- (Exam Topic 1)
Which of the following terms refers to the method that allows or restricts specific types of packets from crossing over the firewall?

1. A. Hacking
2. B. Packet filtering
3. C. Web caching
4. D. Spoofing

Correct Answer: B

- (Exam Topic 1)
Which of the following are the initial steps required to perform a risk analysis process? Each correct answer represents a part of the solution. Choose three.

1. A. Estimate the potential losses to assets by determining their value.
2. B. Establish the threats likelihood and regularity.
3. C. Valuations of the critical assets in hard costs.
4. D. Evaluate potential threats to the assets.

Correct Answer: ABD

- (Exam Topic 2)
Your company is covered under a liability insurance policy, which provides various liability coverage for information security risks, including any physical damage of assets, hacking attacks, etc. Which of the following risk management techniques is your company using?

1. A. Risk acceptance
2. B. Risk avoidance
3. C. Risk transfer
4. D. Risk mitigation

Correct Answer: C

- (Exam Topic 2)
Which of the following decides access control on an object in the mandatory access control (MAC) environment?

1. A. Sensitivity label
2. B. Event log
3. C. System Access Control List (SACL)
4. D. Security log

Correct Answer: A