You administer a small corporate network. On Friday evening, after close of business, you performed a full backup of the hard disk of one of the company's servers. On Monday evening, you performed a differential backup of the same server's hard disk, and on Tuesday, Wednesday, and Thursday evenings you performed incremental backups of the server's hard disk.

Which files are recorded in the backup that you performed on Thursday?

Which concept involves contracting with a third party who will provide a location and equipment to be used in the event of an emergency?

Management at your company has requested that you implement DLP. What is the purpose of this technology?

Which automation or scripting concept can reduce the risk that new equipment might not have all the same settings, applications, and drivers as your existing equipment without changing vital user settings?

Management has notified you that the mean time to repair (MTTR) a critical hard drive is too high. You need to address this issue with the least amount of expense. What should you do?

What is typically part of an information policy?

Your client is a small retailer that accepts orders via e-mail. The e-mail form submitted by a client's customer includes credit card information, and you demonstrate to the client how risky that is. As a result, the client adds secure credit card processing to their website, and no longer accepts e-mail orders. Which risk management concept does this represent?

The business continuity team is interviewing users to gather information about business units and their functions. Which part of the business continuity plan includes this analysis?

You need to display the current protocol statistics and port connections for Windows and UNIX/Linux computers. Which command should you use?

As part of a new security initiative, your organization has decided that all employees must undergo security awareness training. What is the aim of this training?

When calculating risks by using the quantitative method, what is the result of multiplying the asset values by the exposure factor (EF)?

Which policy defines the sensitivity of a company's data?

Which principle stipulates that multiple modifications to a computer system should NOT be made at the same time?

Your company is establishing new employment candidate screening processes. Which of the following should be included? (Choose all that apply.)

Your company has recently started adopting formal security policies to comply with several state regulations. One of the security policies states that certain hardware is vital to the organization. As part of this security policy, you must ensure that you have the required number of components plus one extra to plug into any system in case of failure. Which strategy is this policy demonstrating?

You are the security administrator for your company. You identify a security risk. You decide to continue with the current security plan. However, you develop a contingency plan for if the security risk occurs. Which type of risk response strategy are you demonstrating?

To justify the expenses of the forensic investigation, what is one thing that you should closely document?

In role-based awareness training, which of the following user groups would need to learn about implementing, managing, and monitoring controls?

Your client allows the users to choose their own logon names for their account. You have seen opsboss, vpgal, and domainadm used as logons. You care very concerned about these obvious administrative accounts. What security control should you implement?

What preserves the existence and integrity of relevant electronic records (and paper records) when litigation is imminent?

The company who just hired you provides a fixed amount to new employees so that the employee can purchase the laptop of their choice. After the purchase, the employee only needs to submit the receipt. What should you implement so that the company is able to better track the laptops?

Which factor does NOT minimize the security breach incidents committed by internal employees?

You identify a security risk that you do not have in-house skills to address. You decide to procure contract resources. This contractor will be responsible for handling and managing this security risk. Which type of risk response strategy are you demonstrating?

Your company decides to implement a RAID-5 array on several file servers. Which feature is provided by this deployment?

Your organization has recently implemented a new security policy that includes the implementation of the principle of least privilege. You need to ensure that users understand this principle and implement the appropriate procedures to adhere to this principle. What is the best implementation of this principle?

Your client's HR practices include promotion from within, and transferring people between offices on a regular basis. It seems like the most common question you hear when employees talk on the phone is "What office are you working at now and what are you doing?" What practice will ensure that a user's permissions are relevant and current?