Question 1

Which of the following statements about secure backup and restoration planning is correct?

Options :

A : In case of a system failure, create a disaster recovery plan that not only involves restoring data but also includes procedures for notifying the affected individuals, plans for mitigating further damage from data loss, and means for storing and retrieving the data securely.

B : In the world of cloud computing, the concept of creating backups is now an outmoded way of thinking. Merely make sure that all your databases create hot copies of the data in a secure cloud storage system for data recovery.

C : When creating backups, use a fast network connection to ensure that all data is backed up and to limit the time data is in motion.

D : When creating a plan for backup and restoration, you must consider that the cost of this action may exceed your normal operating budget.

Answer: A

Question 2

Access control is:

Options :

A : All answers are correct

B : Not the same as authorization, but the two go hand in hand

C : Another word for authorization

Answer: B

Question 3

The LeGrand Vulnerability-Oriented Risk Management method is based on vulnerability analysis and consists of four principle steps. Which of the following processes does the risk assessment step include? Each correct answer represents a part of the solution. Choose all that apply

Options :

A : Remediation of a particular vulnerability

B : Cost-benefit examination of countermeasures

C : Identification of vulnerabilities

D : Assessment of attacks

Answer: B,C,D

Question 4

Static analysis should be used to check for what?

Options :

A : Approved function/library calls, examining rules and semantics associated with logic, and thread performance management

B : Syntax, approved function/library calls, and memory management

C : Syntax, approved function/library calls, and race conditions

D : Syntax, approved function/library calls, and examining rules and semantics associated with logic and calls

Answer: D

Question 5

Data loss prevention (DLPt) echnologies work by:

Options :

A : Preventing data loss through internal means

B : Sitting at the gateway of the system and screening for intrusions

C : Filtering and reacting to traffic that meets profile parameters

D : Doing careful screening of all inputs

Answer: C