You are undertaking a qualitative risk assessment of a likely security threat to an information system.
What is the MAIN issue with this type of risk assessment?

• A.It requires the use of complex software tools to undertake this risk assessment.
• B.There needs to be a large amount of previous data to "train" a qualitative risk methodology.
• C.These risk assessments are largely subjective and require agreement on rankings beforehand.
• D.Dealing with statistical and other numeric data can often be hard to interpret.

Comment: *

Name: *

Email: *

Verification: *

Why is it prudent for Third Parties to be contracted to meet specific security standards?

• A.It is a legal requirement for Third Party support companies to meet client security standards.
• B.All access to corporate systems must be controlled via a single set of rules if they are to be enforceable.
• C.Vulnerabilities in Third Party networks can be malevolently leveraged to gain illicit access into client environments.
• D.Third Parties cannot connect to other sites and networks without a contract of similar legal agreement.

Comment: *

Name: *

Email: *

Verification: *

What are the different methods that can be used as access controls?
1. Detective.
2. Physical.
3. Reactive.
4. Virtual.
5. Preventive.

• A.1, 2 and 4.
• B.3, 4 and 5.
• C.1, 2 and 3.
• D.1, 2 and 5.

Comment: *

Name: *

Email: *

Verification: *

Which term describes the acknowledgement and acceptance of ownership of actions, decisions, policies and deliverables?

• A.Credibility.
• B.Accountability.
• C.Confidentiality.
  https://hr.nd.edu/assets/17442/behavior_model_4_ratings_3_.pdf
• D.Responsibility.

Comment: *

Name: *

Email: *

Verification: *

What physical security control would be used to broadcast false emanations to mask the presence of true electromagentic emanations from genuine computing equipment?

• A.Copper infused windows.
• B.Faraday cage.
• C.Unshielded cabling.
• D.White noise generation.

Comment: *

Name: *

Email: *

Verification: *