Which of the following is the MOST important action when using a web application that has recognized vulnerabilities?

• A.Deploy an application firewall.
• B.Deploy host-based intrusion detection.
• C.Install anti-spyware software.
• D.Monitor application level logs.

Comment: *

Name: *

Email: *

Verification: *

A common concern with poorly written web applications is that they can allow an attacker to:

• A.gain control through a buffer overflow.
• B.conduct a distributed denial of service (DoS) attack.
• C.abuse a race condition.
• D.inject structured query language (SQL) statements.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be MOST useful in developing a series of recovery time objectives (RTOs)?

• A.Gap analysis
• B.Regression analysis
• C.Risk analysis
• D.Business impact analysis

Comment: *

Name: *

Email: *

Verification: *

The decision on whether new risks should fall under periodic or event-driven reporting should be based on which of the following?

• A.Mitigating controls
• B.Visibility of impact
• C.Likelihood of occurrence
• D.Incident frequency

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be MOST useful in developing a series of recovery time objectives (RTOs)?

• A.Gap analysis
• B.Regression analysis
• C.Risk analysis
• D.Business impact analysis

Comment: *

Name: *

Email: *

Verification: *