Question 1

Which of the following governance bodies provides management, operational and technical controls

to satisfy security requirements?

Options :

A : Senior Management

B : Business Unit Manager

C : Information Security Steering Committee

D : Chief Information Security Officer

Answer: A

Question 2

The goal of Change Management is to ensure that standardized methods and procedures are used

for efficient handling of all changes. Which of the following are Change Management terminologies?

Each correct answer represents a part of the solution. Choose three.

Options :

A : Request for Change

B : Service Request Management

C : Change

D : Forward Schedule of Changes

Answer: A,C,D

Question 3

Rachael is the project manager for a large project in her organization. A new change request has

been proposed that will affect several areas of the project. One area of the project change impact is

on work that a vendor has already completed. The vendor is refusing to make the changes as they've

already completed the project work they were contracted to do. What can Rachael do in this

instance?

Options :

A : Threaten to sue the vendor if they don't complete the work.

B : Fire the vendor for failing to complete the contractual obligation.

C :

Withhold the vendor-s payments for the work they've completed.

D : Refer to the contract agreement for direction.

Answer: D

Question 4

Which of the following security controls will you use for the deployment phase of the SDLC to build

secure software?

Each correct answer represents a complete solution. Choose all that apply.

Options :

A : Vulnerability Assessment and Penetration Testing

B : Security Certification and Accreditation (C&A)

C : Change and Configuration Control

D : Risk Adjustments

Answer: A,B,D

Question 5

In which of the following mechanisms does an authority, within limitations, specify what objects can

be accessed by a subject?

Options :

A : Role-Based Access Control

B : Discretionary Access Control

C : Task-based Access Control

D : Mandatory Access Control

Answer: B