You work as a Network Administrator for uCertify Inc. You need to secure web services of your
company in order to have secure transactions. Which of the following will you recommend for
providing security?

What are the various benefits of a software interface according to the “Enhancing the
Development Life Cycle to Produce Secure Software” document? Each correct answer represents
a complete solution. Choose three.

Elizabeth is a project manager for her organization and she finds risk management to be very
difficult for her to manage. She asks you, a lead project manager, at what stage in the project will
risk management become easier. What answer best resolves the difficulty of risk management
practices and the effort required?

Which of the following describes a residual risk as the risk remaining after a risk mitigation has
occurred?

You work as a Security Manager for Tech Perfect Inc. You want to save all the data from the SQL
injection attack, which can read sensitive data from the database and modify database data using
some commands, such as Insert, Update, and Delete. Which of the following tasks will you
perform? Each correct answer represents a complete solution. Choose three.

Security is a state of well-being of information and infrastructures in which the possibilities of
successful yet undetected theft, tampering, and/or disruption of information and services are kept
low or tolerable. Which of the following are the elements of security? Each correct answer

represents a complete solution. Choose all that apply.

Harry is the project manager of the MMQ Construction Project. In this project, Harry has identified
a supplier who can create stained glass windows for 1,000 window units in the construction
project. The supplier is an artist who works by himself, but creates windows for several companies
throughout the United States. Management reviews the proposal to use this supplier and while
they agree that the supplier is talented, they do not think the artist can fulfill the 1,000 window units
in time for the project’s deadline. Management asked Harry to find a supplier who can fulfill the
completion of the windows by the needed date in the schedule. What risk response has
management asked Harry to implement?

Which of the following refers to the ability to ensure that the data is not modified or tampered with?

The Phase 2 of DITSCAP C&A is known as Verification. The goal of this phase is to obtain a fully
integrated system for certification testing and accreditation. What are the process activities of this
phase? Each correct answer represents a complete solution. Choose all that apply.

Which of the following elements sets up a requirement to receive the constrained requests over a
protected layer connection, such as TLS (Transport Layer Security)?