What concept does the "I" represent with the STRIDE threat model?

• A.Integrity
• B.Information disclosure
• C.IT security
• D.Insider threat

Comment: *

Name: *

Email: *

Verification: *

Which type of web application monitoring most closely measures actual activity?
Response:

• A.Synthetic performance monitoring
• B.Real-user monitoring (RUM)
• C.Database application monitor (DAM)
• D.Security information and event management (SIEM)

Comment: *

Name: *

Email: *

Verification: *

Which kind of SSAE audit reviews controls dealing with the organization's controls for assuring the confidentiality, integrity, and availability of data?

• A.SOC 1
• B.SOC 2
• C.SOC 3
• D.SOC 4

Comment: *

Name: *

Email: *

Verification: *

An audit against the ________ will demonstrate that an organization has -adequate security controls to meet its ISO 27001 requirements.
Response:

• A.SSAE 16 standard
• B.ISO 27002 certification criteria
• C.SAS 70 standard
• D.NIST SP 800-53

Comment: *

Name: *

Email: *

Verification: *

SOX was enacted because of which of the following?

• A.All of the above
• B.Poor financial controls
• C.Poor BOD oversight
• D.Lack of independent audits

Comment: *

Name: *

Email: *

Verification: *