Which of the following is an inherent weakness of signature-based intrusion detection systems?

• A.A higher number of false positives
• B.New attack methods will be missed
• C.Long duration probing will be missed
• D.Attack profiles can be easily spoofed

Comment: *

Name: *

Email: *

Verification: *

Successful social engineering attacks can BEST be prevented through:

• A.preemployment screening.
• B.close monitoring of users' access patterns.
• C.periodic awareness training.
• D.efficient termination procedures.

Comment: *

Name: *

Email: *

Verification: *

Which of the following metrics is the BEST indicator of an abuse of the change management process that could compromise information security?

• A.Large percentage decrease in monthly change requests
• B.Small number of change requests
• C.Percentage of changes that include post-approval supplemental add-ons
• D.High ratio of lines of code changed to total lines of code

Comment: *

Name: *

Email: *

Verification: *

Which of the following risks would BEST be assessed using quantitative risk assessment techniques?

• A.Customer data stolen
• B.An electrical power outage
• C.A web site defaced by hackers
• D.Loss of the software development team

Comment: *

Name: *

Email: *

Verification: *

What is the PRIMARY objective of performing a vulnerability assessment following a business system update?

• A.Improve the change control process
• B.Update the threat landscape
• C.Review the effectiveness of controls
• D.Determine operational losses

Comment: *

Name: *

Email: *

Verification: *