1. Which of the following shortcoming may be revealed during an IT security audit?

a. whether the firewall is tall enough

b. ?whether the users are satisfied with IT services or not

c. whether only a limited number of people have access to critical data or not

d. ?whether the IT budget is adequate or not

2. A company's risk assessment process can include numerous threats to the computers and networks. Which of the following can be considered an adverse event?

a. Email attachment with harmful worm

b. ?Distributed denial-of-service attack

c. Harmful virus

d. All of the above

3. Assume your organization is experiencing an intruder attack. You have an intrusion detection system (IDS) set up. Which of the following events occurs first?

a. The network router sends traffic to the firewall as well as to the IDS

b. ?The IDS warns the firewall of suspicious traffic

c. ?Messages from the IDS are routed to the network security team

d. Network security team decides to block traffic from that IP address