When establishing objectives for physical security environments, which of the following functional controls SHOULD occur first?

1. A. Delay.
2. B. Drop.
3. C. Deter.
4. D. Deny.

Correct Answer: C

When considering outsourcing the processing of data, which two legal "duty of care" considerations SHOULD the original data owner make?
* 1 Third party is competent to process the data securely.
* 2. Observes the same high standards as data owner.
* 3. Processes the data wherever the data can be transferred.
* 4. Archive the data for long term third party's own usage.

1. A. 2 and 3.
2. B. 3 and 4.
3. C. 1 and 4.
4. D. 1 and 2.

Correct Answer: C

What term is used to describe the testing of a continuity plan through a written scenario being used as the basis for discussion and simulation?

1. A. End-to-end testing.
2. B. Non-dynamicmodeling
3. C. Desk-top exercise.
4. D. Fault stressing
5. E. C

Correct Answer: E