- (Exam Topic 14)
A security engineer is designing a Customer Relationship Management (CRM) application for a third-party vendor. In which phase of the System Development Life Cycle (SDLC) will it be MOST beneficial to conduct a data sensitivity assessment?

1. A. Development / Acquisition
2. B. Initiation
3. C. Enumeration
4. D. Operation / Maintenance

Correct Answer: B

- (Exam Topic 9)
Which of the following is an effective method for avoiding magnetic media data remanence?

1. A. Degaussing
2. B. Encryption
3. C. Data Loss Prevention (DLP)
4. D. Authentication

Correct Answer: A

- (Exam Topic 15)
a large organization uses biometrics to allow access to its facilities. It adjusts the biometric value for incorrectly granting or denying access so that the two numbers are the same.
What is this value called?

1. A. False Rejection Rate (FRR)
2. B. Accuracy acceptance threshold
3. C. Equal error rate
4. D. False Acceptance Rate (FAR)

Correct Answer: C

- (Exam Topic 2)
Which of the following is MOST important when assigning ownership of an asset to a department?

1. A. The department should report to the business owner
2. B. Ownership of the asset should be periodically reviewed
3. C. Individual accountability should be ensured
4. D. All members should be trained on their responsibilities

Correct Answer: D

- (Exam Topic 14)
Which of the following is the BEST identity-as-a-service (IDaaS) solution for validating users?

1. A. Lightweight Directory Access Protocol (LDAP)
2. B. Security Assertion Markup Language (SAM.)
3. C. Single Sign-on (SSO)
4. D. Open Authentication (OAuth)

Correct Answer: A