Vendor Security Quiz

1. What steps should you take when selecting vendors who will have access to your sensitive information? Pick the best answer.

• A. Include provisions for security in your vendor contracts, like a plan to evaluate and update security controls.
• B. Only do business with well-known vendors.
• C. Ensure that your vendors understand your compliance rules.
• D. Confirm that the vendor understands the importance of cybersecurity.

2. Anyone with access to your business network should be required to use a strong password. How long should a strong password be?

• A. Passwords should be at least 8 characters with a mix of numbers, symbols, and both capital and lowercase letters.
• B. Passwords should be at least 5 characters with a mix of numbers, symbols, and both capital and lowercase letters.
• C. Passwords should be at least 12 characters with a mix of numbers, symbols, and both capital and lowercase letters.
• D. Passwords should be at least 10 characters with a mix of numbers, symbols, and both capital and lowercase letters.

3. Requiring vendors to use multi-factor authentication to access your network makes users take an additional step beyond logging in with a password. True or False?

• True
• False

4. Properly configured strong encryption – recommended for any devices that connect remotely to your network – can help you detect cyber attacks in your system. True or False?

• True
• False

5. What should you do if a vendor has a breach that impacts your business data? Pick the best answer.

• A. Change all network passwords.
• B. Turn off all your computers and devices.
• C. Make sure that the vendor fixes the vulnerabilities and ensures that your information will be safe going forward.
• D. Disable multi-factor authentication systems.