testtest

Which is the MOST critical aspect of computer-generated evidence?

• A. Integrity
• B. Objectivity
• C. Timeliness
• D. Relevancy

What is the MAIN goal of information security awareness and training?

• A. To inform users of information assurance responsibilities
• B. To prepare students for certification
• C. To inform users of the latest malware threats
• D. To comply with the organization information security policy

Which of the following is a common measure within a Local Area Network (LAN) to provide enadditional level of security through segmentation?

• A. Building Demilitarized Zones (DMZ)
• B. Implementing an Intrusion Detection System (IDS)
• C. Building Virtual Local Area Networks (VLAN)
• D. Implementing a virus scanner

Which of the following are the three MAIN categories of security controls?

• A. Confidentiality, integrity, availability
• B. Preventative, corrective, detective
• C. Corrective, detective, recovery
• D. Administrative, technical, physical

An international medical organization with headquarters in the United States (US) and branchesin France wants to test a drug in both countries. What is the organization allowed to do with thetest subject's data?

• A. Aggregate it into one database in the US
• B. Process it in the US, but store the information in France
• C. Share it with a third party
• D. Anonymize it and process it in the US

Which of the following is a common characteristic of privacy?

• A. Provision for maintaining an audit trail of access to the private data
• B. Process for the subject to inspect and correct personal data on-site
• C. Notice to the subject of the existence of a database containing relevant credit card data
• D. Database requirements for integration of privacy data

Which of the following is the key requirement for test results when implementing forensicprocedures?

• A. The test results must be quantifiable.
• B. The test results must be reproducible.
• C. The test result must be authorized.
• D. The test results must be cost-effective.

What is the BEST approach to anonymizing personally identifiable information (PII) in a testenvironment?

• A. Encoding data
• B. Swapping data
• C. Encrypting data
• D. Randomizing data

What is the threat modeling order using process for Attack simu-lation and threat analysis(PASTA)?

• A. Risk/impact analysis, application decomposition, threat analysis, vulnerability detection, attackenumeration
• B. Application decomposition, threat analysis, vulnerability detection, attack enumeration,risk/impact analysis
• C. Application decomposition, threat analysis, risk/impact analysis, vulnerability detection, attackenumeration
• D. Threat analysis, vulnerability detection, application decomposition, attack enumeration,risk/Impact analysis

<image: DeviceRGB, width: 1, height: 1, bpc: 8>

• A. Enforce the chmod of files to 755.
• B. Implement access control on the web server.
• C. Enforce the control of file directory listings.
• D. Implement Secure Sockets Layer (SSL) certificates throughout the web server.