The National Computer Security Center (NCSC) is:

• A.An activity within the US Department of Commerce that provides
  information security awareness training and develops standards for
  protecting sensitive but unclassified information
• B.A joint enterprise between the NSA and NIST for developing
  cryptographic algorithms and standards
• C.A division of the National Institute of Standards and Technology
  (NIST) that issues standards for cryptographic functions and
  publishes them as Federal Information Processing Standards (FIPS)
• D.A branch of the National Security Agency (NSA) that initiates
  research and develops and publishes standards and criteria for
  trusted information systems

Comment: *

Name: *

Email: *

Verification: *

Which disaster recovery/emergency management plan testing type
below is considered the most cost-effective and efficient way to identify areas of overlap in the plan before conducting more demanding training exercises?

• A.Evacuation drill
• B.Table-top exercise test
• C.Full-scale exercise
• D.Walk-through drill

Comment: *

Name: *

Email: *

Verification: *

What should an auditor do when conducting a periodic audit on media retention?

• A.Ensure authorized personnel are in possession of paper copies containing Personally Identifiable Information....
• B.Check that hard disks containing backup data that are still within a retention cycle are being destroyed....
• C.Check electronic storage media to ensure records are not retained past their destruction date.
• D.Ensure that data shared with outside organizations is no longer on a retention schedule.

Comment: *

Name: *

Email: *

Verification: *

On UNIX systems, passwords shall be kept:

• A.In any location on behalf of root.
• B.In a shadow password file.
• C.In the /etc/passwd file.
• D.In root.

Comment: *

Name: *

Email: *

Verification: *

Java is not:

• A.Object-oriented.
• B.Distributed.
• C.Architecture Specific.
• D.Multithreaded.

Comment: *

Name: *

Email: *

Verification: *