Question 1

- (Exam Topic 15)
What is the FIRST step when developing an Information Security Continuous Monitoring (ISCM) program?

Accepted Answer

Correct answer: D

Question 2

- (Exam Topic 15)
An organization plans to acquire @ commercial off-the-shelf (COTS) system to replace their aging home-built reporting system. When should the organization's
security team FIRST get involved in this acquisition’s life cycle?

Accepted Answer

Correct answer: D

Question 3

- (Exam Topic 15)
Which of the following is an important requirement when designing a secure remote access system?

Accepted Answer

Correct answer: C

Question 4

- (Exam Topic 15)
An organization is planning a penetration test that simulates the malicious actions of a former network administrator. What kind of penetration test is needed?

Accepted Answer

Correct answer: C

Question 5

- (Exam Topic 15)
In the common criteria, which of the following is a formal document that expresses an implementation-independent set of security requirements?

Accepted Answer

Correct answer: C

Question 6

- (Exam Topic 15)
In which process MUST security be considered during the acquisition of new software?

Accepted Answer

Correct answer: B

Question 7

- (Exam Topic 15)
Wi-Fi Protected Access 2 (WPA2) provides users with a higher level of assurance that their data will remain protected by using which protocol?

Accepted Answer

Correct answer: A

Question 8

- (Exam Topic 15)
Which of the following does the security design process ensure within the System Development Life Cycle (SDLC)?

Accepted Answer

Correct answer: B

Question 9

- (Exam Topic 15)
Two computers, each with a single connection on the same physical 10 gigabit Ethernet network segment, need to communicate with each other. The first
machine has a single Internet Protocol (IP) Classless
Inter-Domain Routing (CIDR) address of 192.168.1.3/30 and the second machine has an IP/CIDR address 192.168.1.6/30. Which of the following is correct?

Accepted Answer

Correct answer: B

Question 10

- (Exam Topic 15)
A database server for a financial application is scheduled for production deployment. Which of the following controls will BEST prevent tampering?

Accepted Answer

Correct answer: B