Recent Question

management-driven model 1. A security door has been designed so that it will ignore signals from the building’s door entry system in the event of a power failure. This is known as: a. Fail soft b. Fail open c. Fail closed d. Fail secure 2. CIA is known as: a. Confidentiality, Integrity, and Availability b. Computers, Information, and Assets c. Confidence In Applications d. Controls, Integrity, and Availability 3. A ...

Other / Other 21 Mar 2016

primary purpose of a firewall 1. An organization wants to prevent SQL and script injection attacks on its Internet web application. The organization should implement a/an: a. Intrusion detection system b. Firewall c. Application firewall d. SSL certificate 2. A defense-in-depth strategy for anti-malware is recommended because: a. There are many malware attack vectors b. Anti-virus software is often troublesome on end user ...

Other / Other 21 Mar 2016

most effective countermeasure against script injection attacks 1. A user, Bill, has posted a link on a web site that causes unsuspecting users to transfer money to Bill if they click the link. The link will only work for users who happen to be authenticated to the bank that is the target of the link. This is known as: a. Cross site request forgery b. Cross-site scripting c. Broken authentication d. Replay attack 2. What is ...

Other / Other 21 Mar 2016

addressing security and organization 1. What is the correct approach for addressing security and organization objectives? a. Security and organization objectives should be developed separately. b. Security should drive organization objectives. c. Security should support organization objectives. d. The site security officer should approve or reject organization objectives. 2. The statement, “Promote professionalism among ...

Other / Other 21 Mar 2016

The purpose of digitally signing a Browser Helper Object (BHO) 1. “Safe languages” and “safe libraries” are so-called because: a. They automatically detect some forms of input attacks b. They automatically detect parameter tampering c. They automatically detect script injection d. They automatically detect malware attacks 2. The following are characteristics of a computer virus EXCEPT: a. Polymorphic b. ...

Other / Other 21 Mar 2016

The purpose for putting a “canary” value in the stack 1. One reason an organization would consider a distributed application is: a. Some components are easier to operate b. Distributed applications have a simpler architecture than other types of applications c. Some application components are owned and operated by other organizations d. Distributed applications are easier to secure 2. All of the following are ...

Other / Other 21 Mar 2016

options for risk treatment 1. Annualized loss expectancy is calculated using which formula: a. ALE = ARO x SLE b. ALE = EF x SLE c. ALE = ARO x AV d. ALE = ARO / SLE 2. A risk manager has completed a risk analysis for an asset valued at $4000. Two threats were identified; the ALE for one threat is $400, and the ALE for the second threat is $500. What is the amount of loss that the organization should estimate for an entire y ...

Other / Other 21 Mar 2016

quantitative risk assessment 1. The impact of a specific threat is defined as: a. The cost of recovering the asset b. The cost required to protect the related asset c. The effect of the threat if it is realized d. The loss of revenue if it is realized 2. Exposure factor is defined as: a. The part of an asset's value that is likely to be lost by a particular threat b. The probability that the threat will be realized c. The probab ...

Other / Other 21 Mar 2016

data classification policy 1. An organization wishes to purchase an application and is undergoing a formal procurement process to evaluate and select a product. What documentation should the organization use to make sure that the application selected has the appropriate security-related characteristics? a. Security guidelines b. Security policies c. Security requirements d. Functional requirements 2. A security manager is d ...

Other / Other 21 Mar 2016

sample average What is the sample average Math Assignment Help, Math Homework help, Math Study Help, Math Course Help ...

Other / Other 19 Mar 2016