Which type of testing is not typically utilized in patch management to ensure a patch does not introduce new issues?

• A.User acceptance testing, as it is less common in immediate patch deployment.
• B.Load testing, which is primarily used to test the performance under stress.
• C.Integration testing, generally focused more on new developments than on patches.
• D.Compatibility testing, usually not necessary for standalone systems.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a positive aspect of adhering to a secure SDLC?

• A.Promotes a "check the box" compliance approach
• B.A process that defines and meets both the business requirements and the security requirements
• C.A process that forces quality code repositories management
• D.Enables the process if system code is managed in different IT silos

Comment: *

Name: *

Email: *

Verification: *

What is the primary responsibility of asset owners within an organization?

• A.Ensuring proper maintenance, updating, securing, and disposal of assets
• B.Conducting performance evaluations of the organizational assets
• C.Managing asset-related communication across departments
• D.Overseeing the training of personnel on asset use

Comment: *

Name: *

Email: *

Verification: *

During a contract review, a manager notices that the remediation actions for security breaches are not specified. What should be the manager's immediate action?

• A.Wait until a breach occurs to determine if remediation steps are necessary.
• B.Recommend amendments to explicitly include remediation actions and penalties.
• C.Assess whether the existing clauses are sufficient without remediation specifics.
• D.Consult with other managers to decide if remediation actions need to be defined.

Comment: *

Name: *

Email: *

Verification: *

Effective Fourth-Nth party risk management requires _________ on subcontractors' compliance and performance.

• A.occasional assessments
• B.initial vetting only
• C.one-time evaluation
• D.regular monitoring

Comment: *

Name: *

Email: *

Verification: *