Risk is defined as:

• A.Quantitative plus qualitative impact
• B.Asset loss times likelihood of event
• C.Advisory plus capability plus vulnerability
• D.Threat times vulnerability divided by control

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the MOST important factors for proactively determining system vulnerabilities?

• A.Deploy Intrusion Detection System (IDS) and install anti-virus on systems
• B.Subscribe to vendor mailing lists and distribute notifications of system requirements
• C.Conduct security testing, vulnerability scanning, and penetration testing
• D.Configure firewall, perimeter router and Intrusion Prevention System (IPS)

Comment: *

Name: *

Email: *

Verification: *

A system was hardened at the Operating System level and placed into the production environment. Months later an audit was performed and it identified insecure configuration different from the original hardened state.
Which of the following security issues is the MOST likely reason leading to the audit findings?

• A.Lack of hardening standards
• B.lack of change management processes
• C.Lack of asset management processes
• D.Lack of proper access controls

Comment: *

Name: *

Email: *

Verification: *

The process to evaluate the technical and non-technical security controls of an IT system to validate that a given design and implementation meet a specific set of security requirements is called____________________.

• A.Security accreditation
• B.Alignment with business practices and goals.
• C.Security system analysis
• D.Security certification

Comment: *

Name: *

Email: *

Verification: *

What is one key difference between Capital expenditures and Operating expenditures?

• A.Operating expenses can be depreciated over time and Capital expenses cannot
• B.Capital expenses cannot include salaries and Operating expenses can
• C.Operating expense cannot be written off while Capital expense can
• D.Capital expenditures allow for the cost to be depreciated over time and Operating does not

Comment: *

Name: *

Email: *

Verification: *