- (Exam Topic 4)
What is the FIRST step in developing the vulnerability management program?

1. A. Baseline the Environment
2. B. Maintain and Monitor
3. C. Organization Vulnerability
4. D. Define Policy

Correct Answer: A

- (Exam Topic 5)
Which of the following best describes an access control process that confirms the identity of the entity seeking access to a logical or physical area?

1. A. Identification
2. B. Authorization
3. C. Authentication
4. D. Accountability

Correct Answer: B

- (Exam Topic 6)
What is an approach to estimating the strengths and weaknesses of alternatives used to determine options, which provide the BEST approach to achieving benefits while preserving savings called?

1. A. Business Impact Analysis
2. B. Economic Impact analysis
3. C. Return on Investment
4. D. Cost-benefit analysis

Correct Answer: D
Reference: https://artsandculture.google.com/entity/cost%E2%80%93benefit-analysis/m020w0x?hl=en

- (Exam Topic 1)
Risk that remains after risk mitigation is known as

1. A. Persistent risk
2. B. Residual risk
3. C. Accepted risk
4. D. Non-tolerated risk

Correct Answer: B

- (Exam Topic 6)
Which of the following strategies provides the BEST response to a ransomware attack?

1. A. Real-time off-site replication
2. B. Daily incremental backup
3. C. Daily full backup
4. D. Daily differential backup

Correct Answer: B