Which of the following methods can be helpful to eliminate social engineering threat?
Each correct answer represents a complete solution. Choose three.

You work as a security manager for SoftTech Inc. You are conducting a security awareness campaign
for your employees. Which of the following ideas will you consider the best when conducting a
security awareness campaign?

Which of the following ‘Code of Ethics Canons’ of the ‘(ISC)2 Code of Ethics’ states to act honorably,
honestly, justly, responsibly and legally?

Which of the following rated systems of the Orange book has mandatory protection of the TCB?

Which of the following SDLC phases consists of the given security controls.
Misuse Case Modeling
Security Design and Architecture Review
Threat and Risk Modeling
Security Requirements and Test Cases Generation

Which of the following liabilities is a third-party liability in which an individual may be responsible
for an action by another party?

Which of the following measurements of an enterprise’s security state is the process whereby an
organization establishes the parameters within which programs, investments, and acquisitions reach
the desired results?

You are the Network Administrator for a software company. Due to the nature of your company’s
business, you have a significant number of highly computer savvy users. However, you have still
decided to limit each user access to only those resources required for their job, rather
than give wider access to the technical users (such as tech support and software engineering
personnel). What is this an example of?

Which of the following are examples of administrative controls that involve all levels of employees
within an organization and determine which users have access to what resources and information?
Each correct answer represents a complete solution. Choose three.

Which of the following processes provides a standard set of activities, general tasks, and a
management structure to certify and accredit systems, which maintain the information assurance
and the security posture of a system or site?