Which of the following are the tasks performed by the owner in the information classification
schemes? Each correct answer represents a part of the solution. Choose three.

Which of the following acts is used to recognize the importance of information security to the
economic and national security interests of the United States?

Gary is the project manager for his project. He and the project team have completed the
qualitative risk analysis process and are about to enter the quantitative risk analysis process when
Mary, the project sponsor, wants to know what quantitative risk analysis will review. Which of the
following statements best defines what quantitative risk analysis will review?

Henry is the project manager of the QBG Project for his company. This project has a budget of
$4,576,900 and is expected to last 18 months to complete. The CIO, a stakeholder in the project,
has introduced a scope change request for additional deliverables as part of the project work.
What component of the change control system would review the proposed changes’ impact on the
features and functions of the project’s product?

Which of the following are Service Level Agreement (SLA) structures as defined by ITIL? Each
correct answer represents a complete solution. Choose all that apply.

John works as a professional Ethical Hacker. He is assigned a project to test the security of
www.we-are-secure.com. You have searched all open ports of the we-are-secure server. Now,
you want to perform the next information-gathering step, i.e., passive OS fingerprinting. Which of
the following tools can you use to accomplish the task?

Numerous information security standards promote good security practices and define frameworks
or systems to structure the analysis and design for managing information security controls. Which
of the following are the U.S. Federal Government information security standards? Each correct
answer represents a complete solution. Choose all that apply.

Which of the following phases of NIST SP 800-37 C&A methodology examines the residual risk for
acceptability, and prepares the final security accreditation package?

The mission and business process level is the Tier 2. What are the various Tier 2 activities? Each
correct answer represents a complete solution. Choose all that apply.

You are responsible for network and information security at a metropolitan police station. The most
important concern is that unauthorized parties are not able to access data. What is this called?