202. The statement, "Information systems should be configured to require strong passwords," is an example of a/an:
Security requirement
Security policy
Security objective
Security control
Correct answer: (B) Security policy
203. The statement, "Promote professionalism among information system security practitioners through the provisioning of professional certification and training" is an example of a/an:
Mission statement
Objective
Goal
Requirement
Correct answer: (A) Mission statement
204. The TCSEC system evaluation criteria is used to address:
Confidentiality of information
Preventive and detective controls
Penetration testing
Intrusion prevention systems
Correct answer: (A) Confidentiality of information
205. The TCSEC system evaluation criteria is used to evaluate systems of what type:
E-Commerce
Public utilities
Banking
Military
Correct answer: (D) Military
206. The term "N+1" means:
The available electric power supply is at least double the current demand
Multiple components (N) have at least one (+1) independent backup component available
There is at least one (+1) backup HVAC unit in the event of failure or planned maintenance on another unit
Every server and network device utilizes a dual power supply
Correct answer: (B) Multiple components (N) have at least one (+1) independent backup component available
207. The term "object reuse" refers to:
A method used by malware to exploit weaknesses in running processes
The use of residual computing resources for other purposes
The ability to reuse application code
Processes that can discover and use residual data associated with other processes
Correct answer: (D) Processes that can discover and use residual data associated with other processes
208. The two components of risk management are:
Risk assessment and risk analysis
Vulnerability assessment and risk treatment
Risk assessment and risk mitigation
Risk assessment and risk treatment
Correct answer: (D) Risk assessment and risk treatment
209. The type of intellectual property law that protects a written work is known as:
Copyright
Trademark
Patent
Service mark
Correct answer: (A) Copyright
210. The type of smoke detector that is designed to detect smoke before it is visible is: