--Which of the following grants users and systems a predetermined level of access?

Accountability

Authentication

Authorization

Assurance

--Which of the following is a behavioral control that can be used to safeguard against the loss of integrity?

Rotation of duties

Log analysis

Code testing

Digital signatures

--Which of the following is a type of access control that is defined by a policy and cannot be changed by the information owner?

Mandatory access control

Discretionary access control

Role-based access control

Rule-based access control

--Which of the following is the most common web application vulnerability?

Failure to validate output

Failure to validate input

Dynamic data validation

Static data validation

--Which of the following statements about symmetric key cryptography is not true?

Symmetric key cryptography uses one shared key.

Symmetric algorithms can provide confidentiality.

Symmetric algorithms can provide nonrepudiation and authenticity.

Symmetric key cryptography uses a single secret key.

--Which of the following business continuity plans focus on the immediate and near-term alternative workplace and business processes?

Response plans

Contingency plans

Recovery plans

Resumption plans

--Which of the following best describes full-scale testing?

Testing conducted at the enterprise level with a full simulation of a disaster with suspending all operations

Scenario-driven exercises but limited in scope to simulate a failure of a critical business function

A discussion-based exercise that does not involve deploying equipment or other resources

A systematic walkthrough of the procedures to determine disaster readiness