1.
Which of the following DRP tests is plan distributed, and reviewed by the business units for its thoroughness and effectiveness?
2.
Which of the following SSE-CMM security engineering Process Areas (PA) specifies the security needs?
3.
Which of the following provides a means of predicting the outcome of the next software project conducted by an organization?
4.
Which of the following SSE-CMM security engineering Process Areas (PA) provides the security input?
5.
Which of the following terms describes the determination of the effect of changes to the information system on the security of the information system?
6.
Which of the following processes helps the organization to identify appropriate controls for reducing or eliminating risk during the risk mitigation process?
7.
Which of the following components in a TCB acts as the boundary that separates the TCB from the remainder of the system?
8.
Which of the following TCB components is a hardware, firmware, and software element that implements the reference monitor concept?


 
9.
Which of the following terms describes the annually expected financial loss to an organization from a threat?
10.
Which of the following processes is NOT included in the risk mitigation?