You company suspects an employee of sending unauthorized emails to competitors. These emails are alleged to contain confidential company dat a. Which of the following is the most important step for you to take in preserving the chain of custody?

1. A. Preserve the email server including all logs.
2. B. Seize the employee's PC.
3. C. Make copies of that employee's email.
4. D. Place spyware on the employee's PC to confirm these activitie

Correct Answer: A

Which of the following refers to an information security document that is used in the United States Department of Defense (DoD) to describe and accredit networks and systems?

1. A. SSAA
2. B. FITSAF
3. C. FIPS
4. D. TCSEC

Correct Answer: A

Which of the following statements are true about security risks? Each correct answer represents a complete solution. Choose three.

1. A. They can be analyzed and measured by the risk analysis process.
2. B. They can be removed completely by taking proper actions.
3. C. They can be mitigated by reviewing and taking responsible actions based on possible risks.
4. D. They are considered an indicator of threats coupled with vulnerabilit

Correct Answer: ACD

Which of the following statements about the availability concept of Information security management is true?

1. A. It determines actions and behaviors of a single individual within a system.
2. B. It ensures reliable and timely access to resources.
3. C. It ensures that unauthorized modifications are not made to data byauthorized personnel or processes.
4. D. It ensures that modifications are not made to data by unauthorized personnel or processe

Correct Answer: B

Fill in the blank with the appropriate phrase. is the ability to record and report on the configuration baselines associated with each configuration item at any moment of time.

1. A. Configuration status accounting

Correct Answer: A