Question 1 Which type of offsite backup service provides backups for transactional data only, typically in real time? A. Electronic vaulting B. Traditional data backups C. Remote journaling D. Database shadowing Question 2 Which of the following is NOT a major benefit of SETA programs? A. They can improve employee behavior B. They can improve configuration rule security C. They can inform members of the organization about where to report policy violations D. They enable the organization to hold employees accountable Question 3 Which of the following is not a component of a typical strategic plan? A. Strategic issues and core values B. Historical profile C. Organizational profile D. Executive summary Question 4 The _________ is the responsibility of the CISO, and is designed to reduce incidence of accidental security breaches by organization members. Question 5 The ___________ contains the contact information of individuals that need to be notified in the event of an actual incident. Question 6 At what point during an incident should law enforcement be notified? A. When an incident is determined to violate civil or criminal law B. When an organization no longer has the ability to handle an incident with its current resources C. Immediately after the detection of an event D. After the incident is escalated to a disaster Question 7 True or False: Slow-onset disasters occur over time and gradually degrade an organization’s ability to withstand their effects. True False Question 8 Which of the following is NOT an InfoSec policy recommended in NIST’s Special Publication 800-14 document? A. System-specific security policies (SysSP) B. Task-specific security policies (TSSP) C. Enterprise information security policy (EISP) D. Issue-specific security policies (ISSP) Question 9 Which is not one of the core principles in traditional management theory? A. Controlling B. Directing C. Leading D. Staffing Question 10 True or False: A CISO never reports to the CIO, and must always go through management hierarchies. True False Question 11 What is the name of the process that is used to establish whether or not a user’s identity is legitimate? A. Authorization B. Availability C. Authentication D. Accountability Question 12 True or False: Detecting a modification of system logs is an indicator that an actual incident has taken place. True False Question 13 A ___________ is a site with a fully configured computer facility, including all services, communications links, and physical plant operations Question 14 Which of the following is NOT a specific characteristic of ISSP? A. It contains an issue statement B. It requires frequent updates C. It addresses specific technology-based resources D. It addresses hardware implementation issues Question 15 A(n) _____________regulates the who, what, when, where, and how aspects of access to a system or resource. Question 16 True or False: A system administrator m ...

1. Question 1
Which type of offsite backup service provides backups for
transactional data only, typically in real time?
A.
Electronic vaulting
B.
Traditional data backups
C.
Remote journaling
D.
Database shadowing
Question 2
Which of the following is NOT a major benefit of SETA
programs?
A.
They can improve employee behavior
B.
They can improve configuration rule security
C.
They can inform members of the organization about where to
report policy violations
D.
They enable the organization to hold employees accountable
Question 3
Which of the following is not a component of a typical strategic
plan?

2. A.
Strategic issues and core values
B.
Historical profile
C.
Organizational profile
D.
Executive summary
Question 4
The _________ is the responsibility of the CISO, and is
designed to reduce incidence of accidental security breaches by
organization members.
Question 5
The ___________ contains the contact information of
individuals that need to be notified in the event of an actual
incident.
Question 6
At what point during an incident should law enforcement be
notified?
A.
When an incident is determined to violate civil or criminal law
B.
When an organization no longer has the ability to handle an
incident with its current resources
C.
Immediately after the detection of an event
D.

3. After the incident is escalated to a disaster
Question 7
True or False: Slow-onset disasters occur over time and
gradually degrade an organization’s ability to withstand their
effects.
True
False
Question 8
Which of the following is NOT an InfoSec policy recommended
in NIST’s Special Publication 800-14 document?
A.
System-specific security policies (SysSP)
B.
Task-specific security policies (TSSP)
C.
Enterprise information security policy (EISP)
D.
Issue-specific security policies (ISSP)
Question 9
Which is not one of the core principles in traditional
management theory?
A.
Controlling
B.
Directing
C.
Leading
D.

4. Staffing
Question 10
True or False: A CISO never reports to the CIO, and must
always go through management hierarchies.
True
False
Question 11
What is the name of the process that is used to establish
whether or not a user’s identity is legitimate?
A.
Authorization
B.
Availability
C.
Authentication
D.
Accountability
Question 12
True or False: Detecting a modification of system logs is an
indicator that an actual incident has taken place.
True
False
Question 13
A ___________ is a site with a fully configured computer
facility, including all services, communications links, and
physical plant operations
Question 14

5. Which of the following is NOT a specific characteristic of
ISSP?
A.
It contains an issue statement
B.
It requires frequent updates
C.
It addresses specific technology-based resources
D.
It addresses hardware implementation issues
Question 15
A(n) _____________regulates the who, what, when, where, and
how aspects of access to a system or resource.
Question 16
True or False: A system administrator may need to create a
different type of policy in order to implement a managerial
policy.
True
False
Question 17
Which of the following best describes a stakeholder?
A.
An individual who buys an organization’s products
B.
An individual or group who has a vested interest
C.
A competing organization
D.

6. An individual or group that owns financial stock in an
organization
Question 18
True or False: It is the CISO’s responsibility to ensure that
InfoSec functions are performed within an organization.
True
False
Question 19
All but which of the following is certification training
recommended for a student focusing on managerial information
security?
A.
Global Information Security Officer
B.
Security+
C.
Certified Information Systems Security Professional
D.
Certified Information Security Manager
Question 20
Which of the following is NOT a typical permission available
for use in ACLs?
A.
Read
B.
Expunge
C.
Delete

7. D.
Write
QUESTION 1
Which type of offsite backup service provides backups for
transa
ctional data only,
typically in real time?
A.
Electronic vaulting
B.
Traditional data backups
C.
Remote journaling
D.
Database shadowing
QUESTION 2
Which of the following is NOT a major benefit of SETA
programs?

