Which of the following is an advantage of prototyping?

• A.Prototype systems can provide significant time and cost savings.
• B.Change control is often less complicated with prototype systems.
• C.It ensures that functions or extras are not added to the intended system.
• D.Strong internal controls are easier to implement.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an advantage of a qualitative over a quantitative risk analysis?

• A.It prioritizes the risks and identifies areas for immediate improvement in addressing the vulnerabilities.
• B.It provides specific quantifiable measurements of the magnitude of the impacts.
• C.It makes a cost-benefit analysis of recommended controls easier.
• D.It can easily be automated.

Comment: *

Name: *

Email: *

Verification: *

The Physical Security domain focuses on three areas that are the basis to physically protecting enterprise's resources and sensitive information. Which of the following is not one of these areas?

• A.Threats
• B.Countermeasures
• C.Vulnerabilities
• D.Risks

Comment: *

Name: *

Email: *

Verification: *

Which is the MAIN advantage of having an application gateway?

• A.To perform change control procedures for applications.
• B.To provide a means for applications to move into production.
• C.To log and control incoming and outgoing traffic.
• D.To audit and approve changes to applications.

Comment: *

Name: *

Email: *

Verification: *

To what does covert channel eavesdropping refer?

• A.Using a hidden, unauthorized network connection to communicate
  unauthorized information
• B.The use of two-factor passwords
• C.Nonbusiness or personal use of the Internet
• D.Socially engineering passwords from an ISP

Comment: *

Name: *

Email: *

Verification: *