Question 1

5pts

What is any device or process that reduces risk?

Firewall

Access control list

Security control

Mantrap

Question 2

5pts

Which type of risk control refers to spreading the risk?

Preventative control

Mantrap

Distributive allocation

Detective control

Question 3

5pts

Assessing technology should include testing of technology assets to identify any _____?

corrupt firewall rules

orphaned accounts

fraudulent activity

vulnerabilities

Question 4

5pts

What is a methodology for making modifications to a system and keeping track of those changes?

Risk management

ITIL

Change management

Audit logs

Question 5

5pts

A privilege is a subject's access level over an object.

True

False