IS policies Quiz

Froggy Jumps

Parties jouées 8

Créer une copie

À propos de cette activité

Test your knowledge of internal security policies.

Créé par

Doris Kralj

Slovenia

Téléchargez la version pour jouer sur papier

Top 10 résultats

#	Jeux	Précision	temps
1	marjan 23 Octobre 2025	% 96	03:40

Voulez-vous apparaître dans le Top 10 de ce jeu? Connectez-vous pour vous identifier.

Créez votre propre jeu gratuite à partir de notre créateur de jeu

Affrontez vos amis pour voir qui obtient le meilleur score dans ce jeu

Créer un défi

Bill of Rights Game - The Constitutionalist

Doni The Don

United States

(90)

Test your knowledge on the Bill of Rights. A fun way to test your knowledge and focus on where you need to improve.
The Integumentary System

Breanna Nesbitt

United States

(58)

Functions and Structures of the skin
pizza

Lorelay Tyana

Romania

(261)

joc despre pizza
Ethos, Pathos, and Logos Quiz

Kristine Vester

United States

(131)

Test your knowledge of ethos, pathos, and logos with these 10 questions on examples of persuasive techniques.
Phlebotomy Order of Draw Quiz

Pamela Chapman

United States

(59)

Test your knowledge of the order of draw in Phlebotomy with these 10 questions!

		%
	Anonyme	%
		%
		%

Imprimez votre jeu

IS policies Quiz


Froggy Jumps IS policies QuizVersion en ligne Test your knowledge of internal security policies. par Doris Kralj 1 What phase follows when a security incident is detected and confirmed? a Detect and identify b Response and remediation c Analysis and closure 2 Which data label is most restrictive and requires offline erasure after 30 days? a Confidential b Public c Internal 3 What must you use to access company resources while remote? a Cloudflare WARP b Public WiFi c Unsecured VPN 4 Which document practice helps prevent data leakage when sharing data? a Use Google Drive with expiration dates for temporary access b Share via public links without limits c Email large attachments to all recipients 5 What is the recommended action for patching critical vulnerabilities? a Install within 24 hours unless CAB changes b Patch only quarterly c Ignore if not convenient 6 Who has the final say on external communications about incidents? a Incident Manager b Board of Directors c CTO 7 What should you do with hardcopy documents containing confidential data? a Shred when no longer needed b Email to team as backup c Keep for 7 years 8 Which type of data requires the Confidential label automatically? a PII b Internal data only c Public data 9 Which tool is used to manage code and enforce access controls? a Public GitHub without access controls b Secure code repository (e.g., Gitlab) c Local only on PC 10 What must be done before decommissioning storage media? a Reformat once b Wipe data thoroughly or physical destruction c Leave as is for reuse 11 What is the first step of incident handling? a Restore services b Contain the incident c Detect and report 12 What is a security event? a A security incident b An event with a confirmed compromise of CIA c Any event that has a potential impact on CIA 13 What must be installed on all servers as part of patching policy? a Manual patching only b Disabled updates c Auto-install Security Patches 14 What is required for external access authentication? a Mandatory 2FA b Single password c No authentication 15 Which type of data label means publicly shareable data? a Confidential b Public c Internal 16 What should you do with development data before production? a Ensure it is removed or masked b Publish it for auditing c Move to production anyway 17 Which policy guides data encryption in transit? a Backup policy b Cryptographic Controls Policy c Password policy 18 What is the principle behind 'Need to know' access? a No access control b Access only to necessary systems/data c Access to all data 19 Which role is responsible for post-mortem actions in an incident? a CTO only b First responder c Incident manager 20 Where can you store hardcopies of confidential data? a In a locked, fireproof cabinet b Shared drives c Personal desks 21 What should be used to grant temporary data access? a Email attachment b Google Drive with expiration c Permanent share 22 Which data type requires strict privacy handling rules? a Confidential:PII b Internal c Public 23 Who approves external-facing communications about incidents? a Board of Directors b CTO alone c Security team only 24 What should be logged when a supplier is decommissioned? a Data wiping verification b New contract signed c Unchanged data 25 Which document outlines cloud service supplier rules? a Supplier selection guidelines b Supplier Security Policy c Code review guideline 26 What is an essential control for BYOD devices? a Ignore patches b Device management and patching c Disable management 27 Where would you find info on decomissioning? a Change management policy b Access control policy c Equipment management policy 28 What is required before sharing credentials externally? a NDA b Public posting c DPA

IS policies Quiz

Froggy Jumps

À propos de cette activité

Créé par

Téléchargez la version pour jouer sur papier

Top Jeux

Froggy Jumps

Bill of Rights Game - The Constitutionalist

Froggy Jumps

The Integumentary System

Froggy Jumps

pizza

Froggy Jumps

Ethos, Pathos, and Logos Quiz

Froggy Jumps

Phlebotomy Order of Draw Quiz

Froggy Jumps

IS policies QuizVersion en ligne

par Doris Kralj

What phase follows when a security incident is detected and confirmed?

Which data label is most restrictive and requires offline erasure after 30 days?

What must you use to access company resources while remote?

Which document practice helps prevent data leakage when sharing data?

What is the recommended action for patching critical vulnerabilities?

Who has the final say on external communications about incidents?

What should you do with hardcopy documents containing confidential data?

Which type of data requires the Confidential label automatically?

Which tool is used to manage code and enforce access controls?

What must be done before decommissioning storage media?

What is the first step of incident handling?

What is a security event?

What must be installed on all servers as part of patching policy?

What is required for external access authentication?

Which type of data label means publicly shareable data?

What should you do with development data before production?

Which policy guides data encryption in transit?

What is the principle behind 'Need to know' access?

Which role is responsible for post-mortem actions in an incident?

Where can you store hardcopies of confidential data?

What should be used to grant temporary data access?

Which data type requires strict privacy handling rules?

Who approves external-facing communications about incidents?

What should be logged when a supplier is decommissioned?

Which document outlines cloud service supplier rules?

What is an essential control for BYOD devices?

Where would you find info on decomissioning?

What is required before sharing credentials externally?