Which of the following ISO standards is entitled as "Information technology - Security techniques Information security management - Measurement"?

• A.ISO 27003
• B.ISO 27005
• C.ISO 27004
• D.ISO 27006

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the responsibilities of a custodian with regard to data in an information classification program? Each correct answer represents a complete solution. Choose three.

• A.Performing data restoration from the backups when necessary
• B.Running regular backups and routinely testing the validity of the backup data
• C.Determining what level of classification the information requires
• D.Controlling access, adding and removing privileges for individual users

Comment: *

Name: *

Email: *

Verification: *

In which of the following phases of the DITSCAP process does Security Test and Evaluation (ST&E) occur?

• A.Phase 2
• B.Phase 4
• C.Phase 3
• D.Phase 1

Comment: *

Name: *

Email: *

Verification: *

Which of the following DoD directives is referred to as the Defense Automation Resources Management Manual?

• A.DoD 8910.1
• B.DoD 7950.1-M
• C.DoDD 8000.1
• D.DoD 5200.22-M
• E.DoD 5200.1-R

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements are true about declarative security? Each correct answer represents a complete solution. Choose all that apply.

• A.It is employed in a layer that relies outside of the software code or uses attributes of the code.
• B.It applies the security policies on the software applications at their runtime.
• C.In this security, authentication decisions are made based on the business logic.
• D.In this security, the security decisions are based on explicit statements.

Comment: *

Name: *

Email: *

Verification: *