Fill in the blank with an appropriate phrase. is used to provide security mechanisms for the storage, processing, and transfer of data.

• A.Data classification

Comment: *

Name: *

Email: *

Verification: *

DRAG DROP
RCA (root cause analysis) is an iterative and reactive method that identifies the root cause of various incidents, and the actions required to prevent these incidents from reoccurring. RCA is classified in various categories. Choose appropriate categories and drop them in front of their respective functions.
Select and Place:

Correct Answer:

Explanation/Reference:
The various categories of root cause analysis (RCA) are as follows: Safety-based RC A.
It consists of plans from the health and safety areas. Production-based RCA. It integrates quality control paradigms. Process-based RCA. It integrates business processes. Failure-based RCA. It integrates failure analysis processes as employed in engineering and maintenance. Systems-based RCA. It integrates the methods from risk and systems analysis.

Comment: *

Name: *

Email: *

Verification: *

Which of the following NIST documents provides a guideline for identifying an information system as a National Security System?

• A.NIST SP 800-37
• B.NIST SP 800-59
• C.NIST SP 800-53
• D.NIST SP 800-60
• E.NIST SP 800-53A

Comment: *

Name: *

Email: *

Verification: *

ISO 27003 is an information security standard published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). Which of the following elements does this standard contain? Each correct answer represents a complete solution. Choose all that apply.

• A.Inter-Organization Co-operation
• B.Information Security Risk Treatment
• C.CSFs (Critical success factors)
• D.ystem requirements for certification bodies Managements
• E.Terms and Definitions
• F.Guidance on process approach

Comment: *

Name: *

Email: *

Verification: *

John works as a security manager for SoftTech Inc. He is working with his team on the disaster recovery management plan. One of his team members has a doubt related to the most cost effective DRP testing plan. According to you, which of the following disaster recovery testing plans is the most cost-effective and efficient way to identify areas of overlap in the plan before conducting more demanding training exercises?

• A.Full-scale exercise
• B.Walk-through drill
• C.Structured walk-through test
• D.Evacuation drill

Comment: *

Name: *

Email: *

Verification: *