QUESTION 1

External auditing is an example of an operational risk assessment task.

True

False

12 points

QUESTION 2

Google is becoming a primary tool for would-be attackers to profile an organization looking for weaknesses.

True

False

12 points

QUESTION 3

Most passive testing involves either a tool or a person performing functions against a resource to look for known responses.

True

False

12 points

QUESTION 4

Storing or processing sensitive data off-site through a third party is not a cause of concern to be addressed when profiling a third-party vendor.

True

False

12 points

QUESTION 5

Blackbox application testing is a passive form of assessment.

True

False

QUESTION 6

On the Qualitative Vulnerability Severity Scale, the deviation from a recommended practice or standard would an example of moderate level severity criteria.

True

False