Audits are either done based on the status of a system or application at a specific time or done as a study over a period of time that takes into account changes and processes.
Which of the following pairs matches an audit type that is done over time, along with the minimum span of time necessary for it?

• A.SOC Type 2, one year
• B.SOC Type 1, one year
• C.SOC Type 2, one month
• D.SOC Type 2, six months

Comment: *

Name: *

Email: *

Verification: *

What does dynamic application security testing (DAST) NOT entail?

• A.Scanning
• B.Probing
• C.Discovery
• D.Knowledge of the system

Comment: *

Name: *

Email: *

Verification: *

Web application firewalls (WAFs) are designed primarily to protect applications from common attacks like:

• A.Ransomware
• B.Syn floods
• C.XSS and SQL injection
• D.Password cracking

Comment: *

Name: *

Email: *

Verification: *

The BCDR plan/process should be written and documented in such a way that it can be used by ____________.
Response:

• A.Someone with the requisite skills
• B.Essential BCDR team members
• C.Users
• D.Regulators

Comment: *

Name: *

Email: *

Verification: *

Which protocol, as a part of TLS, handles negotiating and establishing a connection between two parties?

• A.Record
• B.Binding
• C.Negotiation
• D.Handshake

Comment: *

Name: *

Email: *

Verification: *