Fill in the blank with an appropriate phrase. An is an intensive application of the OPSEC process to an existing operation or activity by a multidiscipline team of experts.

1. A. OPSEC assessment

Correct Answer: A

Which of the following are the common roles with regard to data in an information classification program? Each correct answer represents a complete solution. Choose all that apply.

1. A. Editor
2. B. Custodian
3. C. Owner
4. D. Security auditor
5. E. User

Correct Answer: BCDE

Your project has several risks that may cause serious financial impact should they happen. You have studied the risk events and made some potential risk responses for the risk events but
management wants you to do more. They'd like for you to create some type of a chart that identified the risk
probability and impact with a financial amount for each risk event. What is the likely outcome of creating this type of chart?

1. A. Quantitative analysis
2. B. Contingency reserve
3. C. Risk response
4. D. Risk response plan

Correct Answer: B

Which of the following are the examples of administrative controls? Each correct answer represents a complete solution. Choose all that apply.

1. A. Security awareness training
2. B. Security policy
3. C. Data Backup
4. D. Auditing

Correct Answer: AB

Which of the following SDLC phases consists of the given security controls. Misuse Case Modeling Security Design and Architecture Review Threat and Risk Modeling Security Requirements and Test Cases Generation

1. A. Design
2. B. Maintenance
3. C. Deployment
4. D. Requirements Gathering

Correct Answer: A