Your company is covered under a liability insurance policy, which provides various liability coverage for information security risks, including any physical damage of assets, hacking attacks, etc. Which of the following risk management techniques is your company using?

1. A. Risk mitigation
2. B. Risk transfer
3. C. Risk acceptance
4. D. Risk avoidance

Correct Answer: B

Which of the following evidences are the collection of facts that, when considered together, can be used to infer a conclusion about the malicious activity/person?

1. A. Direct
2. B. Circumstantial
3. C. Incontrovertible
4. D. Corroborating

Correct Answer: B

Which of the following test methods has the objective to test the IT system from the viewpoint of a threat- source and to identify potential failures in the IT system protection schemes?

1. A. Penetration testing
2. B. On-site interviews
3. C. Security Test and Evaluation (ST&E)
4. D. Automated vulnerability scanning tool

Correct Answer: A

You are the project manager of the HJK Project for your organization. You and the project team have created risk responses for many of the risk events in the project. Where should you document the proposed responses and the current status of all identified risks?

1. A. Risk management plan
2. B. Lessons learned documentation
3. C. Risk register
4. D. Stakeholder management strategy

Correct Answer: C

Which of the following are the ways of sending secure e-mail messages over the Internet? Each correct answer represents a complete solution. Choose two.

1. A. TLS
2. B. PGP
3. C. S/MIME
4. D. IPSec

Correct Answer: BC