The mission and business process level is the Tier 2. What are the various Tier 2 activities? Each correct answer represents a complete solution. Choose all that apply.

• A.Developing an organization-wide information protection strategy and incorporating high-level information security requirements
• B.Defining the types of information that the organization needs, to successfully execute the stated missions and business processes
• C.Specifying the degree of autonomy for the subordinate organizations
• D.Defining the core missions and business processes for the organization
• E.Prioritizing missions and business processes with respect to the goals and objectives of the organization

Comment: *

Name: *

Email: *

Verification: *

At which of the following levels of robustness in DRM must the security functions be immune to widely available tools and specialized tools and resistant to professional tools?

• A.Level 2
• B.Level 4
• C.Level 1
• D.Level 3

Comment: *

Name: *

Email: *

Verification: *

SIMULATION
Fill in the blank with an appropriate security type. applies the internal security policies of the software applications when they are deployed.

Comment: *

Name: *

Email: *

Verification: *

Bill is the project manager of the JKH Project. He and the project team have identified a risk event in the project with a high probability of occurrence and the risk event has a high cost impact on the project. Bill discusses the risk event with Virginia, the primary project customer, and she decides that the requirements surrounding the risk event should be removed from the project. The removal of the requirements does affect the project scope, but it can release the project from the high risk exposure. What risk response has been enacted in this project?

• A.Mitigation
• B.Transference
• C.Acceptance
• D.Avoidance
• E.Explanation:
  This is an example of the avoidance risk response. Because the project plan has been changed to avoid the risk event, so it is considered the avoidance risk response. Risk avoidance is a technique used for threats. It creates changes to the project management plan that are meant to either eliminate the risk completely or to protect the project objectives from its impact.
  Risk avoidance removes the risk event entirely either by adding additional steps to avoid the event or reducing the project scope requirements. It may seem the answer to all possible risks, but avoiding risks also means losing out on the potential gains that accepting (retaining) the risk might have allowed.

Comment: *

Name: *

Email: *

Verification: *

You work as a security engineer for BlueWell Inc. Which of the following documents will you use as a guide for the security certification and accreditation of Federal Information Systems?

• A.NIST Special Publication 800-60
• B.NIST Special Publication 800-53
• C.NIST Special Publication 800-37
• D.NIST Special Publication 800-59

Comment: *

Name: *

Email: *

Verification: *