- (Exam Topic 9)
A vulnerability test on an Information System (IS) is conducted to

1. A. exploit security weaknesses in the IS.
2. B. measure system performance on systems with weak security controls.
3. C. evaluate the effectiveness of security controls.
4. D. prepare for Disaster Recovery (DR) planning.

Correct Answer: C

- (Exam Topic 14)
Which of the following threats exists with an implementation of digital signatures?

1. A. Spoofing
2. B. Substitution
3. C. Content tampering
4. D. Eavesdropping

Correct Answer: A

- (Exam Topic 9)
Which one of the following transmission media is MOST effective in preventing data interception?

1. A. Microwave
2. B. Twisted-pair
3. C. Fiber optic
4. D. Coaxial cable

Correct Answer: C

- (Exam Topic 14)
Limiting the processor, memory, and Input/output (I/O) capabilities of mobile code is known as

1. A. code restriction.
2. B. on-demand compile.
3. C. sandboxing.
4. D. compartmentalization.

Correct Answer: C

- (Exam Topic 12)
When writing security assessment procedures, what is the MAIN purpose of the test outputs and reports?

1. A. To force the software to fail and document the process
2. B. To find areas of compromise in confidentiality and integrity
3. C. To allow for objective pass or fail decisions
4. D. To identify malware or hidden code within the test results

Correct Answer: C