You work as a security manager for SoftTech Inc. You are conducting a security awareness campaign for your employees. One of the employees of your organization asks you the purpose of the security awareness, training and education program. What will be your answer?

1. A. It improves the possibility for career advancement of the IT staff.
2. B. It improves the security of vendor relations.
3. C. It improves the performance of a company's intranet.
4. D. It improves awareness of the need to protect system resource

Correct Answer: D

Which of the following security models focuses on data confidentiality and controlled access to classified information?

1. A. Bell-La Padula model
2. B. Take-Grant model
3. C. Clark-Wilson model
4. D. Biba model

Correct Answer: A

Which of the following processes is used by remote users to make a secure connection to internal resources after establishing an Internet connection?

1. A. Packet filtering
2. B. Tunneling
3. C. Packet sniffing
4. D. Spoofing

Correct Answer: B

Software Development Life Cycle (SDLC) is a logical process used by programmers to develop software. Which of the following SDLC phases meets the audit objectives defined below: System and data are validated. System meets all user requirements. System meets all control requirements.

1. A. Programming and training
2. B. Evaluation and acceptance
3. C. Definition
4. D. Initiation

Correct Answer: B

Which of the following 'Code of Ethics Canons' of the '(ISC)2 Code of Ethics' states to act honorably, honestly, justly, responsibly and legally?

1. A. Second Code of Ethics Canons
2. B. Fourth Code of Ethics Canons
3. C. First Code of Ethics Canons
4. D. Third Code of Ethics Canons

Correct Answer: A