lab 1

Question 1

Is the PC10 system in compliance with the security template based on the gap analysis results?

Yes
No

Answer 1

No

Question 2

Performing gap analysis forces systems into compliance.

True
False

Answer 2

False

Question 3

Gap analysis is a process that identifies how an organization’s security systems deviate from those required or recommended by a framework.

True
False

Answer 3

True

Question 4

When should gap analysis be performed? (Select all that apply)

when first adopting a framework

when meeting a new industry or legal
compliance requirement

after significant time has past

when decommissioning legacy hardware

Answer 4

when first adopting a framework

when meeting a new industry or legal compliance requirement

after significant time has past

Question 5

What is the purpose of a gap analysis?

discovering the differences between the intended or expected configuration of a system and its actual operating configuration

exploring the source code of a open source application for flaws and vulnerabilities

determining the probability and likelihood of a threat causing harm to an asset

evaluating the level of compliance to a regulation or contractual obligation

Answer 5

discovering the differences between the intended or expected configuration of a system and its actual operating configuration

Question 6

Which of the following statements is false in regard to gap analysis?

Some variations from a baseline may be more secure

Some variations from a baseline are less secure

A single security template is sufficient to analyze all systems

Security template selection should be specific to its product version and build number

Answer 6

A single security template is sufficient to analyze all systems