1. Which of the following features of a library control software package would protect against unauthorized updating of source code?

• A. Required approvals at each life cycle step
• B. Date and time stamping of source and object code
• C. Access controls for source libraries
• D. Release-to-release comparison of source code

2. An organization wants to ensure its confidential data is isolated in a multi-tenanted environment at a well-known cloud service provider. Which of the following is the BEST way to ensure the data is adequately protected?

• A. Obtain documentation of the encryption management practices.
• B. Verify the provider follows a cloud service framework standard.
• C. Ensure an audit of the provider is conducted to identify control gaps.
• D. Review the provider's information security policies and procedures.

3. Which of the following is the FIRST step required to achieve effective performance measurement?

• A. Select and place sensors
• B. Implement control objectives
• C. Validate and calibrate metrics
• D. Define meaningful metrics