy identifies what should be done, but it doesn't necessarily define how the goal is to be reached. In this question, a policy might contain a requirement that encrypted communications are required for web transactions. The policy does not state the method that will be deployed, just that encryption is a requirement.

Which of the following defines an Acceptable Use Agreement?

An agreement that identifies the employees' rights to use company property, such as internet access and computer equipment, for personal use. An Acceptable Use Agreement identifies the employees' rights to use company property, such as internet access and computer equipment, for personal use.

You want to make sure that the correct ports on a firewall are open or closed. Which document should you check?

Baseline configurations Baseline configurations Baseline configuration documentation identifies specific configuration information for a device. For example, a configuration document for a firewall might include information about the IP addresses assigned to each interface and open firewall ports.

You plan to implement a new security device on your network. Which of the following policies outlines the process you should follow before you implement that device?

Change Management A Change Management Policy provides a structured approach to secure company assets and make changes to those assets. This type of policy: Establishes hardware, software, and infrastructure configurations that are to be deployed universally throughout the corporation. Tracks and documents significant changes to the infrastructure. Assesses the risk of implementing new processes, hardware, or software. Ensures that proper testing and approval processes are followed before changes are allowed.

Which of the following information are you MOST likely to find in a procedure document?

Details on how to test and deploy patches A procedure is a step-by-step process outlining how to implement a specific action. For example, you might have a procedure document that identifies how patches are tested and applied within your network.

Which of the following provides information on the subnets within your network, including the subnet addresses and the routers connecting each subnet?

Network diagram A network diagram includes a layout of the subnets within your network, including the subnet addresses and the routers connecting each subnet.

Which of the following is a contract in which both parties agree not to share proprietary or confidential information gathered during the business relationship?

Non-Disclosure Agreement A Non-Disclosure Agreement (NDA) is a contract in which both parties agree not to share proprietary or confidential information gathered during the business relationship.

Which type of documentation would you consult to find the location of RJ45 wall jacks and their endpoints in the intermediate distribution closet?

Wiring schematic A wiring schematic is a type of network diagram that focuses on the physical connections between devices. The wiring diagram typically shows: The location of drop cables and ports within offices or cubicles. The path that wires take between wiring closets and offices. A labeling scheme that matches endpoints in offices and cubicles with specific switch ports or punch down block locations.