Leia a parte do texto Key elements of information security
para responder à questãoNo texto, os elementos chave de Segurança da Informação que mencionam explicitamente o uso de políticas são

Question

Leia o texto para responder à questão.Information Security (InfoSec) definedInformation security, often abbreviated InfoSec, is a set of security procedures and tools that broadly protect sensitive enterprise information from misuse, unauthorized access, disruption, or destruction. InfoSec encompasses physical and environmental security, access control, and cybersecurity. It often includes technologies like cloud access security brokers (CASB), deception tools, endpoint detection and response (EDR), and security testing for DevOps (DevSecOps), among others.Key elements of information securityInfoSec comprises a range of security tools, solutions, and processes that keep enterprise information secure across devices and locations, helping to protect against cyberattacks or other disruptive events.•  Application security - Policies, procedures, tools, and best practices enacted to protect applications and their data.w•  Cloud security - Policies, procedures, tools, and best practices enacted to protect all aspects of the cloud, including systems, data, applications, and infrastructure.•  Cryptography - An algorithm-based method of securing communication meant to ensure only intended recipients of a specific message can view and decipher it.•  Disaster recovery - A method to reestablish functional technological systems in the wake of an event like a natural disaster, cyberattack, or another disruptive event.•  Incident response - An organization’s plan for responding to, remediating, and managing the aftermath of a cyberattack, data breach, or another disruptive event.•  Infrastructure security - Security that encompasses an organization’s entire technological infrastructure, including both hardware and software systems.•  Vulnerability management - The process an organization takes to identify, assess, and remediate vulnerabilities in its endpoints, software, and systems.Three pillars of information security: the CIA triadConfidentiality, integrity, and availability make up the cornerstones of strong information protection, creating the basis for an enterprise’s security infrastructure. The CIA triad offers these three concepts as guiding principles for implementing an InfoSec plan.ConfidentialityPrivacy is a major component of InfoSec, and organizations should enact measures that allow only authorized users access to information. Data encryption, multi-factor authentication, and data loss prevention are some of the tools enterprises can employ to help ensure data confidentiality.IntegrityEnterprises must maintain data’s integrity across its entire lifecycle. Enterprises with strong InfoSec will recognize the importance of accurate, reliable data, and permit no unauthorized user to access, alter, or otherwise interfere with it. Tools like file permissions, identity management, and user access controls help ensure data integrity.AvailabilityInfoSec involves consistently maintaining physical hardware and regularly completing system upgrades to guarantee that authorized users have dependable, consistent access to data as they need it.
(www.microsoft.com/en-ww/security/business/security-101/ what-is-information-security-infosec#:~:text=Information%20 security%2C%20often%20abbreviated%20(InfoSec,access%2C%20 disruption%2C%20or%20destruction. Adaptado.) Leia a parte do texto Key elements of information security
para responder à questãoNo texto, os elementos chave de Segurança da Informação que mencionam explicitamente o uso de políticas são  Alternativa A: application security e cloud security. Ou Alternativa B: cloud security e crytography. Ou Alternativa C: criptography e infrastructure security Ou Alternativa D: infrastructure security e vulnerability management. Ou Alternativa E: vulnerability management e application security.

Qconcursos · Accepted Answer

Alternativa [A] application security e cloud security. Gabarito: AFundamento decisivo: A questão pedia que, na seção “Key elements of information security”, fossem identificados os itens cuja definição menciona explicitamente “Policies”. No trecho transcrito, apenas application security e cloud security trazem essa palavra, o que conduz ao gabarito A.Tema central: menção explícita a políticas no textoAnálise das alternativasACertaA alternativa A é a correta porque reúne exatamente os dois elementos cujas definições, no trecho indicado, contêm de forma literal a palavra “Policies”. O critério da questão não era afinidade temática com segurança da informação, mas correspondência textual explícita com o termo cobrado.BErradaEstá errada porque cloud security atende ao critério, mas cryptography não traz menção explícita a “Policies” na definição apresentada.CErradaEstá errada porque nem cryptography nem infrastructure security contêm a palavra “Policies” no trecho listado.DErradaEstá errada porque infrastructure security e vulnerability management, conforme as definições transcritas, não mencionam explicitamente políticas.EErradaEstá errada porque application security menciona “Policies”, mas vulnerability management não menciona políticas em sua definição.Pegadinha da questãoA confusão era abandonar o critério literal de “mencionam explicitamente” e marcar itens que pertencem à área de segurança e poderiam envolver políticas na prática, mas que não trazem essa palavra no texto.Dica para questões semelhantesQuando o enunciado cobrar menção explícita, use conferência literal do termo no trecho indicado.Se a questão restringir a resposta a uma seção específica do texto, não amplie a leitura para outras partes nem para conhecimento externo.Em alternativas com dois elementos, os dois precisam satisfazer integralmente o critério; um só não basta.

Leia a parte do texto Key elements of information security ...

Gabarito comentado

Gabarito: A

Clique para visualizar este gabarito

Questões de assuntos semelhantes

Provas relacionadas