An organization must comply with a new regulation that requires the organization to determine if
an external attacker is able to gain access to its systems from outside the network. Which of the
following should the company conduct to meet the regulation’s criteria?

The sales division within a large organization purchased touch screen tablet computers for all 250
sales representatives in an effort to showcase the use of technology to its customers and increase
productivity. This includes the development of a new product tracking application that works with
the new platform. The security manager attempted to stop the deployment because the equipment
and application are non-standard and unsupported within the organization. However, upper
management decided to continue the deployment. Which of the following provides the BEST
method for evaluating the potential threats?

Based on the results of a recent audit, a company rolled out a standard computer image in an
effort to provide consistent security configurations across all computers. Which of the following
controls provides the GREATEST level of certainty that unauthorized changes are not occurring?