Which of the following persons in an organization is responsible for rejecting or accepting the residual risk for a system?

• A.Information Systems Security Officer (ISSO)
• B.Designated Approving Authority (DAA)
• C.System Owner
• D.Chief Information Security Officer (CISO)

Comment: *

Name: *

Email: *

Verification: *

Adrian is the project manager of the NHP Project. In her project there are several work packages that deal with electrical wiring. Rather than to manage the risk internally she has decided to hire a vendor to complete all work packages that deal with the electrical wiring. By removing the risk internally to a licensed electrician Adrian feels more comfortable with project team being safe. What type of risk response has Adrian used in this example?

• A.Acceptance
• B.Avoidance
• C.Mitigation
• D.Transference

Comment: *

Name: *

Email: *

Verification: *

Which of the following programming languages are compiled into machine code and directly executed by the CPU of a computer system? Each correct answer represents a complete solution. Choose two.

• A.C
• B.Microosft.NET
• C.Java EE
• D.C++

Comment: *

Name: *

Email: *

Verification: *

DRAG DROP
Security code review identifies the unvalidated input calls made by an attacker and avoids those calls to be processed by the server. It performs various review checks on the stained calls of servlet for identifying unvalidated input from the attacker. Choose the appropriate review checks and drop them in front of their respective functions.
Select and Place:

Correct Answer:

Explanation/Reference:
Explanation: The various security code review checks performed on the stained calls of servlet are as follows: getParameter(): It is used to check the unvalidated sources of input from URL parameters in javax.servlet.HttpServletRequest class. getQueryString(): It is used to check the unvalidated sources of input from Form fields in javax.servlet.HttpServletRequest class. getCookies(): It is used to check the unvalidated sources of input from Cookies javax.servlet.HttpServletRequest class. getHeaders(): It is used to check the unvalidated sources of input from HTTP headers javax.servlet.HttpServletRequest class.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the principle duties performed by the BIOS during POST (power-on-self-test)?
Each correct answer represents a part of the solution. Choose all that apply.

• A.It provides a user interface for system's configuration.
• B.It identifies, organizes, and selects boot devices.
• C.It delegates control to other BIOS, if it is required.
• D.It discovers size and verifies system memory.
• E.It verifies the integrity of the BIOS code itself.
• F.It interrupts the execution of all running programs.

Comment: *

Name: *

Email: *

Verification: *