Free GIAC G2700 Exam Dumps Questions & Answers

You work as an Information Security Manager for uCertify Inc. You have been assigned the task to create the documentation on control A.7.2 of the ISO standard. Which of the following is the chief concern of control A.7.2?

• A.Identification of inventory
• B.Classification of information
• C.Classification of owners
• D.Usage of information

CORRECT TEXT
Sam uses Monte Carlo simulation to quantitatively assess cost and schedule risks of his project during planning processes. During risk monitoring and control, Sam repeats the technique, but it leads to different results. Which of the following cannot be the reason for the difference in results?

• A.None of the dummy activities in the network logic has an element of uncertainty, which may get bigger over time.
• B.New risks may have been identified. These influence the input data used for Monte Carlo simulation in a way which was not predictable at the time when the simulation was run.
• C.New risks may have been identified. These cannot influence the input data used for Monte Carlo simulation in a way which was not predictable at the time when the simulation was run.
• D.Some dummy activities in the network logic have an element of uncertainty, which gets bigger over time. While the project proceeds, it is getting even harder to predict how the team members assigned to them will perform.

Which of the following states that a user should never be given more privileges than are required to carry out a task?

• A.Principle of least privilege
• B.Role-based security
• C.Security through obscurity
• D.Segregation of duties

You work as a Network Security Administrator for uCertify Inc. Your organization has set up a new Internet connection in place of the previous one. It is your responsibility to ensure that employees use the Internet only for official purposes. While reviewing Internet usages, you find that a few people have traversed and downloaded some inappropriate and illegal information. You want to make a policy to stop all these activities in the future. Which of the following policies will you implement to accomplish the task?

• A.Privacy policy
• B.Due care policy
• C.Security policy
• D.Acceptable use policy

What does CRAMM stand for?

• A.Continuous Risk Analysis and Management Method
• B.CCTA Risk Analysis and Management Method
• C.Continuous Risk Analyzer and Manager Methodology
• D.CCTA Risk Analyzer and Manager Methodology