Sample Questions
Q) In order to prevent and detect fraud, which are then implemented? multiple-choice a) rotation
b) risk analysis
c) CERT
d) evaluation Officer
e) None
Q) Which of the following risk mitigation strategies allow Anne, a security analyst, to enforce the principle of least privilege?
a) Reviews user rights
b) CERT
c) Risk-based management
d) Annual expected loss
e) None
Q) Which of the following defines the business purpose of the system and acceptable data loss?
a) MTTR
b) Mean time between failures
c) RPO
d) warm place
e) None
Q) The company decided to move large amounts of data to the cloud provider to limit the costs of new infrastructure. Some of the information is sensitive and the CIO will ensure both parties have a clear understanding of the controls needed to protect data. Which of the following types of contractual interaction of it?
a) IS AN
b) MOU
c) SLA
d) BPA
e) None