Question 1

Which of the following governance bodies provides management, operational and technical controls

to satisfy security requirements?

Options :

A : Senior Management

B : Business Unit Manager

C : Information Security Steering Committee

D : Chief Information Security Officer

Answer: A

Question 2

Which of the following can be prevented by an organization using job rotation and separation of

duties policies?

Options :

A : Collusion

B : Eavesdropping

C : Buffer overflow

D : Phishing

Answer: A

Question 3

Which of the following security controls will you use for the deployment phase of the SDLC to build

secure software?

Each correct answer represents a complete solution. Choose all that apply.

Options :

A : Vulnerability Assessment and Penetration Testing

B : Security Certification and Accreditation (C&A)

C : Change and Configuration Control

D : Risk Adjustments

Answer: A,B,D

Question 4

Rachael is the project manager for a large project in her organization. A new change request has

been proposed that will affect several areas of the project. One area of the project change impact is

on work that a vendor has already completed. The vendor is refusing to make the changes as they've

already completed the project work they were contracted to do. What can Rachael do in this

instance?

Options :

A : Threaten to sue the vendor if they don't complete the work.

B : Fire the vendor for failing to complete the contractual obligation.

C :

Withhold the vendor-s payments for the work they've completed.

D : Refer to the contract agreement for direction.

Answer: D

Question 5

You work as a Network Administrator for ABC Inc. The company uses a secure wireless network. John

complains to you that his computer is not working properly. What type of security audit do you need

to conduct to resolve the problem?

Options :

A : Operational audit

B : Dependent audit

C : Non-operational audit

D : Independent audit

Answer: D