- (Exam Topic 14)
Who is essential for developing effective test scenarios for disaster recovery (DR) test plans?

1. A. Business line management and IT staff members
2. B. Chief Information Officer (CIO) and DR manager
3. C. DR manager end IT staff members
4. D. IT staff members and project managers

Correct Answer: B

- (Exam Topic 14)
Which of the following BEST provides for non-repudiation od user account actions?

1. A. Centralized authentication system
2. B. File auditing system
3. C. Managed Intrusion Detection System (IDS)
4. D. Centralized logging system

Correct Answer: D

- (Exam Topic 13)
Which of the following is a characteristic of an internal audit?

1. A. An internal audit is typically shorter in duration than an external audit.
2. B. The internal audit schedule is published to the organization well in advance.
3. C. The internal auditor reports to the Information Technology (IT) department
4. D. Management is responsible for reading and acting upon the internal audit results

Correct Answer: D

- (Exam Topic 14)
A security professional recommends that a company integrate threat modeling into its Agile development processes. Which of the following BEST describes the benefits of this approach?

1. A. Reduce application development costs.
2. B. Potential threats are addressed later in the Software Development Life Cycle (SDLC).
3. C. Improve user acceptance of implemented security controls.
4. D. Potential threats are addressed earlier in the Software Development Life Cycle (SDLC).

Correct Answer: D

- (Exam Topic 13)
Which of the following is a benefit in implementing an enterprise Identity and Access Management (IAM) solution?

1. A. Password requirements are simplified.
2. B. Risk associated with orphan accounts is reduced.
3. C. Segregation of duties is automatically enforced.
4. D. Data confidentiality is increased.

Correct Answer: A