8. A.
They can improve employee behavior
B.
They can improve configuration rule security
C.
They can inform members of the organization about where to
report policy violations
D.
They enable the organization to hold employees accountable
QUESTION 3
Which of the following is not a component of a typical strategic
plan?
A.
Strategic issues and core values
B.
Historical profile

9. C.
Organizational profile
D.
Executive summary
QUESTION 4
The
____
_____
is the responsibility of the CISO, and is designed to reduce
incidence
of accidental security breaches by organization members.
QUESTION 5
The
____
_______
contains the contact information of individuals tha
t need to be
notified in the event of an actual incident.
QUESTION 1
Which type of offsite backup service provides backups for
transactional data only,
typically in real time?

10. A.
Electronic vaulting
B.
Traditional data backups
C.
Remote journaling
D.
Database shadowing
QUESTION 2
Which of the following is NOT a major benefit of SETA
programs?
A.
They can improve employee behavior
B.
They can improve configuration rule security
C.
They can inform members of the organization about where to
report policy violations
D.
They enable the organization to hold employees accountable
QUESTION 3
Which of the following is not a component of a typical strategic
plan?
A.
Strategic issues and core values
B.

11. Historical profile
C.
Organizational profile
D.
Executive summary
QUESTION 4
The _________ is the responsibility of the CISO, and is
designed to reduce incidence
of accidental security breaches by organization members.
QUESTION 5
The ___________ contains the contact information of
individuals that need to be
notified in the event of an actual incident.
© 2012 Keith Rischer/www.KeithRN.com
Rapid Reasoning: Clostridium difficile Colitis
Chief Complaint/History of Present Illness:
Mindy Perkins is a 48 year old woman who presents to the ED
with 10-15 loose, liquid stools daily for the past
2 days. She completed a course of oral Amoxacillin seven days
ago for a dental infection. In addition to loose
stools, she complains of lower abd. pain that began 2 days ago
as well. She has not noted any blood in the
stool. She denies vomiting or fever/chills. She is on Prednisone
for Crohn’s disease as well as Pantaprazole
(Protonix) for severe GERD.

12. Past Medical History:
Your Initial VS:
T: 100.2 (o)
P: 92
R: 20
BP: 122/78
O2 sats: 98% RA
Ortho BP’s: Lying: 122/78 HR: 92
Standing: 120/70 HR: 114
Your Initial Nursing Assessment:
GENERAL APPEARANCE: appears weak and uncomfortable.
Easily fatigued
RESP: breath sounds clear with equal aeration bilat., non-
labored
CARDIAC: pink, warm & dry, S1S2, no edema, pulses 3+ in all
extremities
NEURO: alert & oriented x4
GI/GU: active BS in all quads, abd. soft/tender to palpation in
lower abd-no rebound tenderness or
guarding
MISC: Lips dry, oral mucosa tacky with no shiny saliva present
in mouth
Nursing Interventions:

13. Physician Orders:
o 1000 mg/20 mL…determine dosage to administer
Lab/diagnostic Results:
WILDA Pain Scale (5th VS)
Words: Crampy
Intensity: 7/10
Location: Generalized throughout RLQ-LLQ
Duration: Persistent since onset 2 days ago
Aggreviate:

14. Alleviate:
None
None
CBC Current High/Low
WBC 12.6
HGB 14.5
PLTS 188
Neuts. % 86
Lymphs % 10
BMP Current High/Low
Sodium 132
Potassium 3.5
Creatinine 1.45
BUN 47
CO2 18
© 2012 Keith Rischer/www.KeithRN.com
1. What data from the chief complaint, VS & nursing

15. assessment is RELEVANT that must be
recognized as clinically significant to the nurse?
RELEVANT data:
Chief complaint:
VS/assessment:
Rationale:
2. What lab/diagnostic results are RELEVANT that must be
recognized as clinically significant to the
nurse?
RELEVANT Diagnostic results:
Rationale:
3. What is the primary problem that your patient is most likely
presenting with?

16. 4. What is the underlying cause /pathophysiology of this
concern?
© 2012 Keith Rischer/www.KeithRN.com
5. What nursing priority will guide your plan of care?
6.What interventions will you initiate based on this priority?
Nursing Interventions
1.

17. 2.
3.
4.
Rationale:
1.
2.
3.
4.
Expected Outcome:
1.
2.

18. 3.
4.
7. What is the relationship between the following nursing
interventions/physician orders and your
patient’s primary medical problem?
Nsg. Interventions/MD orders:
Orthostatic BP’s
(ED standing order)
Establish PIV
(ED standing order)
Initiate enteric precautions
(ED standing order)
0.9% NS 1000 mL IV bolus
Hydromorphone (Dilaudid) 1 mg
IVP
Stool culture for C. difficile
BMP

19. CBC
Vancomycin 250 mg po
Admit to medical unit
Rationale: Expected Outcome:
© 2012 Keith Rischer/www.KeithRN.com
8. What body system(s) will you most thoroughly assess based
on the patient’s chief complaint and
primary/priority concern?
9. What is the worst possible complication to anticipate? (start
with A-B-C priorities)

20. 10. What nursing assessment(s) will you need to initiate to
identify and respond to quickly if this
complication develops?
11. What is the patient likely experiencing/feeling right now in
this situation?
12. What can you do to engage yourself with this patient’s
experience, and show that they matter to
you as a person?