The service-oriented modeling framework (SOMF) provides a common modeling notation to address alignment between business and IT organizations. Which of the following principles does the SOMF concentrate on? Each correct answer represents a part of the solution. Choose all that apply.
#151
Answer: ABCE✅ Correct❌ Incorrect
Which of the following DoD directives is referred to as the Defense Automation Resources Management Manual?
#152
Answer: B✅ Correct❌ Incorrect
Which of the following access control models are used in the commercial sector? Each correct answer represents a complete solution. Choose two.
#153
Answer: AC✅ Correct❌ Incorrect
Which of the following testing methods verifies the interfaces between components against a software design?
#154
Answer: B✅ Correct❌ Incorrect
Which of the following statements best describes the difference between the role of a data owner and the role of a data custodian?
#155
Answer: D✅ Correct❌ Incorrect
Della works as a security engineer for BlueWell Inc. She wants to establish configuration management and control procedures that will document proposed or actual changes to the information system. Which of the following phases of NIST SP 800-37 C&A methodology will define the above task?
#156
Answer: C✅ Correct❌ Incorrect
Which of the following cryptographic system services ensures that information will not be disclosed to any unauthorized person on a local network?
#157
Answer: D✅ Correct❌ Incorrect
Which of the following secure coding principles and practices defines the appearance of code listing so that a code reviewer and maintainer who have not written that code can easily understand it?
#158
Answer: C✅ Correct❌ Incorrect
Which of the following technologies is used by hardware manufacturers, publishers, copyright holders and individuals to impose limitations on the usage of digital content and devices?
#159
Answer: D✅ Correct❌ Incorrect
Which of the following processes provides a standard set of activities, general tasks, and a management structure to certify and accredit systems, which maintain the information assurance and the security posture of a system or site?
#160
Answer: B✅ Correct❌ Incorrect
Which of the following ISO standards provides guidelines for accreditation of an organization that is concerned with certification and registration related to ISMS?
#161
Answer: A✅ Correct❌ Incorrect
Which of the following security issues does the Bell-La Padula model focus on?
#162
Answer: B✅ Correct❌ Incorrect
Which of the following phases of the DITSCAP C&A process is used to define the C&A level of effort, to identify the main C&A roles and responsibilities, and to create an agreement on the method for implementing the security requirements?
#163
Answer: A✅ Correct❌ Incorrect
Numerous information security standards promote good security practices and define frameworks or systems to structure the analysis and design for managing information security controls. Which of the following are the international information security standards? Each correct answer represents a complete solution.
Choose all that apply.
#164
Answer: BCD✅ Correct❌ Incorrect
The Data and Analysis Center for Software (DACS) specifies three general principles for software assurance which work as a framework in order to categorize various secure design principles. Which of the following principles and practices does the General Principle 1 include? Each correct answer represents a complete solution. Choose two.
#165
Answer: AD✅ Correct❌ Incorrect
In which of the following phases of the DITSCAP process does Security Test and Evaluation (ST&E) occur?
#166
Answer: B✅ Correct❌ Incorrect
Which of the following access control models uses a predefined set of access privileges for an object of a system?
#167
Answer: D✅ Correct❌ Incorrect
Martha works as a Project Leader for BlueWell Inc. She and her team have developed accounting software. The software was performing well. Recently, the software has been modified. The users of this software are now complaining about the software not working properly. Which of the following actions will she take to test the software?
#168
Answer: B✅ Correct❌ Incorrect
Which of the following elements of BCP process includes the areas of plan implementation, plan testing, and ongoing plan maintenance, and also involves defining and documenting the continuity strategy?
#169
Answer: D✅ Correct❌ Incorrect
Which of the following refers to a process that is used for implementing information security?
#170
Answer: D✅ Correct❌ Incorrect
The Web resource collection is a security constraint element summarized in the Java Servlet Specification v2.4. Which of the following elements does it include?
Each correct answer represents a complete solution. Choose two.
#171
Answer: BD✅ Correct❌ Incorrect
You are advising a school district on disaster recovery plans. In case a disaster affects the main IT centers for the district they will need to be able to work from an alternate location. However, budget is an issue. Which of the following is most appropriate for this client?
#172
Answer: C✅ Correct❌ Incorrect
Which of the following activities are performed by the 'Do' cycle component of PDCA (plan-do-check-act)? Each correct answer represents a complete solution.
Choose all that apply.