UNIVERSITY EXAMINATIONS: 2018/2019
EXAMINATION FOR THE DEGREE OF BACHELOR OF SCIENCE IN APPLIED
COMPUTING
BAC3216 INFORMATION SYSTEMS SECURITY POLICIES
FULL TIME/PARTTIME
DATE: APRIL 2019 TIME: 2 HOURS
INSTRUCTIONS: Answer Question One & ANY OTHER TWO questions.
QUESTION ONE
a) Explain the term policy (2Marks)
b) Explain the considerations of information security policy (6 Marks)
c) Discuss how you will develop an information security policy (6 Marks)
d) Examine various issues relating to privacy that need to be incorporated in information
security policy (8 Marks)
e) Discuss the main technologies used to enforce an information security policy (8 Marks)
QUESTION TWO
a) Explain the implications of enforcing acceptable use policies in organisations (6 Marks)
b) Explain the main issues considered in laws concerned with intellectual property rights
(6 Marks)
c) Describe the various tools that can be used to enforce network security and email policies
(8 Marks)
QUESTION THREE
a) Discuss the applicability of internet censorship in protecting organizations against security
threats (8 Marks)
b) Analyse the considerations of a disaster recovery and business continuity plan for
organizations (12 Marks)
QUESTION FOUR
a) Examine the benefits provided by an audit trail (4Marks)
b) Discuss the applicability of Physical Access controls and logical access controls (4 Marks)
c) What are the privacy challenges in a distributed system? (4 Marks)
d) Explain Cybercrime legislation as an integral part of information security (8 Marks)
QUESTION FIVE
a) Examine the role of patch management as a security policy management (8 Marks)
b) Discuss tools that can be used to automate an information security policy against Cyber
Crime (12 Marks)
