Which of these control objectives are NOT in the domain "12. OPERATIONAL SAFETY"?

• A.Technical vulnerability management
• B.Test data
• C.Redundancies
• D.Protection against malicious code

Comment: *

Name: *

Email: *

Verification: *

What is the best description of a risk analysis?

• A.A risk analysis calculates the exact financial consequences of damages.
• B.A risk analysis is a method of mapping risks without looking at company processes.
• C.A risk analysis helps to estimate the risks and develop the appropriate security measures.

Comment: *

Name: *

Email: *

Verification: *

In the context of contact with special interest groups, any information-sharing agreements should identify requirements for the protection of _________ information.

• A.Authorization
• B.Confidential
• C.Authentic
• D.Availability

Comment: *

Name: *

Email: *

Verification: *

You are a consultant and are regularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports.
Which reliability aspect of the information in your reports must you protect?

• A.Integrity
• B.Availability
• C.Confidentiality

Comment: *

Name: *

Email: *

Verification: *

Who is authorized to change the classification of a document?

• A.The administrator of the document
• B.The manager of the owner of the document
• C.The author of the document
• D.The owner of the document

Comment: *

Name: *

Email: *

Verification: *