13.1 Policies

Question 1

Password policy should include:

Answer 1

Education for end users. Strong password requirements, such as the following:
Minimum password lengths
Restrictions on the use of proper names
Password expiration
No previously used passwords allowed
No words spelled out completely within the password
The use of characters from the following groups:
Uppercase letters
Lowercase letters
Numbers
Special characters

Question 2

Data Loss Prevention DLP, target activities at 3 levels:

Answer 2

Client level (data in operation)
Network level (data in transit)
Storage level (data at rest)

Question 3

Incident response plan may outline various phases including:

Answer 3

Prepare, identify, contain, eradicate, recover, review.

Question 4

An AUP should be:

Answer 4

Clear
Concise
Detailed regarding acceptable and unacceptable use of the network
Congruent with the associated overall security policies of the organization
Concrete regarding consequences of AUP violations