Which of the following approaches can be used to build a security program? Each correct answer
represents a complete solution. Choose all that apply.

Which of the following plans is a comprehensive statement of consistent actions to be taken
before, during, and after a disruptive event that causes a significant loss of information systems
resources?

Which of the following can be used to accomplish authentication? Each correct answer represents
a complete solution. Choose all that apply.

In which type of access control do user ID and password system come under?

Which of the following is an attack with IP fragments that cannot be reassembled?

Which of the following are examples of passive attacks? Each correct answer represents a
complete solution. Choose all that apply.

According to the NIST SAMATE, dynamic analysis tools operate by generating runtime
vulnerability scenario using some functions. Which of the following are functions that are used by
the dynamic analysis tools and are summarized in the NIST SAMATE? Each correct answer
represents a complete solution. Choose all that apply.

Which of the following is a formula, practice, process, design, instrument, pattern, or compilation of
information which is not generally known, but by which a business can obtain an economic
advantage over its competitors?

A service provider guarantees for end-to-end network traffic performance to a customer. Which of
the following types of agreement is this?

Which of the following components of configuration management involves periodic checks to
determine the consistency and completeness of accounting information and to verify that all
configuration management policies are being followed?