Which of the following processes provides a standard set of activities, general tasks, and a management structure to certify and accredit systems, which maintain the information assurance and the security posture of a system or site?

1. A. NSA-IAM
2. B. DITSCAP
3. C. ASSET
4. D. NIACAP

Correct Answer: D

Which of the following is used to back up forensic evidences or data folders from the network or locally attached hard disk drives?

1. A. WinHex
2. B. Vedit
3. C. Device Seizure
4. D. FAR system

Correct Answer: D

Which of the following architecturally related vulnerabilities is a hardware or software mechanism, which was installed to permit system maintenance and to bypass the system's security protections?

1. A. Maintenance hook
2. B. Lack of parameter checking
3. C. Time of Check to Time of Use (TOC/TOU) attack
4. D. Covert channel

Correct Answer: A

Which of the following governance bodies provides management, operational and technical controls to satisfy security requirements?

1. A. Senior Management
2. B. Business Unit Manager
3. C. Information Security Steering Committee
4. D. Chief Information Security Officer

Correct Answer: A

Mark works as a security manager for SoftTech Inc. He is involved in the BIA phase to create a document to be used to help understand what impact a disruptive event would have on the business. The impact might be financial or operational. Which of the following are the objectives related to the above phase in which Mark is involved? Each correct answer represents a part of the solution. Choose three.

1. A. Resource requirements identification
2. B. Criticality prioritization
3. C. Down-time estimation
4. D. Performing vulnerability assessment

Correct Answer: ABC