Which of the following governance bodies provides management, operational and technical controls
to satisfy security requirements?

Which of the following divisions of the Trusted Computer System Evaluation Criteria (TCSEC) is
based on the Mandatory Access Control (MAC) policy?

Which of the following sites are similar to the hot site facilities, with the exception that they are
completely dedicated, self-developed recovery facilities?

Which of the following plans is documented and organized for emergency response, backup
operations, and recovery maintained by an activity as part of its security program that will ensure
the availability of critical resources and facilitates the continuity of operations in an emergency
situation?

Tomas is the project manager of the QWS Project and is worried that the project stakeholders will
want to change the project scope frequently. His fear is based on the many open issues in the
project and how the resolution of the issues may lead to additional project changes. On what
document are Tomas and the stakeholders working in this scenario?

Which of the following laws is defined as the Law of Nations or the legal norms that has developed
through the customary exchanges between states over time, whether based on diplomacy or
aggression?

Which of the following refers to the ability to ensure that the data is not modified or tampered
with?

Which of the following anti-child pornography organizations helps local communities to create
programs and develop strategies to investigate child exploitation?

You work as the project manager for Bluewell Inc. You are working on NGQQ Project for your
company. You have completed the risk analysis processes for the risk events. You and the project
team have created risk responses for most of the identified project risks. Which of the following risk
response planning techniques will you use to shift the impact of a threat to a third party, together
with the responses?

Fill in the blank with an appropriate word. _________ are used in information security to formalize
security policies.