1. You have been hired as the new Information Security consultant at XYZ Inc. Which of these employee behaviors would be a top security concern?

a. ?Using office computers for personal e-mails

b. ?Banging on the keyboard, when the computer is running slow

c. Leaving laptop computers unattended in public spaces

d. Drinking water or coffee while working on computers

2. ?You work for a company that is growing. Originally, all the users in all departments had access to all the data in the database. It is considered a security risk. What is an appropriate action to reduce the risk?

a. ?Install a two-step login procedure, where the user has to key in additional information for logging in

b. Tweak the firewall parameters so that outgoing traffic can be better controlled

c. Assign roles and privileges to users so that only job-relevant data is accessible to the user.

d. Install and provide stronger anti-virus software on the users' computers.