- (Exam Topic 15)
The initial security categorization should be done early in the system life cycle and should be reviewed periodically. Why is it important for this to be done correctly?

1. A. It determines the security requirements.
2. B. It affects other steps in the certification and accreditation process.
3. C. It determines the functional and operational requirements.
4. D. The system engineering process works with selected security controls.

Correct Answer: B

- (Exam Topic 15)
A security engineer is required to integrate security into a software project that is implemented by small groups test quickly, continuously, and independently develop, test, and deploy code to the cloud. The engineer will MOST likely integrate with which software development process’

1. A. Service-oriented architecture (SOA)
2. B. Spiral Methodology
3. C. Structured Waterfall Programming Development
4. D. Devops Integrated Product Team (IPT)

Correct Answer: C

- (Exam Topic 7)
A Business Continuity Plan/Disaster Recovery Plan (BCP/DRP) will provide which of the following?

1. A. Guaranteed recovery of all business functions
2. B. Minimization of the need decision making during a crisis
3. C. Insurance against litigation following a disaster
4. D. Protection from loss of organization resources

Correct Answer: D

- (Exam Topic 13)
“Stateful” differs from “Static” packet filtering firewalls by being aware of which of the following?

1. A. Difference between a new and an established connection
2. B. Originating network location
3. C. Difference between a malicious and a benign packet payload
4. D. Originating application session

Correct Answer: A

- (Exam Topic 13)
Which of the following is the MOST effective practice in managing user accounts when an employee is terminated?

1. A. Implement processes for automated removal of access for terminated employees.
2. B. Delete employee network and system IDs upon termination.
3. C. Manually remove terminated employee user-access to all systems and applications.
4. D. Disable terminated employee network ID to remove all access.

Correct Answer: B