- (Exam Topic 15)
What are the essential elements of a Risk Assessment Report (RAR)?

1. A. Table of contents, testing criteria, and index
2. B. Table of contents, chapters, and executive summary
3. C. Executive summary, graph of risks, and process
4. D. Executive summary, body of the report, and appendices

Correct Answer: D

- (Exam Topic 15)
Which element of software supply chain management has the GREATEST security risk to organizations?

1. A. New software development skills are hard to acquire.
2. B. Unsupported libraries are often used.
3. C. Applications with multiple contributors are difficult to evaluate.
4. D. Vulnerabilities are difficult to detect.

Correct Answer: B

- (Exam Topic 9)
Which of the following BEST represents the principle of open design?

1. A. Disassembly, analysis, or reverse engineering will reveal the security functionality of the computer system.
2. B. Algorithms must be protected to ensure the security and interoperability of the designed system.
3. C. A knowledgeable user should have limited privileges on the system to prevent their ability to compromise security capabilities.
4. D. The security of a mechanism should not depend on the secrecy of its design or implementation.

Correct Answer: D

- (Exam Topic 15)
A developer begins employment with an information technology (IT) organization. On the first day, the developer works through the list of assigned projects and finds that some files within those projects aren't accessible, Other developers working on the same project have no trouble locating and working on the. What is the MOST likely explanation for the discrepancy in access?

1. A. The IT administrator had failed to grant the developer privileged access to the servers.
2. B. The project files were inadvertently deleted.
3. C. The new developer's computer had not been added to an access control list (ACL).
4. D. The new developer's user account was not associated with the right roles needed for the projects.

Correct Answer: A

- (Exam Topic 11)
What is the GREATEST challenge of an agent-based patch management solution?

1. A. Time to gather vulnerability information about the computers in the program
2. B. Requires that software be installed, running, and managed on all participating computers
3. C. The significant amount of network bandwidth while scanning computers
4. D. The consistency of distributing patches to each participating computer

Correct Answer: B