- (Exam Topic 10)
Which of the following are required components for implementing software configuration management systems?

1. A. Audit control and signoff
2. B. User training and acceptance
3. C. Rollback and recovery processes
4. D. Regression testing and evaluation

Correct Answer: C

- (Exam Topic 7)
Which of the following is the FIRST step in the incident response process?

1. A. Determine the cause of the incident
2. B. Disconnect the system involved from the network
3. C. Isolate and contain the system involved
4. D. Investigate all symptoms to confirm the incident

Correct Answer: D

- (Exam Topic 9)
What is the ultimate objective of information classification?

1. A. To assign responsibility for mitigating the risk to vulnerable systems
2. B. To ensure that information assets receive an appropriate level of protection
3. C. To recognize that the value of any item of information may change over time
4. D. To recognize the optimal number of classification categories and the benefits to be gained from their use

Correct Answer: B

- (Exam Topic 9)
An organization is selecting a service provider to assist in the consolidation of multiple computing sites including development, implementation and ongoing support of various computer systems. Which of the following MUST be verified by the Information Security Department?

1. A. The service provider's policies are consistent with ISO/IEC27001 and there is evidence that the service provider is following those policies.
2. B. The service provider will segregate the data within its systems and ensure that each region's policies are met.
3. C. The service provider will impose controls and protections that meet or exceed the current systems controls and produce audit logs as verification.
4. D. The service provider's policies can meet the requirements imposed by the new environment even if they differ from the organization's current policies.

Correct Answer: D

- (Exam Topic 15)
After the INITIAL input o f a user identification (ID) and password, what is an authentication system that prompts the user for a different response each time the user logs on?

1. A. Persons Identification Number (PIN)
2. B. Secondary password
3. C. Challenge response
4. D. Voice authentication

Correct Answer: C